Hallo!

Ich habe kürzlich den Fehler gemacht Azureus zu installieren und habe mir wohl einiges eingefangen.
Aufgefallen dass etwas nicht stimmt war durch Folgendes:



Manchmal frieren markierte Schaltflächen nach dem Ausführen ein. Hier Photoshop "Videoframes in Ebenen...". Es tritt aber auch bei vielen anderen Programmen auf.
Grafikkarte updaten hat nicht geholfen.

Zusätzlich habe ich einige Prozesse im Task Manager gesehen, die ich nicht zuordnen konnte.

Hier einmal die Files aus der Anleitung:

1. defogger_disable:
Keine Fehler

2a. OTL.txt:

OTL logfile created on: 22.07.2013 20:18:51 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\MajorVegi\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
16,00 Gb Total Physical Memory | 13,70 Gb Available Physical Memory | 85,63% Memory free
31,99 Gb Paging File | 29,47 Gb Available in Paging File | 92,11% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 148,95 Gb Total Space | 59,95 Gb Free Space | 40,25% Space Free | Partition Type: NTFS
Drive E: | 465,75 Gb Total Space | 326,96 Gb Free Space | 70,20% Space Free | Partition Type: NTFS
Drive F: | 465,75 Gb Total Space | 339,49 Gb Free Space | 72,89% Space Free | Partition Type: NTFS
 
Computer Name: MARTIN | User Name: MajorVegi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.07.22 20:18:29 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\MajorVegi\Downloads\OTL.exe
PRC - [2013.07.08 06:26:34 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012.06.01 09:22:32 | 000,032,884 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\V0770Mon.exe
PRC - [2011.09.15 10:15:37 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
PRC - [2011.07.11 23:48:10 | 001,595,520 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winamp.exe
PRC - [2011.07.11 23:47:06 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
PRC - [2006.10.22 23:24:02 | 000,620,152 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.07.22 18:57:44 | 000,204,800 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\winamp.lng
MOD - [2013.07.22 18:57:44 | 000,155,648 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\vis_milk2.lng
MOD - [2013.07.22 18:57:44 | 000,088,064 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\vis_avs.lng
MOD - [2013.07.22 18:57:44 | 000,039,424 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\pmp_wifi.lng
MOD - [2013.07.22 18:57:44 | 000,036,864 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\pmp_ipod.lng
MOD - [2013.07.22 18:57:44 | 000,036,352 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ombrowser.lng
MOD - [2013.07.22 18:57:44 | 000,020,480 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\pmp_android.lng
MOD - [2013.07.22 18:57:44 | 000,016,384 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\out_ds.lng
MOD - [2013.07.22 18:57:44 | 000,014,848 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_wire.lng
MOD - [2013.07.22 18:57:44 | 000,011,776 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\pmp_usb.lng
MOD - [2013.07.22 18:57:44 | 000,008,192 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_transcode.lng
MOD - [2013.07.22 18:57:44 | 000,007,680 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\vis_nsfs.lng
MOD - [2013.07.22 18:57:44 | 000,007,680 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\out_wave.lng
MOD - [2013.07.22 18:57:44 | 000,006,144 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\tagz.lng
MOD - [2013.07.22 18:57:44 | 000,006,144 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\out_disk.lng
MOD - [2013.07.22 18:57:44 | 000,005,120 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_rg.lng
MOD - [2013.07.22 18:57:44 | 000,004,608 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\pmp_activesync.lng
MOD - [2013.07.22 18:57:44 | 000,004,096 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\winampa.lng
MOD - [2013.07.22 18:57:44 | 000,004,096 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\pmp_p4s.lng
MOD - [2013.07.22 18:57:44 | 000,003,584 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\pmp_njb.lng
MOD - [2013.07.22 18:57:44 | 000,003,072 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\playlist.lng
MOD - [2013.07.22 18:57:43 | 000,056,320 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_local.lng
MOD - [2013.07.22 18:57:43 | 000,047,616 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_disc.lng
MOD - [2013.07.22 18:57:43 | 000,047,104 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_pmp.lng
MOD - [2013.07.22 18:57:43 | 000,034,816 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_plg.lng
MOD - [2013.07.22 18:57:43 | 000,023,040 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_mp3.lng
MOD - [2013.07.22 18:57:43 | 000,020,480 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_midi.lng
MOD - [2013.07.22 18:57:43 | 000,018,944 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_mod.lng
MOD - [2013.07.22 18:57:43 | 000,015,360 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_wm.lng
MOD - [2013.07.22 18:57:43 | 000,014,336 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_online.lng
MOD - [2013.07.22 18:57:43 | 000,012,800 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_playlists.lng
MOD - [2013.07.22 18:57:43 | 000,011,776 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_nsv.lng
MOD - [2013.07.22 18:57:43 | 000,011,264 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_vorbis.lng
MOD - [2013.07.22 18:57:43 | 000,009,728 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_downloads.lng
MOD - [2013.07.22 18:57:43 | 000,008,704 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_history.lng
MOD - [2013.07.22 18:57:43 | 000,008,704 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_devices.lng
MOD - [2013.07.22 18:57:43 | 000,006,656 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_autotag.lng
MOD - [2013.07.22 18:57:43 | 000,006,656 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_wav.lng
MOD - [2013.07.22 18:57:43 | 000,005,632 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_wave.lng
MOD - [2013.07.22 18:57:43 | 000,005,120 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_impex.lng
MOD - [2013.07.22 18:57:43 | 000,005,120 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_bookmarks.lng
MOD - [2013.07.22 18:57:43 | 000,005,120 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_mp4.lng
MOD - [2013.07.22 18:57:43 | 000,004,608 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_enqplay.lng
MOD - [2013.07.22 18:57:43 | 000,004,608 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_wv.lng
MOD - [2013.07.22 18:57:43 | 000,004,608 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_mkv.lng
MOD - [2013.07.22 18:57:43 | 000,004,096 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_orb.lng
MOD - [2013.07.22 18:57:43 | 000,003,584 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_nowplaying.lng
MOD - [2013.07.22 18:57:43 | 000,003,584 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\ml_addons.lng
MOD - [2013.07.22 18:57:43 | 000,003,584 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_swf.lng
MOD - [2013.07.22 18:57:43 | 000,003,584 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_linein.lng
MOD - [2013.07.22 18:57:43 | 000,003,584 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_flv.lng
MOD - [2013.07.22 18:57:42 | 000,041,984 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_jumpex.lng
MOD - [2013.07.22 18:57:42 | 000,023,552 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_classicart.lng
MOD - [2013.07.22 18:57:42 | 000,023,040 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_ff.lng
MOD - [2013.07.22 18:57:42 | 000,021,504 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_ml.lng
MOD - [2013.07.22 18:57:42 | 000,014,336 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_cdda.lng
MOD - [2013.07.22 18:57:42 | 000,011,776 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_skinmanager.lng
MOD - [2013.07.22 18:57:42 | 000,011,264 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_hotkeys.lng
MOD - [2013.07.22 18:57:42 | 000,010,752 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_undo.lng
MOD - [2013.07.22 18:57:42 | 000,010,240 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_timerestore.lng
MOD - [2013.07.22 18:57:42 | 000,009,216 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_nopro.lng
MOD - [2013.07.22 18:57:42 | 000,008,192 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_tray.lng
MOD - [2013.07.22 18:57:42 | 000,007,168 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_orgler.lng
MOD - [2013.07.22 18:57:42 | 000,007,168 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_crasher.lng
MOD - [2013.07.22 18:57:42 | 000,006,656 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_dshow.lng
MOD - [2013.07.22 18:57:42 | 000,006,144 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\enc_wma.lng
MOD - [2013.07.22 18:57:42 | 000,005,632 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_flac.lng
MOD - [2013.07.22 18:57:42 | 000,005,632 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\enc_lame.lng
MOD - [2013.07.22 18:57:42 | 000,005,120 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\in_avi.lng
MOD - [2013.07.22 18:57:42 | 000,004,096 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\gen_find_on_disk.lng
MOD - [2013.07.22 18:57:42 | 000,004,096 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\enc_wav.lng
MOD - [2013.07.22 18:57:42 | 000,004,096 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\enc_vorbis.lng
MOD - [2013.07.22 18:57:42 | 000,004,096 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\enc_flac.lng
MOD - [2013.07.22 18:57:41 | 000,069,120 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\burnlib.lng
MOD - [2013.07.22 18:57:41 | 000,013,824 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\dsp_sps.lng
MOD - [2013.07.22 18:57:41 | 000,010,752 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\auth.lng
MOD - [2013.07.22 18:57:41 | 000,006,656 | ---- | M] () -- C:\Users\MAJORV~1\AppData\Local\Temp\WLZ21D2.tmp\enc_fhgaac.lng
MOD - [2013.07.08 06:26:16 | 003,285,912 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2011.09.14 22:43:35 | 000,047,616 | ---- | M] () -- C:\Program Files (x86)\Winamp\zlib.dll
MOD - [2011.09.14 22:43:34 | 000,154,624 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\jpeg.w5s
MOD - [2011.09.14 22:43:34 | 000,103,936 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\png.w5s
MOD - [2011.09.14 22:43:34 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\xml.w5s
MOD - [2011.09.14 22:43:34 | 000,084,480 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\playlist.w5s
MOD - [2011.09.14 22:43:34 | 000,083,968 | ---- | M] () -- C:\Program Files (x86)\Winamp\tataki.dll
MOD - [2011.09.14 22:43:34 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\timer.w5s
MOD - [2011.09.14 22:43:34 | 000,021,504 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\tagz.w5s
MOD - [2011.09.14 22:43:34 | 000,013,824 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\primo.w5s
MOD - [2011.09.14 22:43:33 | 000,623,616 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\jnetlib.w5s
MOD - [2011.09.14 22:43:33 | 000,174,080 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\auth.w5s
MOD - [2011.09.14 22:43:33 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\devices.w5s
MOD - [2011.09.14 22:43:33 | 000,023,040 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\albumart.w5s
MOD - [2011.09.14 22:43:33 | 000,019,456 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\gif.w5s
MOD - [2011.09.14 22:43:33 | 000,019,456 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\bmp.w5s
MOD - [2011.09.14 22:43:33 | 000,016,896 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\dlmgr.w5s
MOD - [2011.09.14 22:43:33 | 000,016,384 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\gracenote.w5s
MOD - [2011.09.14 22:43:33 | 000,014,336 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\filereader.w5s
MOD - [2011.09.14 22:43:32 | 000,118,272 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_p4s.dll
MOD - [2011.09.14 22:43:32 | 000,113,152 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_wifi.dll
MOD - [2011.09.14 22:43:32 | 000,053,760 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_usb.dll
MOD - [2011.09.14 22:43:31 | 000,170,496 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_ipod.dll
MOD - [2011.09.14 22:43:31 | 000,060,928 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_android.dll
MOD - [2011.09.14 22:43:31 | 000,020,480 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_njb.dll
MOD - [2011.09.14 22:43:31 | 000,018,432 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\out_wave.dll
MOD - [2011.09.14 22:43:30 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\out_ds.dll
MOD - [2011.09.14 22:43:30 | 000,022,528 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\out_disk.dll
MOD - [2011.09.14 22:43:29 | 000,240,640 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_pmp.dll
MOD - [2011.09.14 22:43:29 | 000,124,928 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_online.dll
MOD - [2011.09.14 22:43:29 | 000,083,456 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_plg.dll
MOD - [2011.09.14 22:43:29 | 000,082,944 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_playlists.dll
MOD - [2011.09.14 22:43:29 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_rg.dll
MOD - [2011.09.14 22:43:29 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_transcode.dll
MOD - [2011.09.14 22:43:28 | 000,293,376 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_local.dll
MOD - [2011.09.14 22:43:28 | 000,200,192 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_disc.dll
MOD - [2011.09.14 22:43:28 | 000,057,344 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_impex.dll
MOD - [2011.09.14 22:43:28 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_history.dll
MOD - [2011.09.14 22:43:27 | 000,313,344 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_wm.dll
MOD - [2011.09.14 22:43:27 | 000,249,856 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_devices.dll
MOD - [2011.09.14 22:43:27 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_autotag.dll
MOD - [2011.09.14 22:43:27 | 000,027,648 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_bookmarks.dll
MOD - [2011.09.14 22:43:26 | 000,285,696 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_mp3.dll
MOD - [2011.09.14 22:43:26 | 000,252,416 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_vorbis.dll
MOD - [2011.09.14 22:43:26 | 000,165,376 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_mod.dll
MOD - [2011.09.14 22:43:26 | 000,109,568 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_midi.dll
MOD - [2011.09.14 22:43:26 | 000,074,752 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_nsv.dll
MOD - [2011.09.14 22:43:26 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_mp4.dll
MOD - [2011.09.14 22:43:26 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_mkv.dll
MOD - [2011.09.14 22:43:26 | 000,023,552 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_swf.dll
MOD - [2011.09.14 22:43:26 | 000,016,896 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_wave.dll
MOD - [2011.09.14 22:43:25 | 000,312,832 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_ml.dll
MOD - [2011.09.14 22:43:25 | 000,102,400 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_cdda.dll
MOD - [2011.09.14 22:43:25 | 000,072,192 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_dshow.dll
MOD - [2011.09.14 22:43:25 | 000,068,608 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_avi.dll
MOD - [2011.09.14 22:43:25 | 000,060,928 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_flac.dll
MOD - [2011.09.14 22:43:25 | 000,057,344 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_orgler.dll
MOD - [2011.09.14 22:43:25 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_flv.dll
MOD - [2011.09.14 22:43:25 | 000,025,600 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_tray.dll
MOD - [2011.09.14 22:43:25 | 000,007,168 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_linein.dll
MOD - [2011.09.14 22:43:24 | 001,737,728 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_ff.dll
MOD - [2011.09.14 22:43:24 | 000,410,624 | ---- | M] () -- C:\Program Files (x86)\Winamp\nsutil.dll
MOD - [2011.09.14 22:43:24 | 000,183,808 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_jumpex.dll
MOD - [2011.09.14 22:43:24 | 000,027,648 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_hotkeys.dll
MOD - [2011.09.14 22:43:23 | 000,253,440 | ---- | M] () -- C:\Program Files (x86)\Winamp\libsndfile.dll
MOD - [2011.09.14 22:43:23 | 000,078,848 | ---- | M] () -- C:\Program Files (x86)\Winamp\nde.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2013.03.29 03:34:18 | 000,241,152 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2013.03.28 22:30:42 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV - [2013.07.10 03:56:22 | 000,559,016 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.07.08 06:26:34 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.06.03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.01.27 12:34:32 | 000,379,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Programme\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2013.01.27 12:34:32 | 000,022,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2011.09.15 10:15:37 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.10.21 09:38:38 | 005,790,064 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Programme\Tablet\Pen\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2010.10.21 09:38:38 | 000,487,280 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Programme\Tablet\Pen\Pen_TouchService.exe -- (TouchServicePen)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.08.18 13:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013.03.29 04:35:02 | 011,658,752 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2013.03.29 03:09:44 | 000,581,120 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2013.02.14 13:41:10 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2013.01.31 11:50:58 | 000,028,160 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
DRV:64bit: - [2013.01.20 16:59:04 | 000,130,008 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012.12.05 06:57:49 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012.10.11 05:08:10 | 000,044,928 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcvidrv_x64.sys -- (ManyCam)
DRV:64bit: - [2012.06.01 09:32:38 | 000,379,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\V0770Vid.sys -- (V0770Vid)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.10.03 16:41:58 | 000,146,736 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2011.07.06 12:12:50 | 000,367,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2011.06.01 05:16:50 | 000,535,656 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.10.05 13:26:10 | 000,018,288 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV:64bit: - [2010.10.05 13:26:02 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV:64bit: - [2010.10.05 13:26:00 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wacomvhid.sys -- (wacomvhid)
DRV:64bit: - [2010.02.18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:64bit: - [2009.08.21 10:52:09 | 000,079,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 02:01:09 | 000,679,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xnacc.sys -- (xnacc)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2012.04.09 10:13:58 | 000,057,472 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Stopped] -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2)
DRV - [2012.04.09 10:13:58 | 000,057,472 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C0 44 C1 52 32 7F CE 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Google"
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.order.1: "Google"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.com/"
FF - prefs.js..extensions.enabledAddons: %7B888d99e7-e8b5-46a3-851e-1ec45da1e644%7D:17.0.0
FF - prefs.js..extensions.enabledAddons: gmailwatcher%40sonthakit:1.61
FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.10
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q="
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.5: C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\MajorVegi\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\MajorVegi\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.07.08 06:26:11 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.07.08 06:26:11 | 000,000,000 | ---D | M]
 
[2011.09.14 21:21:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\MajorVegi\AppData\Roaming\mozilla\Extensions
[2013.07.22 19:52:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\MajorVegi\AppData\Roaming\mozilla\Firefox\Profiles\cqlvx6qh.default\extensions
[2013.03.25 07:44:57 | 000,000,000 | ---D | M] (United States English Spellchecker) -- C:\Users\MajorVegi\AppData\Roaming\mozilla\Firefox\Profiles\cqlvx6qh.default\extensions\en-US@dictionaries.addons.mozilla.org
[2013.03.25 07:44:57 | 000,226,606 | ---- | M] () (No name found) -- C:\Users\MajorVegi\AppData\Roaming\mozilla\firefox\profiles\cqlvx6qh.default\extensions\gmailwatcher@sonthakit.xpi
[2013.01.02 18:26:54 | 000,030,502 | ---- | M] () (No name found) -- C:\Users\MajorVegi\AppData\Roaming\mozilla\firefox\profiles\cqlvx6qh.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
[2013.07.22 19:52:50 | 000,818,491 | ---- | M] () (No name found) -- C:\Users\MajorVegi\AppData\Roaming\mozilla\firefox\profiles\cqlvx6qh.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.07.12 17:26:20 | 000,275,262 | ---- | M] () (No name found) -- C:\Users\MajorVegi\AppData\Roaming\mozilla\firefox\profiles\cqlvx6qh.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013.07.11 21:54:34 | 000,006,507 | ---- | M] () -- C:\Users\MajorVegi\AppData\Roaming\mozilla\firefox\profiles\cqlvx6qh.default\searchplugins\babylon.xml
[2013.07.08 06:26:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2013.07.08 06:26:12 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013.07.08 06:26:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013.07.08 06:26:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013.07.08 06:26:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013.07.08 06:26:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2013.07.08 06:26:35 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=5CCE1C6F65BD5D67&affID=119357&tsp=4940
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\MajorVegi\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\MajorVegi\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\MajorVegi\AppData\Local\Google\Chrome\Application\28.0.1500.72\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin:  Wacom Dynamic Link Library (Enabled) = C:\Program Files (x86)\TabletPlugins\npwacom.dll
CHR - plugin: Google Update (Enabled) = C:\Users\MajorVegi\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - Extension: YouTube = C:\Users\MajorVegi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google-Suche = C:\Users\MajorVegi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: After the Deadline = C:\Users\MajorVegi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcdjadjbdihbaodagojiomdljhjhjfho\1.2_0\
CHR - Extension: Deaktivierungs-Add-on von Google Analytics = C:\Users\MajorVegi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh\1_0\
CHR - Extension: ProxMate - Improve your Internet! = C:\Users\MajorVegi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgjpnmnpjmabddgmjdiaggacbololbjm\2.3.8_0\
CHR - Extension: Google Mail = C:\Users\MajorVegi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2013.01.16 19:52:51 | 000,000,830 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Programme\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (no name) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [V0770Pin.dll] C:\Windows\SysNative\V0770Pin.dll (Creative Technology Ltd.)
O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [V0770Mon.exe] C:\Windows\V0770Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [F.lux] C:\Users\MajorVegi\Local Settings\Apps\F.lux\flux.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O8:64bit: - Extra context menu item: An vorhandenes PDF anfügen - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Auswahl in Adobe PDF konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: An vorhandenes PDF anfügen - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Auswahl in Adobe PDF konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.25.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{70FC9910-C41D-4421-A5CA-45A48FAFCB6D}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Programme\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18:64bit: - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Programme\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{4f1f2b68-e741-11e0-8eda-1c6f65bd5d67}\Shell - "" = AutoRun
O33 - MountPoints2\{4f1f2b68-e741-11e0-8eda-1c6f65bd5d67}\Shell\AutoRun\command - "" = K:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.07.21 22:34:32 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2013.07.21 22:34:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
[2013.07.21 22:34:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2013.07.21 10:20:50 | 000,000,000 | ---D | C] -- C:\Users\MajorVegi\AppData\Roaming\Wise Registry Cleaner
[2013.07.21 10:20:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Registry Cleaner
[2013.07.21 10:20:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wise
[2013.07.18 23:43:46 | 000,000,000 | ---D | C] -- C:\Users\MajorVegi\AppData\Roaming\Unity
[2013.07.18 23:08:35 | 000,000,000 | ---D | C] -- C:\Users\MajorVegi\AppData\Local\Unity
[2013.07.14 15:09:12 | 000,000,000 | ---D | C] -- C:\Users\MajorVegi\AppData\Roaming\Creative
[2013.07.11 21:54:44 | 000,000,000 | ---D | C] -- C:\Users\MajorVegi\JDownloader
[2013.07.11 21:20:11 | 000,000,000 | ---D | C] -- C:\Users\MajorVegi\Documents\Vuze Downloads
[2013.07.08 06:26:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.06.30 13:44:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013.06.27 21:46:45 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun
[2013.06.27 21:45:14 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
 
========== Files - Modified Within 30 Days ==========
 
[2013.07.22 20:17:13 | 000,000,000 | ---- | M] () -- C:\Users\MajorVegi\defogger_reenable
[2013.07.22 20:12:00 | 000,001,136 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000UA.job
[2013.07.22 18:54:30 | 000,021,856 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.07.22 18:54:30 | 000,021,856 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.07.22 18:46:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.07.22 18:46:48 | 4293,042,174 | -HS- | M] () -- C:\hiberfil.sys
[2013.07.21 14:23:17 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.07.21 14:23:17 | 000,696,620 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.07.21 14:23:17 | 000,651,938 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.07.21 14:23:17 | 000,147,916 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.07.21 14:23:17 | 000,120,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.07.21 10:20:22 | 000,001,227 | ---- | M] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk
[2013.07.21 09:12:00 | 000,001,084 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000Core.job
[2013.07.11 21:12:54 | 000,000,000 | ---- | M] () -- C:\END
[2013.07.11 17:23:28 | 000,166,984 | ---- | M] () -- C:\Users\MajorVegi\Desktop\943165_164179803753487_410499378_n.png
[2013.07.11 17:12:01 | 000,313,848 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.06.27 21:45:14 | 000,001,172 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2013.06.25 22:15:17 | 000,000,991 | ---- | M] () -- C:\Users\MajorVegi\Desktop\Dropbox.lnk
[2013.06.22 23:17:49 | 000,002,787 | ---- | M] () -- C:\Users\MajorVegi\.recently-used.xbel
 
========== Files Created - No Company Name ==========
 
[2013.07.22 20:17:13 | 000,000,000 | ---- | C] () -- C:\Users\MajorVegi\defogger_reenable
[2013.07.21 10:20:22 | 000,001,227 | ---- | C] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk
[2013.07.11 21:12:54 | 000,000,000 | ---- | C] () -- C:\END
[2013.07.11 17:23:25 | 000,166,984 | ---- | C] () -- C:\Users\MajorVegi\Desktop\943165_164179803753487_410499378_n.png
[2013.06.27 21:45:14 | 000,001,172 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2013.06.22 23:17:49 | 000,002,787 | ---- | C] () -- C:\Users\MajorVegi\.recently-used.xbel
[2013.05.23 18:08:06 | 000,000,408 | ---- | C] () -- C:\Users\MajorVegi\AppData\Roaming\CamShapes.ini
[2013.05.23 18:08:06 | 000,000,408 | ---- | C] () -- C:\Users\MajorVegi\AppData\Roaming\CamLayout.ini
[2013.05.23 18:08:06 | 000,000,096 | ---- | C] () -- C:\Users\MajorVegi\AppData\Roaming\Camdata.ini
[2013.05.23 18:07:24 | 000,004,519 | ---- | C] () -- C:\Users\MajorVegi\AppData\Roaming\CamStudio.cfg
[2013.05.13 19:51:13 | 000,000,600 | ---- | C] () -- C:\Users\MajorVegi\AppData\Local\PUTTY.RND
[2013.04.13 13:26:32 | 000,188,416 | RHS- | C] () -- C:\Windows\SysWow64\winDCE32.dll
[2013.04.13 13:26:32 | 000,107,520 | RHS- | C] () -- C:\Windows\SysWow64\TAKDSDecoder.dll
[2013.03.29 04:13:14 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
[2013.03.29 04:13:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
[2013.02.18 22:53:13 | 000,000,038 | -HS- | C] () -- C:\Windows\camcodec100.ini
[2013.02.18 22:53:13 | 000,000,028 | -HS- | C] () -- C:\Windows\lagarith.ini
[2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.02.19 00:00:34 | 000,032,256 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll
[2012.02.15 04:36:36 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.02.15 04:36:36 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2011.11.13 12:16:18 | 000,006,656 | ---- | C] () -- C:\Users\MajorVegi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.10.25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OVDecoder.dll
[2011.09.14 21:52:50 | 001,589,442 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.09.14 21:28:56 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2013.07.20 18:02:04 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\.minecraft
[2012.10.28 20:11:06 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Audacity
[2011.11.05 11:22:15 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Autodesk
[2013.07.21 20:28:58 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\avidemux
[2013.07.11 21:33:02 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Azureus
[2012.02.18 23:57:59 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Babylon
[2012.09.22 11:09:36 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Bioshock
[2013.02.10 22:23:29 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Bioshock2
[2012.12.05 18:25:17 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\DAEMON Tools Lite
[2011.09.25 09:22:54 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\DAEMON Tools Pro
[2013.07.10 18:29:36 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Dropbox
[2011.10.30 23:46:40 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\EPSON
[2013.05.28 21:05:29 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\FileZilla
[2013.02.10 22:24:03 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\fltk.org
[2013.06.22 23:17:49 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\gtk-2.0
[2012.04.04 06:47:35 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\IrfanView
[2012.11.02 22:16:31 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Notepad++
[2012.02.04 20:55:28 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\OpenOffice.org
[2012.01.07 14:09:40 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\RSBasic
[2012.10.10 18:31:47 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Scribus
[2013.07.18 23:43:46 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Unity
[2013.07.21 10:27:11 | 000,000,000 | ---D | M] -- C:\Users\MajorVegi\AppData\Roaming\Wise Registry Cleaner
 
========== Purity Check ==========
 
 

< End of report >
         

2b. Extras.txt:

OTL Extras logfile created on: 22.07.2013 20:18:51 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\MajorVegi\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
16,00 Gb Total Physical Memory | 13,70 Gb Available Physical Memory | 85,63% Memory free
31,99 Gb Paging File | 29,47 Gb Available in Paging File | 92,11% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 148,95 Gb Total Space | 59,95 Gb Free Space | 40,25% Space Free | Partition Type: NTFS
Drive E: | 465,75 Gb Total Space | 326,96 Gb Free Space | 70,20% Space Free | Partition Type: NTFS
Drive F: | 465,75 Gb Total Space | 339,49 Gb Free Space | 72,89% Space Free | Partition Type: NTFS
 
Computer Name: MARTIN | User Name: MajorVegi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{011C2EEE-0F44-4AC8-AAEE-24EC4A53A6A6}" = protocol=6 | dir=in | app=e:\games\steam\steamapps\common\element4l\element4l.exe | 
"{01A658B1-2735-4512-8310-D7817400AEF2}" = protocol=17 | dir=in | app=c:\users\majorvegi\appdata\roaming\dropbox\bin\dropbox.exe | 
"{04961E51-6380-4055-86A5-813450AB12A7}" = protocol=6 | dir=in | app=e:\games\steam\steamapps\common\saints row the third\saintsrowthethird.exe | 
"{15E8BEE9-ACD9-4274-8C7A-15B8D4EBAFB7}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\manager.exe | 
"{1CD49DB9-B726-4D27-8415-56BD07A39D88}" = protocol=17 | dir=in | app=e:\games\steam\steamapps\common\bioshock 2\mp\builds\binaries\bioshock2launcher.exe | 
"{28A0DC32-754C-470E-B195-48913F479787}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\monitor.exe | 
"{2BF66DE9-1C7E-4812-B493-7CAEC4DEC6EE}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\monitor.exe | 
"{31CE079D-3060-46B5-BE57-D82F185748D9}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 
"{3A5170F8-53BE-437F-B203-1DBB71C913D0}" = protocol=6 | dir=in | app=e:\games\steam\steamapps\common\saints row the third\game_launcher.exe | 
"{53CBFFD0-0B50-4BA5-BD6B-4803848FDE84}" = protocol=6 | dir=in | app=c:\program files (x86)\wb games\batman arkham city\binaries\win32\batmanac.exe | 
"{66CE4E49-14BF-4454-BCE4-D81D74369B86}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{988D16F8-F941-4AB0-AFE6-0D34FE77FB3A}" = protocol=17 | dir=in | app=c:\program files (x86)\wb games\batman arkham city\binaries\win32\batmanac.exe | 
"{9B9FD80D-845B-43E6-B3B5-D763653FDB6D}" = protocol=6 | dir=in | app=e:\games\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2launcher.exe | 
"{9D2BB27F-B297-43D2-95F9-CB3273A51251}" = protocol=6 | dir=in | app=e:\games\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe | 
"{9F7155CB-6AFE-4400-8270-02C30A2AA6E2}" = protocol=6 | dir=in | app=c:\users\majorvegi\appdata\roaming\dropbox\bin\dropbox.exe | 
"{B7197F45-C00C-49D9-9A3B-6C44D38D6688}" = protocol=17 | dir=in | app=e:\games\steam\steamapps\common\saints row the third\saintsrowthethird.exe | 
"{BEA4575D-55D8-41D1-AFEF-F256AB2D604D}" = protocol=6 | dir=in | app=e:\games\steam\steamapps\common\thomaswasalone\thomaswasalone.exe | 
"{C177FB3D-E686-4C1C-AB3B-9E307C4DA3FE}" = protocol=17 | dir=in | app=e:\games\steam\steamapps\common\saints row the third\game_launcher.exe | 
"{CE52F179-7E95-4A74-8038-E00EBCBAC083}" = protocol=17 | dir=in | app=e:\games\steam\steamapps\common\element4l\element4l.exe | 
"{D13301C1-8047-4C0E-9C3D-C8C3E799BE18}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\manager.exe | 
"{D92FE1DB-4B5A-4478-AF54-B854FDA0A281}" = protocol=6 | dir=in | app=e:\games\steam\steamapps\common\bioshock 2\mp\builds\binaries\bioshock2launcher.exe | 
"{DA6E9C85-6740-4E31-860E-53F7020849FA}" = protocol=17 | dir=in | app=e:\games\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe | 
"{F1122040-8B1C-4B5B-9F1A-F9385327B7EC}" = protocol=17 | dir=in | app=e:\games\steam\steamapps\common\bioshock 2\sp\builds\binaries\bioshock2launcher.exe | 
"{F46ABB83-6B3E-498F-876D-D2B7F217ED9E}" = protocol=17 | dir=in | app=e:\games\steam\steamapps\common\thomaswasalone\thomaswasalone.exe | 
"{F9A304BA-3B80-4F3C-8FEF-1B8F43045C36}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\server.exe | 
"{FA7C2F76-7123-42AE-ADBC-1FC8B01F13B2}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\server.exe | 
"TCP Query User{031758FE-C723-433A-AADA-B957B12C735E}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
"TCP Query User{72AAD39D-8F15-4CCD-B28C-3F25924F676F}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | 
"UDP Query User{0CB673BA-C1A4-4FF7-8758-F7247CA7FD75}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | 
"UDP Query User{6EA2D15A-DC31-4CB9-807C-7156FBAE0B66}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1280E900-35DA-4E08-A700-B79A5B2B8532}" = Microsoft Antimalware Service DE-DE Language Pack
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{55B348BE-A3BE-9AE7-58BD-BE45B9A28F82}" = AMD Media Foundation Decoders
"{5B73E1AA-CA9D-E76A-2F2D-E0EFB41CE087}" = AMD Accelerated Video Transcoding
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}" = Microsoft Xbox 360 Accessories 1.2
"{C8807716-1F6F-5C43-3C32-7295A45CF060}" = AMD Catalyst Install Manager
"{CC1FE395-D90F-712C-E013-EBDCC30433B1}" = AMD Fuel
"{CFA5BA6D-D6BB-AE1B-E61E-5B1ACFC8F0BB}" = AMD Drag and Drop Transcoding
"{D954C6C2-544B-4091-A47F-11E77162883E}" = Microsoft Security Client
"{DA2737A4-B639-96F4-1CC2-30D2919EE1FB}" = AMD Steady Video Plug-In 
"{DC911ADF-7B60-40F2-A112-FB1EB6402D07}" = Microsoft Security Client DE-DE Language Pack
"{E54A949B-C4AE-28B6-EC97-FCB9E402D338}" = ccc-utility64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Creative VF0770" = Live! Cam Sync HD VF0770 Driver (1.00.02.00)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
"Pen Tablet Driver" = Bamboo
"WinRAR archiver" = WinRAR 4.01 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0300BFF4-33A2-4DFB-979D-79AE9D324E81}" = Minutor
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{11F2C5EC-35AA-7237-B62B-A4F041859C2A}" = CCC Help Spanish
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{229EDE35-4677-BDE6-70ED-A5A4C711DDC3}" = CCC Help Norwegian
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{2470F2F2-8491-5A0B-B8F5-8B72A8D74597}" = Catalyst Control Center InstallProxy
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{27B56E28-94B2-BDF8-D209-EC8D2FF4838E}" = Catalyst Control Center Graphics Previews Common
"{33D4FA83-02C0-93B3-08ED-5D7378930CFA}" = CCC Help Turkish
"{37D0F3C2-8FFD-134D-FBDF-2D711E169D78}" = AMD VISION Engine Control Center
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2012.0.0
"{42FECCEF-63CD-DF98-D6BC-DDBB27E4A580}" = CCC Help Japanese
"{46594DA4-2D0A-B2D4-C0E0-A5CCA3260025}" = CCC Help Hungarian
"{485B8152-C59F-8569-15BC-46BDA2A1E4A9}" = CCC Help Polish
"{490F47E6-585C-531A-1BF8-4DE44ED9AED7}" = CCC Help Russian
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.5
"{50F87176-7DB3-4C75-D9DC-25CB4561D0F8}" = CCC Help Danish
"{52E706AA-B4E9-423A-1651-62E61E06DF9A}" = CCC Help Greek
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{57520FA0-AC56-469B-9983-FF1000008300}" = Batman: Arkham City™
"{5FB51C12-62AE-0990-E419-C6F62B776E5C}" = CCC Help Portuguese
"{66B46617-A156-F25B-3CC0-5E46343AEA95}" = CCC Help Thai
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{81543139-18AE-703B-D3B1-F6B3A0CB2EAC}" = CCC Help English
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8F3A1F92-C29F-4DF9-8459-B739A4831C69}_is1" = SUPER © +Recorder.2013.55 (Mar 7, 2013) Version +Recorder.2013.
"{8FA20FAC-719F-7CCD-5790-6B59D691C370}" = CCC Help Chinese Traditional
"{940B28E7-320B-5AC8-0A8A-32D6A7B404A1}" = CCC Help Swedish
"{99C382AB-CA1D-8577-66D3-AA850DB5FD00}" = CCC Help Korean
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A68C4D16-8046-5333-CB64-5E622C795785}" = CCC Help Dutch
"{AC76BA86-1033-F400-7760-000000000003}" = Adobe Acrobat 8 Professional - English, Français, Deutsch
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BE0B654E-FC60-40AE-F60B-06526508B5FD}" = CCC Help Italian
"{BE0E1491-B2DC-6447-217C-342D8F7100EA}" = CCC Help Czech
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{C5EADF55-3B49-B545-E16F-402B443DDC77}" = CCC Help German
"{CBDFF724-E925-2964-E647-0A83D2F9165C}" = CCC Help French
"{D5341564-7B93-ADAC-E737-C24AA85CC5FF}" = CCC Help Chinese Standard
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E3FB1E5A-1C24-D581-6BC8-6F8AC2D343AD}" = CCC Help Finnish
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E79BE5-20F5-82F4-6579-2A91AED3F066}" = Catalyst Control Center Localization All
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F5266D28-E0B2-4130-BFC5-EE155AD514DC}" = Apple Application Support
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Acrobat 8 Professional - English, Français, Deutsch" = Adobe Acrobat 8 Professional - English, Français, Deutsch
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.13 (Unicode)
"Avidemux 2.6" = Avidemux 2.6 (32-bit)
"DAEMON Tools Lite" = DAEMON Tools Lite
"EPSON Scanner" = EPSON Scan
"FileZilla Client" = FileZilla Client 3.7.0.1
"GFWL_{57520FA0-AC56-469B-9983-FF1000008300}" = Batman: Arkham City™
"GPL Ghostscript 9.05" = GPL Ghostscript
"IrfanView" = IrfanView (remove only)
"LAME for Audacity_is1" = LAME v3.98.3 for Audacity
"Mozilla Firefox 22.0 (x86 de)" = Mozilla Firefox 22.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Notepad++" = Notepad++
"Scribus 1.4.1" = Scribus 1.4.1
"Steam App 220780" = Thomas Was Alone
"Steam App 235820" = Element4l
"Steam App 55230" = Saints Row: The Third
"VLC media player" = VLC media player 2.0.7
"Wacom WebTabletPlugin for IE" = WebTablet IE Plugin
"Wacom WebTabletPlugin for Netscape" = WebTablet Netscape Plugin
"Winamp" = Winamp
"WinGimp-2.0_is1" = GIMP 2.6.11
"Wise Registry Cleaner_is1" = Wise Registry Cleaner 7.82
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Flux" = F.lux
"Google Chrome" = Google Chrome
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 19.06.2013 11:12:25 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
Error - 19.06.2013 23:51:18 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
Error - 20.06.2013 11:09:03 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
Error - 20.06.2013 23:50:47 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
Error - 21.06.2013 10:59:33 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
Error - 22.06.2013 02:43:18 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
Error - 23.06.2013 01:49:09 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
Error - 23.06.2013 10:09:52 | Computer Name = Martin | Source = MsiInstaller | ID = 11609
Description = 
 
Error - 23.06.2013 23:48:12 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
Error - 24.06.2013 11:23:05 | Computer Name = Martin | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 28.06.2013 15:59:57 | Computer Name = Martin | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1053
 
Error - 09.07.2013 13:14:47 | Computer Name = Martin | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
 
Error - 09.07.2013 13:14:48 | Computer Name = Martin | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
 
Error - 09.07.2013 13:14:49 | Computer Name = Martin | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
 
Error - 11.07.2013 14:40:41 | Computer Name = Martin | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 20.07.2013 15:05:39 | Computer Name = Martin | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 Steam Client Service erreicht.
 
Error - 20.07.2013 15:05:39 | Computer Name = Martin | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1053
 
Error - 22.07.2013 11:16:09 | Computer Name = Martin | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
Error - 22.07.2013 12:40:07 | Computer Name = Martin | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
Error - 22.07.2013 12:47:07 | Computer Name = Martin | Source = Service Control Manager | ID = 7000
Description = Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
 
< End of report >
         

3. Gmer.txt:

Leider bekomme ich nur die Meldung "gmer_2.1.19163.exe funktioniert nicht mehr". Auch nach Reboot.

Vielen Dank schon mal für's lesen! :)

Hallo,

Ich habe kürzlich den Fehler gemacht Azureus zu installieren und habe mir wohl einiges eingefangen.

Was ist allein daran ein Fehler?
Azureus ist ein Mittel zum Zweck, nämlich Dateien über das torrent-Protokoll zu laden. Azureus kann rein garnix dafür wenn du dir Scheise runterlädst und auch noch ausführst


Was genau bitte hast du über azureus/torrent geladen?

Wurde der Virenscanner fündig? Wenn ja bitte alle Logs dazu posten.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Zitat von cosinus

Was genau bitte hast du über azureus/torrent geladen?

Wollte Serie XYZ haben. Per Torrent.to. Ja, selber schuld und sehr schlechte Idee. Wer dumm ist muss leiden.

Zitat von cosinus

Wurde der Virenscanner fündig? Wenn ja bitte alle Logs dazu posten.

Ich hatte es mit Avira per Avira AntiVir Rescue System CD/DVD testen lassen.
Aktuellste exe - leider konnte ich im Programm keine Updates fahren. Fand keine Internetverbindung, trotz eingestecktem LAN.

Folgende Ergebnisse:

Avira / Linux Version 1.9.152.0
Copyright (c) 2010 by Avira GmbH
All rights reserved.
engine set:         

8.2.12.88

VDF Version:        7.11.91.168
Scan start time: Tue Jul 23 20:36:27 2013

configuration file: /etc/avira/scancl.conf


WARNING: [Bad archive header] 

/media/Devices/hdc2/Users/MajorVegi/AppData/Local/Microsoft/Windows/Temporary Internet 

Files/Content.IE5/Q5QFY14Q/IE9-win7[1].msu


WARNING: [File is encrypted] /media/Devices/hdc2/Users/MajorVegi/AppData/Local/Temp/AVoFzZrw.exe.part


WARNING: [Unexpected end of file] /media/Devices/hdc2/Users/MajorVegi/Local 

Settings/Apps/F.lux/uninstall.exe


WARNING: [Archive is invalid or corrupt] /media/Devices/hdc2/Program Files/WinRAR/rarnew.dat


ALERT: [SPR/Tool.Keygen.378] /media/Devices/sda1/3dsmax2012/3dsmax2012.iso --> 

Crack/xf-a2012-32bits.rar --> xf-adesk2012x32.exe <<< Contains signature of the SPR/Tool.Keygen.378 

program [archive scan abort]


WARNING: [All files in archive are encrypted] /media/Devices/sda1/Hörbücher/Timur Vermes - Er ist wieder da/checksum.crc.db

Statistics :

Directories............... : 34939

Archives.................. : 2441

Files..................... : 715164

Infected.............. : 1

Deleted........... : 1

Warnings.............. : 5
Suspicious............ : 0

Infections................ : 1
         

Als Voreinstellung war "Repair infections - if not possible delete" eingestellt.

Vielen Dank schonmal

Zusätzlich fragt mich heute Comodo Firewall dauernd ob ich zulassen will dass

MMLoadDrv.exe

in der Registry Änderungen fornehmen darf.

Ich bin aus Google nicht ganz schlau geworden, wie ich identifiziere ob das nun die echte oder eine schlechte Datei ist.

Irgendwelche Ideen?

ALERT: [SPR/Tool.Keygen.378] /media/Devices/sda1/3dsmax2012/3dsmax2012.iso -->

Crack/xf-a2012-32bits.rar --> xf-adesk2012x32.exe <<< Contains signature of the SPR/Tool.Keygen.378

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

Zitat von cosinus

Es geht weiter wenn du alles Illegale entfernt hast.

Das Ding hatte das AntiVir schon weggelöscht, weil es da gleich Alert geschlagen hatte.

Bevor wir uns an die Arbeit machen, möchte ich dich bitten, folgende Punkte vollständig und aufmerksam zu lesen.

• Lies dir meine Anleitungen, die ich im Laufe dieses Strangs hier posten werde, aufmerksam durch. Frag umgehend nach, wenn dir irgendetwas unklar sein sollte, bevor du anfängst meine Anleitungen umzusetzen.
  
  
• Solltest du bei einem Schritt Probleme haben, stoppe dort und beschreib mir das Problem so gut du kannst. Manchmal erfordert ein Schritt den vorhergehenden.
  
  
• Bitte nur Scans durchführen zu denen du von einem Helfer aufgefordert wurdest! Installiere / Deinstalliere keine Software ohne Aufforderung!
  
  
• Poste die Logfiles direkt in deinen Thread (bitte in CODE-Tags) und nicht als Anhang, ausser du wurdest dazu aufgefordert. Logs in Anhängen erschweren mir das Auswerten!
  
  
• Die Logs der aufgegebenen Tools wie zB Malwarebytes sind immer zu posten - egal ob ein Fund dabei war oder nicht!
  
  
• Beachte bitte auch => Löschen von Logfiles und andere Anfragen

Note:
Sollte ich drei Tage nichts von mir hören lassen, so melde dich bitte in diesem Strang => Erinnerung an meinem Thread.
Nervige "Wann geht es weiter" Nachrichten enden mit Schließung deines Themas. Auch ich habe ein Leben abseits des Trojaner-Boards.


Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Zitat von cosinus

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit

Der Link geht zu einer USB Version des Scanners, du sagtest ich solle es auf den Desktop legen. Soll ich der USB Anwendung folgen oder den Scanner direkt vom Desktop starten?

(Falls die Frage mit dem Dowload beantwortet gewesen wäre entschuldige ich mich. Ich bin zur Zeit nicht zu Hause und kann nichts downloaden.)

Einfach auf dem Desktop runterladen und von da aus starten

Frst.txt:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-07-2013
Ran by MajorVegi (administrator) on 24-07-2013 17:31:04
Running from C:\Users\MajorVegi\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
(Macrovision Europe Ltd.) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(Creative Technology Ltd.) C:\Windows\V0770Mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12681320 2011-08-26] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation)
HKLM\...\Run: [V0770Pin.dll] - RunDLL32.exe V0770Pin.dll,RunDLL32EP 514,/d:0 [x]
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1502424 2013-07-08] (COMODO)
HKCU\...\Run: [Google Update] - C:\Users\MajorVegi\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-09-24] (Google Inc.)
HKCU\...\Run: [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-21] (Microsoft Corporation)
MountPoints2: {4f1f2b68-e741-11e0-8eda-1c6f65bd5d67} - K:\Setup.exe
HKLM-x32\...\Run: [WinampAgent] - "C:\Program Files (x86)\Winamp\winampa.exe" [74752 2011-07-11] (Nullsoft, Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - "C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [620152 2006-10-22] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [V0770Mon.exe] - C:\Windows\V0770Mon.exe [32884 2012-06-01] (Creative Technology Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: No Name - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -  No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\MajorVegi\AppData\Roaming\Mozilla\Firefox\Profiles\cqlvx6qh.default
FF user.js: detected! => C:\Users\MajorVegi\AppData\Roaming\Mozilla\Firefox\Profiles\cqlvx6qh.default\user.js
FF NewTab: about:blank
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com/
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.5 - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\MajorVegi\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\MajorVegi\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\MajorVegi\AppData\Roaming\Mozilla\Firefox\Profiles\cqlvx6qh.default\searchplugins\babylon.xml
FF Extension: United States English Spellchecker - C:\Users\MajorVegi\AppData\Roaming\Mozilla\Firefox\Profiles\cqlvx6qh.default\Extensions\en-US@dictionaries.addons.mozilla.org
FF Extension: gmailwatcher - C:\Users\MajorVegi\AppData\Roaming\Mozilla\Firefox\Profiles\cqlvx6qh.default\Extensions\gmailwatcher@sonthakit.xpi
FF Extension: No Name - C:\Users\MajorVegi\AppData\Roaming\Mozilla\Firefox\Profiles\cqlvx6qh.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
FF Extension: No Name - C:\Users\MajorVegi\AppData\Roaming\Mozilla\Firefox\Profiles\cqlvx6qh.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

Chrome: 
=======
CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=5CCE1C6F65BD5D67&affID=119357&tsp=4940
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\MajorVegi\AppData\Local\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\MajorVegi\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\MajorVegi\AppData\Local\Google\Chrome\Application\28.0.1500.72\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: ( Wacom Dynamic Link Library) - C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
CHR Plugin: (Google Update) - C:\Users\MajorVegi\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\MAJORV~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\MAJORV~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (After the Deadline) - C:\Users\MAJORV~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcdjadjbdihbaodagojiomdljhjhjfho\1.2_0
CHR Extension: (Google Analytics Opt-out Add-on (by Google)) - C:\Users\MAJORV~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh\1_0
CHR Extension: (ProxMate - Improve your Internet!) - C:\Users\MAJORV~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgjpnmnpjmabddgmjdiaggacbololbjm\2.3.8_0
CHR Extension: (Gmail) - C:\Users\MAJORV~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [ojpijjmpahflnipadmlpgbjmagmjchkk] - C:\Users\MAJORV~1\AppData\Local\Temp\ccex.crx

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6199520 2013-07-08] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [158936 2013-06-18] (COMODO)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
S2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-06-18] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [708632 2013-07-08] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2013-06-18] (COMODO)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-12-05] (DT Soft Ltd)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-06-18] (COMODO)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
R3 V0770Vid; C:\Windows\System32\DRIVERS\V0770Vid.sys [379776 2012-06-01] (Creative Technology Ltd.)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-24 17:30 - 2013-07-24 17:30 - 00000000 ____D C:\FRST
2013-07-24 17:28 - 2013-07-24 17:28 - 01779757 _____ (Farbar) C:\Users\MajorVegi\Desktop\FRST64.exe
2013-07-23 21:36 - 2013-07-23 21:36 - 00002425 _____ C:\Users\MajorVegi\Desktop\rescue-system_scan_back.log
2013-07-23 20:50 - 2013-07-23 20:50 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2013-07-23 20:15 - 2013-07-23 20:27 - 00001962 _____ C:\Windows\system32\Drivers\fvstore.dat
2013-07-23 19:43 - 2013-07-23 19:45 - 00001352 _____ C:\Users\MajorVegi\Desktop\rescue-system_scan02.log
2013-07-22 21:33 - 2013-07-24 06:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-22 21:33 - 2013-07-22 21:33 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-22 21:33 - 2013-07-22 21:33 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-22 21:33 - 2013-07-22 21:33 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-22 20:24 - 2013-07-22 20:24 - 00049010 _____ C:\Users\MajorVegi\Desktop\Extras.Txt
2013-07-22 20:23 - 2013-07-22 20:23 - 00114976 _____ C:\Users\MajorVegi\Desktop\OTL.Txt
2013-07-22 20:22 - 2013-07-22 20:22 - 00377856 _____ C:\Users\MajorVegi\Desktop\gmer_2.1.19163.exe
2013-07-22 20:18 - 2013-07-22 20:18 - 00602112 _____ (OldTimer Tools) C:\Users\MajorVegi\Downloads\OTL.exe
2013-07-22 20:17 - 2013-07-22 20:17 - 00000480 _____ C:\Users\MajorVegi\Desktop\defogger_disable.log
2013-07-22 20:17 - 2013-07-22 20:17 - 00000000 _____ C:\Users\MajorVegi\defogger_reenable
2013-07-22 20:16 - 2013-07-22 20:16 - 00050477 _____ C:\Users\MajorVegi\Downloads\Defogger.exe
2013-07-22 19:44 - 2013-07-22 20:04 - 00000000 ____D C:\Users\MajorVegi\Downloads\Data
2013-07-22 19:42 - 2013-07-22 19:42 - 04272474 _____ C:\Users\MajorVegi\Downloads\osam_autorun_manager_5_0_portable.rar
2013-07-22 19:42 - 2009-09-18 20:14 - 01093632 _____ (Online Solutions) C:\Users\MajorVegi\Downloads\osam_srv.dll
2013-07-22 19:42 - 2009-09-18 20:13 - 01392640 _____ (Online Solutions) C:\Users\MajorVegi\Downloads\osam_gui.dll
2013-07-22 19:42 - 2009-09-18 20:13 - 00372736 _____ (Online Solutions) C:\Users\MajorVegi\Downloads\osam.exe
2013-07-22 19:42 - 2009-09-09 17:38 - 02437632 _____ (Codejock Software) C:\Users\MajorVegi\Downloads\ToolkitPro1211vc80U.dll
2013-07-22 19:42 - 2007-10-30 00:24 - 01093120 _____ (Microsoft Corporation) C:\Users\MajorVegi\Downloads\mfc80u.dll
2013-07-22 19:42 - 2007-10-30 00:24 - 00626688 _____ (Microsoft Corporation) C:\Users\MajorVegi\Downloads\msvcr80.dll
2013-07-22 19:42 - 2007-10-30 00:24 - 00548864 _____ (Microsoft Corporation) C:\Users\MajorVegi\Downloads\msvcp80.dll
2013-07-22 19:42 - 2007-10-30 00:24 - 00002371 _____ C:\Users\MajorVegi\Downloads\Microsoft.VC80.MFC.manifest
2013-07-22 19:42 - 2007-10-30 00:24 - 00001869 _____ C:\Users\MajorVegi\Downloads\Microsoft.VC80.CRT.manifest
2013-07-21 22:34 - 2013-07-21 22:34 - 00000000 ____D C:\ProgramData\ATI
2013-07-21 22:34 - 2013-07-21 22:34 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-07-18 23:43 - 2013-07-18 23:43 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Unity
2013-07-18 23:08 - 2013-07-22 19:58 - 00000000 ____D C:\Users\MAJORV~1\AppData\Local\Unity
2013-07-14 15:09 - 2013-07-14 15:09 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Creative
2013-07-13 10:38 - 2013-07-13 10:39 - 64079267 _____ C:\Users\MajorVegi\Downloads\Misa.zip
2013-07-13 10:35 - 2013-07-13 10:35 - 00675988 _____ C:\Users\MajorVegi\Downloads\Minecraft.exe
2013-07-12 21:06 - 2013-07-12 21:06 - 02828552 _____ (AVAST Software) C:\Users\MajorVegi\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-07-11 21:12 - 2013-07-11 21:12 - 00000000 _____ C:\END
2013-07-11 06:57 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 06:57 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 06:57 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 06:57 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 06:57 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 06:57 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 06:57 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 06:57 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 06:57 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 06:57 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 06:57 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 06:57 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 06:57 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 06:57 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 06:57 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 06:57 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 06:57 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 06:57 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 06:57 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 06:57 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 06:57 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 06:57 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 05:55 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 05:55 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 05:55 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 05:55 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 05:55 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 05:54 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 05:54 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 20:37 - 2013-07-09 20:37 - 01324251 _____ (Michael Pluemper                                            ) C:\Users\MajorVegi\Downloads\ID3-TagIT-Setup33.exe
2013-07-08 06:26 - 2013-07-11 21:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-27 21:46 - 2013-06-27 21:46 - 00000000 ____D C:\Users\Public\Documents\sun
2013-06-27 21:45 - 2013-06-27 21:45 - 00001172 _____ C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk

==================== One Month Modified Files and Folders =======

2013-07-24 17:30 - 2013-07-24 17:30 - 00000000 ____D C:\FRST
2013-07-24 17:29 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-24 17:29 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-24 17:28 - 2013-07-24 17:28 - 01779757 _____ (Farbar) C:\Users\MajorVegi\Desktop\FRST64.exe
2013-07-24 17:27 - 2011-04-12 09:43 - 00696620 _____ C:\Windows\system32\perfh007.dat
2013-07-24 17:27 - 2011-04-12 09:43 - 00147916 _____ C:\Windows\system32\perfc007.dat
2013-07-24 17:27 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-24 17:22 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-24 17:22 - 2009-07-14 06:51 - 00111238 _____ C:\Windows\setupact.log
2013-07-24 06:46 - 2011-09-14 02:44 - 01706200 _____ C:\Windows\WindowsUpdate.log
2013-07-24 06:16 - 2013-07-22 21:33 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-24 06:12 - 2011-09-24 10:22 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000UA.job
2013-07-24 05:59 - 2011-09-14 22:42 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Winamp
2013-07-23 23:49 - 2011-09-14 22:51 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Skype
2013-07-23 21:58 - 2010-11-21 05:47 - 00019718 _____ C:\Windows\PFRO.log
2013-07-23 21:36 - 2013-07-23 21:36 - 00002425 _____ C:\Users\MajorVegi\Desktop\rescue-system_scan_back.log
2013-07-23 20:50 - 2013-07-23 20:50 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2013-07-23 20:37 - 2011-09-14 22:51 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-23 20:37 - 2011-09-14 22:51 - 00000000 ____D C:\ProgramData\Skype
2013-07-23 20:34 - 2011-09-28 18:57 - 00000000 ____D C:\Windows\pss
2013-07-23 20:32 - 2011-09-14 20:46 - 00000000 ____D C:\Users\MajorVegi
2013-07-23 20:27 - 2013-07-23 20:15 - 00001962 _____ C:\Windows\system32\Drivers\fvstore.dat
2013-07-23 20:26 - 2011-09-15 10:11 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-07-23 20:26 - 2011-09-13 23:22 - 00000000 ____D C:\Users\MAJORV~1\AppData\Local\Adobe
2013-07-23 19:45 - 2013-07-23 19:43 - 00001352 _____ C:\Users\MajorVegi\Desktop\rescue-system_scan02.log
2013-07-23 18:24 - 2011-09-13 23:49 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\vlc
2013-07-23 18:17 - 2009-07-14 06:45 - 00313848 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-22 22:58 - 2011-09-14 21:52 - 01589442 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-07-22 21:33 - 2013-07-22 21:33 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-22 21:33 - 2013-07-22 21:33 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-22 21:33 - 2013-07-22 21:33 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-22 20:24 - 2013-07-22 20:24 - 00049010 _____ C:\Users\MajorVegi\Desktop\Extras.Txt
2013-07-22 20:23 - 2013-07-22 20:23 - 00114976 _____ C:\Users\MajorVegi\Desktop\OTL.Txt
2013-07-22 20:22 - 2013-07-22 20:22 - 00377856 _____ C:\Users\MajorVegi\Desktop\gmer_2.1.19163.exe
2013-07-22 20:18 - 2013-07-22 20:18 - 00602112 _____ (OldTimer Tools) C:\Users\MajorVegi\Downloads\OTL.exe
2013-07-22 20:17 - 2013-07-22 20:17 - 00000480 _____ C:\Users\MajorVegi\Desktop\defogger_disable.log
2013-07-22 20:17 - 2013-07-22 20:17 - 00000000 _____ C:\Users\MajorVegi\defogger_reenable
2013-07-22 20:16 - 2013-07-22 20:16 - 00050477 _____ C:\Users\MajorVegi\Downloads\Defogger.exe
2013-07-22 20:04 - 2013-07-22 19:44 - 00000000 ____D C:\Users\MajorVegi\Downloads\Data
2013-07-22 19:58 - 2013-07-18 23:08 - 00000000 ____D C:\Users\MAJORV~1\AppData\Local\Unity
2013-07-22 19:42 - 2013-07-22 19:42 - 04272474 _____ C:\Users\MajorVegi\Downloads\osam_autorun_manager_5_0_portable.rar
2013-07-21 22:34 - 2013-07-21 22:34 - 00000000 ____D C:\ProgramData\ATI
2013-07-21 22:34 - 2013-07-21 22:34 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-07-21 22:34 - 2011-09-14 21:27 - 00000000 ____D C:\ProgramData\AMD
2013-07-21 22:34 - 2011-09-14 21:26 - 00000000 ____D C:\Program Files\ATI Technologies
2013-07-21 20:28 - 2013-02-18 21:47 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\avidemux
2013-07-21 09:12 - 2011-09-24 10:22 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000Core.job
2013-07-20 18:02 - 2011-10-22 18:09 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\.minecraft
2013-07-18 23:43 - 2013-07-18 23:43 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Unity
2013-07-16 02:04 - 2013-03-25 07:45 - 00000022 _____ C:\Users\MajorVegi\Desktop\shoutdown.txt
2013-07-14 15:09 - 2013-07-14 15:09 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Creative
2013-07-14 00:20 - 2011-10-02 18:17 - 00000000 ____D C:\Users\MajorVegi\.gimp-2.6
2013-07-13 10:39 - 2013-07-13 10:38 - 64079267 _____ C:\Users\MajorVegi\Downloads\Misa.zip
2013-07-13 10:35 - 2013-07-13 10:35 - 00675988 _____ C:\Users\MajorVegi\Downloads\Minecraft.exe
2013-07-13 09:07 - 2011-09-24 10:22 - 00004114 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000UA
2013-07-13 09:07 - 2011-09-24 10:22 - 00003718 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000Core
2013-07-12 21:06 - 2013-07-12 21:06 - 02828552 _____ (AVAST Software) C:\Users\MajorVegi\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-07-11 22:08 - 2013-05-23 19:32 - 00000000 ____D C:\Program Files (x86)\ManyCam
2013-07-11 21:54 - 2013-07-08 06:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-11 21:33 - 2012-02-15 19:12 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Azureus
2013-07-11 21:12 - 2013-07-11 21:12 - 00000000 _____ C:\END
2013-07-11 17:10 - 2012-08-13 06:12 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 17:10 - 2012-08-13 06:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 17:10 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 17:10 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 17:10 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 06:58 - 2011-09-14 21:04 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-10 18:29 - 2012-07-23 18:01 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Dropbox
2013-07-09 20:37 - 2013-07-09 20:37 - 01324251 _____ (Michael Pluemper                                            ) C:\Users\MajorVegi\Downloads\ID3-TagIT-Setup33.exe
2013-07-09 17:08 - 2011-09-15 10:15 - 00000000 ____D C:\ProgramData\FLEXnet
2013-07-09 00:05 - 2012-04-25 21:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-08 17:35 - 2013-05-17 17:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox.bak
2013-06-29 00:41 - 2011-09-14 20:46 - 00000000 ___RD C:\Users\MajorVegi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-06-28 23:02 - 2011-10-06 21:05 - 00482894 _____ C:\Windows\DirectX.log
2013-06-27 22:36 - 2011-09-14 21:29 - 00071688 _____ C:\Users\MAJORV~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-27 21:46 - 2013-06-27 21:46 - 00000000 ____D C:\Users\Public\Documents\sun
2013-06-27 21:45 - 2013-06-27 21:45 - 00001172 _____ C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
2013-06-27 21:45 - 2012-02-04 20:53 - 00000000 ____D C:\Program Files (x86)\OpenOffice.org 3
2013-06-25 22:15 - 2012-07-23 18:04 - 00000991 _____ C:\Users\MajorVegi\Desktop\Dropbox.lnk
2013-06-25 22:15 - 2012-07-23 18:02 - 00000000 ____D C:\Users\MajorVegi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-16 02:34

==================== End Of Log ============================
         

--- --- ---


Addition.txt:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-07-2013
Ran by MajorVegi at 2013-07-24 17:31:56
Running from C:\Users\MajorVegi\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Acrobat 8 Professional - English, Français, Deutsch (x32 Version: 8.0.0)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2013.0328.2218.38225)
AMD Media Foundation Decoders (Version: 1.0.80328.2204)
AMD Steady Video Plug-In  (Version: 2.04.0000)
AMD VISION Engine Control Center (x32 Version: 2013.0328.2218.38225)
Apple Application Support (x32 Version: 2.3)
Apple Software Update (x32 Version: 2.1.3.127)
Audacity 1.3.13 (Unicode) (x32)
Autodesk Backburner 2012.0.0 (x32 Version: 2012.0.0)
Avidemux 2.6 (32-bit) (x32 Version: 2.6.1.8321)
Bamboo (Version: 5.2.4-6)
Batman: Arkham City™ (x32 Version: 1.0.0000.131)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225)
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225)
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225)
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225)
CCC Help Czech (x32 Version: 2013.0328.2217.38225)
CCC Help Danish (x32 Version: 2013.0328.2217.38225)
CCC Help Dutch (x32 Version: 2013.0328.2217.38225)
CCC Help English (x32 Version: 2013.0328.2217.38225)
CCC Help Finnish (x32 Version: 2013.0328.2217.38225)
CCC Help French (x32 Version: 2013.0328.2217.38225)
CCC Help German (x32 Version: 2013.0328.2217.38225)
CCC Help Greek (x32 Version: 2013.0328.2217.38225)
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225)
CCC Help Italian (x32 Version: 2013.0328.2217.38225)
CCC Help Japanese (x32 Version: 2013.0328.2217.38225)
CCC Help Korean (x32 Version: 2013.0328.2217.38225)
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225)
CCC Help Polish (x32 Version: 2013.0328.2217.38225)
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225)
CCC Help Russian (x32 Version: 2013.0328.2217.38225)
CCC Help Spanish (x32 Version: 2013.0328.2217.38225)
CCC Help Swedish (x32 Version: 2013.0328.2217.38225)
CCC Help Thai (x32 Version: 2013.0328.2217.38225)
CCC Help Turkish (x32 Version: 2013.0328.2217.38225)
ccc-utility64 (Version: 2013.0328.2218.38225)
COMODO Firewall (Version: 6.2.20728.2847)
DAEMON Tools Lite (x32 Version: 4.46.1.0327)
Dropbox (HKCU Version: 2.0.22)
Dual-Core Optimizer (x32 Version: 1.1.4.0169)
e! Cam Sync HD VF0770 Driver (1.00.02.00)
Element4l (x32)
EPSON Scan (x32)
F.lux (HKCU)
FileZilla Client 3.7.0.1 (x32 Version: 3.7.0.1)
GIMP 2.6.11 (x32 Version: 2.6.11)
Google Chrome (HKCU Version: 28.0.1500.72)
GPL Ghostscript (x32 Version: 9.05)
IrfanView (remove only) (x32 Version: 4.30)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 22 (x32 Version: 6.0.220)
LAME v3.98.3 for Audacity (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Security Client (Version: 4.2.0223.1)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.2.223.1)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0)
Minutor (x32 Version: 1.6.3)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
Notepad++ (x32 Version: 6.2)
NVIDIA PhysX (x32 Version: 9.09.0814)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
QuickTime (x32 Version: 7.74.80.86)
Realtek Ethernet Controller Driver (x32 Version: 7.46.531.2011)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6409)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6449)
Saints Row: The Third (x32)
Scribus 1.4.1 (x32 Version: 1.4.1)
Skype Click to Call (x32 Version: 5.9.9216)
Skype™ 6.6 (x32 Version: 6.6.106)
Steam (x32 Version: 1.0.0.0)
SUPER © +Recorder.2013.55 (Mar 7, 2013) Version +Recorder.2013. (x32 Version: +Recorder.2013.55)
Thomas Was Alone (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
VLC media player 2.0.7 (x32 Version: 2.0.7)
WebTablet IE Plugin (x32 Version: 1.1.0.7)
WebTablet Netscape Plugin (x32 Version: 1.1.0.5)
Winamp (x32 Version: 5.621 )
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
WinRAR 4.01 (64-Bit) (Version: 4.01.0)

==================== Restore Points  =========================

22-07-2013 15:26:57 Windows Update
22-07-2013 17:57:08 Removed Adobe Reader X (10.1.7) - Deutsch.
22-07-2013 20:55:38 Windows Update
23-07-2013 17:59:14 Gerätetreiber-Paketinstallation: COMODO Netzwerkdienst
23-07-2013 18:49:18 Removed GeekBuddy.
23-07-2013 18:54:39 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-01-16 19:52 - 00000830 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1785FAAF-1785-4DAA-A740-8347CC0C2B53} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {360401A2-D348-415E-976F-FE22F1EF62AF} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2013-07-08] (COMODO)
Task: {4060176C-4066-44E3-A83D-63FAA06E0162} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {42DA52A7-6ADB-463F-9AB9-032524C2C293} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000UA => C:\Users\MajorVegi\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-24] (Google Inc.)
Task: {43ABE0B1-18E9-4952-B6DD-91C176BA5404} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-22] (Adobe Systems Incorporated)
Task: {43E2DB28-783D-4A6D-8E15-673A5DB4E73A} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => C:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {7DAABA0E-43A5-4CD1-B309-1BD1725578C6} - System32\Tasks\COMODO\COMODO Welcome {CEB54B45-2B5E-4FF5-9223-6735CD80FE69} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [2013-07-08] (COMODO)
Task: {A4048EC4-2F92-4103-ACDB-B833F286FFCE} - System32\Tasks\{CE95E4DA-E424-428A-B55B-50AAF1FA8C24} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {D60EC4DD-5494-40A5-8755-FE1CDCFADA23} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-01-27] (Microsoft Corporation)
Task: {EDB224D8-07AF-44AA-8925-46EBE3BC33F4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {F04D0094-E3AE-4DBF-AC9A-145B7C23196D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000Core => C:\Users\MajorVegi\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-24] (Google Inc.)
Task: {F74B5C41-42C4-4356-923C-648B01A9F201} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000Core.job => C:\Users\MajorVegi\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-145833288-3684113049-1461127088-1000UA.job => C:\Users\MajorVegi\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/24/2013 05:24:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 05:54:30 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/23/2013 10:00:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/23/2013 08:39:01 PM) (Source: MsiInstaller) (User: Martin)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/23/2013 08:39:00 PM) (Source: MsiInstaller) (User: Martin)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/23/2013 08:38:55 PM) (Source: MsiInstaller) (User: Martin)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/23/2013 08:38:52 PM) (Source: MsiInstaller) (User: Martin)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/23/2013 08:34:19 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/23/2013 08:22:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/23/2013 08:04:43 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (07/24/2013 05:22:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/24/2013 05:53:01 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/23/2013 09:59:18 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/23/2013 08:32:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/23/2013 08:32:30 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎23.‎07.‎2013 um 20:30:51 unerwartet heruntergefahren.

Error: (07/23/2013 08:21:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/23/2013 08:21:19 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎23.‎07.‎2013 um 20:18:50 unerwartet heruntergefahren.

Error: (07/23/2013 08:03:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/23/2013 07:38:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/23/2013 06:17:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "AODDriver4.2" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (07/24/2013 05:24:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/24/2013 05:54:30 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/23/2013 10:00:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/23/2013 08:39:01 PM) (Source: MsiInstaller)(User: Martin)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/23/2013 08:39:00 PM) (Source: MsiInstaller)(User: Martin)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/23/2013 08:38:55 PM) (Source: MsiInstaller)(User: Martin)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/23/2013 08:38:52 PM) (Source: MsiInstaller)(User: Martin)
Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/23/2013 08:34:19 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/23/2013 08:22:58 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/23/2013 08:04:43 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 12%
Total physical RAM: 16381.55 MB
Available physical RAM: 14274.89 MB
Total Pagefile: 32761.29 MB
Available Pagefile: 30399.95 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.95 GB) (Free:61.43 GB) NTFS (Disk=0 Partition=2)
Drive e: (Volume) (Fixed) (Total:465.75 GB) (Free:263.15 GB) NTFS (Disk=1 Partition=1)
Drive f: (Volume02) (Fixed) (Total:465.75 GB) (Free:340.7 GB) NTFS (Disk=1 Partition=2)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 4052F5C0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: EDF3E195)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Dann bitte jetzt Combofix ausführen:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Der Scan läuft im Moment (schreibe von Netbook).
Läuft jetzt seit ca. 1 h 15 Min.
Der Ladebalken steht bei 80% und das seit etwa 45 Min.

Die letzten zwei Dateien sind:
C:/ 32788R22FWJFW\N_
C:/ 32788R22FWJFW

Der Scan scheint nicht weiter zu laufen. Alle Schaltflächen sind ausgegraut.

Wie lange soll ich noch warten? Und welche Art Abbruch wäre im Notfall die Beste?

Ist CF nun weiter?

Zitat von cosinus

Ist CF nun weiter?

Nein, immer noch nichts Neues.

Aber die Lüfter laufen und 16% RAM in use, 6% Prozessor. So jedenfalls die mini widgets.
Maus immer noch nicht bewegt.

Ich hab Zeit, also kann ich es gerne noch weiter laufen lassen wenn das was bringt.

Bemerkst du denn zB eine Festplattenaktivität?

Das Festplattenkontrolllämpchen leuchtet immer mal in sehr unregelmäßigen Abständen.
Keine Geräusche von den Platten direkt und keine Veränderung in der Lüfteraktivität.

EDIT:
Nun sind die Monitore in Sleep Mode gegangen.

Was nun?