MalwareScan findet 11 infizierte Dateien

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by eva (administrator) on USER-PC on 08-10-2013 16:06:54
Running from E:\Eigene Dateien\Tools\MalwareRemoval
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12681320 2011-08-25] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-30] (Adobe Systems Incorporated)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671872 2012-04-17] (DT Soft Ltd)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Policies\Explorer: [NoPreviewPane] 1
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2013-09-03] (Adobe Systems Inc.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x55727D891264CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://isearch.avg.com/search?cid={6A239010-F6C4-4895-898D-0348A0F3AC65}&mid=909b3756c71747d0aef3854de00b40d9-bcae698d9fdf69a924f07dbbb554428022ad3e3a&lang=de&ds=od011&pr=sa&d=2012-07-18 21:11:22&v=12.1.0.20&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://isearch.avg.com/search?cid={6A239010-F6C4-4895-898D-0348A0F3AC65}&mid=909b3756c71747d0aef3854de00b40d9-bcae698d9fdf69a924f07dbbb554428022ad3e3a&lang=de&ds=od011&pr=sa&d=2012-07-18 21:11:22&v=12.1.0.20&sap=dsp&q={searchTerms}
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} -  No File
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU -  No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.5.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default
FF DefaultSearchEngine: DuckDuckGo
FF SelectedSearchEngine: DuckDuckGo
FF Homepage: hxxp://www.mail.com/int/
FF NetworkProxy: "http", "87.236.210.45"
FF NetworkProxy: "http_port", 443
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\searchplugins\duckduckgo.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: info - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\info@youtube-mp3.org.xpi
FF Extension: jid0-HZ5UvAEiWWAxT9TKLuhEgUCARqo - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\jid0-HZ5UvAEiWWAxT9TKLuhEgUCARqo@jetpack.xpi
FF Extension: jid1-ZAdIEUB7XOzOJw - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi
FF Extension: restart - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\restart@restart.org.xpi
FF Extension: stealthyextension - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\stealthyextension@gmail.com.xpi
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA5}.xpi
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vg3gcqwf.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-03] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-03] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2028864 2011-12-13] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-08-06] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-01-31] (DT Soft Ltd)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [40712 2012-11-15] (Anchorfree Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2011-07-07] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-08 16:06 - 2013-10-08 16:06 - 00000000 ____D C:\FRST
2013-10-08 10:57 - 2013-10-08 10:57 - 99836383 _____ C:\Windows\SysWOW64\亢Z
2013-10-06 21:30 - 2013-10-06 22:37 - 00010522 _____ C:\Users\User\Documents\TombRaider.log
2013-10-06 19:50 - 2013-10-06 19:50 - 00000000 ____D C:\Users\User\AppData\Roaming\Blue Tea Games
2013-10-01 16:20 - 2013-10-01 16:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-24 18:49 - 2013-09-24 18:53 - 00000000 ____D C:\Users\User\AppData\Roaming\Phantasmat_bf_ce1
2013-09-24 18:35 - 2013-09-24 18:36 - 00000000 ____D C:\Users\User\AppData\Roaming\Phantasmat_css_ce
2013-09-24 18:35 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\StoneLoops!
2013-09-24 18:35 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\Saqqarah
2013-09-24 18:35 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\PhantasmatCE
2013-09-24 18:35 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\MagicMatch
2013-09-22 20:20 - 2013-09-22 20:20 - 00000000 ____D C:\Users\User\AppData\Roaming\Unity
2013-09-22 20:19 - 2013-09-22 20:19 - 00000000 ____D C:\Users\User\AppData\Local\Unity
2013-09-22 12:02 - 2013-09-22 12:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_wpdcomp_01_09_00.Wdf
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Wave64 Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Batch Ripper.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Tag From Filename] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Multi Encoder] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Length Split] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [ID Tag Update] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Audio Info] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Arrange Audio] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00003118 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Multi Encoder] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002902 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [ID Tag Update] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002880 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Arrange Audio] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002872 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Audio Info] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002870 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Tag From Filename] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002863 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Length Split] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002451 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Batch Ripper.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00001231 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Wave64 Codec.dat
2013-09-20 11:58 - 2013-09-20 12:04 - 00000000 ____D C:\Users\User\AppData\Roaming\dBpoweramp
2013-09-20 11:58 - 2013-09-20 11:58 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBPoweramp tooLame MP2 codec.bmp
2013-09-20 11:58 - 2013-09-20 11:58 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp mp3 (Fraunhofer IIS) Codec.bmp
2013-09-20 11:58 - 2013-09-20 11:58 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Midi Decoder.bmp
2013-09-20 11:58 - 2013-09-20 11:58 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp DirectShow Decoder.bmp
2013-09-20 11:58 - 2013-09-20 11:58 - 00003160 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp mp3 (Fraunhofer IIS) Codec.dat
2013-09-20 11:58 - 2013-09-20 11:58 - 00002745 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp DirectShow Decoder.dat
2013-09-20 11:58 - 2013-09-20 11:58 - 00002656 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Midi Decoder.dat
2013-09-20 11:58 - 2013-09-20 11:58 - 00002235 _____ C:\Windows\SysWOW64\SpoonUninstall-dBPoweramp tooLame MP2 codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp WavPack Codec.bmp
2013-09-20 11:57 - 2013-09-20 11:57 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBPowerAMP Mp2 and BwfMp2 codec.bmp
2013-09-20 11:57 - 2013-09-20 11:57 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp AIFF Codec.bmp
2013-09-20 11:57 - 2013-09-20 11:57 - 00003153 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Monkeys Audio Codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00003025 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp FLAC Codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00003019 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp WavPack Codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00001746 _____ C:\Windows\SysWOW64\SpoonUninstall-dBPowerAMP Mp2 and BwfMp2 codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00001087 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp AIFF Codec.dat
2013-09-20 11:57 - 2013-09-20 11:56 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp FLAC Codec.bmp
2013-09-20 11:56 - 2013-09-20 11:56 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Windows Media Audio 10 Codec.bmp
2013-09-20 11:56 - 2013-09-20 11:56 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Musepack Codec.bmp
2013-09-20 11:56 - 2013-09-20 11:56 - 00003290 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Musepack Codec.dat
2013-09-20 11:56 - 2013-09-20 11:56 - 00003191 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Windows Media Audio 10 Codec.dat
2013-09-20 11:56 - 2013-09-20 11:56 - 00003041 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Ogg Vorbis Codec.dat
2013-09-20 11:55 - 2013-09-20 11:55 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp m4a Nero AAC Encoder.bmp
2013-09-20 11:55 - 2013-09-20 11:55 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp m4a Codec.bmp
2013-09-20 11:55 - 2013-09-20 11:55 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp AAC Encoder.bmp
2013-09-20 11:55 - 2013-09-20 11:55 - 00003628 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp m4a Nero AAC Encoder.dat
2013-09-20 11:55 - 2013-09-20 11:55 - 00003335 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp AAC Encoder.dat
2013-09-20 11:55 - 2013-09-20 11:55 - 00003298 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp m4a Codec.dat
2013-09-20 11:54 - 2013-09-20 12:00 - 00000000 ____D C:\Users\User\AppData\Roaming\AccurateRip
2013-09-20 11:54 - 2013-09-20 11:54 - 00018000 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Music Converter.dat
2013-09-20 11:54 - 2013-09-20 11:54 - 00013968 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp DSP Effects.dat
2013-09-20 11:54 - 2012-05-29 22:03 - 01110248 _____ C:\Windows\SysWOW64\SpoonUninstall.exe
2013-09-20 11:53 - 2013-09-20 11:54 - 00000000 ____D C:\Program Files (x86)\dBpoweramp
2013-09-11 17:50 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-11 17:50 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-11 17:50 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-11 17:50 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-11 17:50 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-11 17:50 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-11 17:50 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-11 17:50 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-11 17:50 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-11 17:50 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-11 17:50 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-11 17:50 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-11 17:50 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-11 17:50 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-11 17:50 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-11 17:50 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-11 17:50 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-11 17:50 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-11 17:50 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-11 17:50 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-11 17:50 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-11 13:05 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 13:05 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 13:05 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 13:05 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 13:05 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 13:05 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 13:05 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 13:05 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 13:05 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 13:05 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 13:05 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 13:05 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 13:05 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 13:05 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 13:05 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 13:05 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 13:05 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 13:05 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 13:05 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 13:05 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 13:05 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 13:05 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 13:05 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 13:05 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 13:05 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 13:05 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 13:05 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-11 11:48 - 2013-09-11 11:49 - 00002121 _____ C:\Users\User\Desktop\Photoshop 7.0.lnk
2013-09-09 20:21 - 2013-09-09 20:21 - 00000000 ____D C:\Users\User\AppData\Roaming\Orneon

==================== One Month Modified Files and Folders =======

2013-10-08 16:06 - 2013-10-08 16:06 - 00000000 ____D C:\FRST
2013-10-08 15:23 - 2012-08-17 20:01 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-08 15:16 - 2012-07-17 19:25 - 02054789 _____ C:\Windows\WindowsUpdate.log
2013-10-08 11:05 - 2013-08-06 22:03 - 00000000 ____D C:\Users\User\Downloads\Tools
2013-10-08 11:04 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-08 11:04 - 2009-07-14 06:45 - 00021856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-08 11:02 - 2011-04-12 09:43 - 00654150 _____ C:\Windows\system32\perfh007.dat
2013-10-08 11:02 - 2011-04-12 09:43 - 00130022 _____ C:\Windows\system32\perfc007.dat
2013-10-08 11:02 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-08 10:57 - 2013-10-08 10:57 - 99836383 _____ C:\Windows\SysWOW64\亢Z
2013-10-08 10:56 - 2012-07-17 13:56 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-08 10:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-08 10:56 - 2009-07-14 06:51 - 00070457 _____ C:\Windows\setupact.log
2013-10-07 17:25 - 2013-08-28 19:00 - 00001456 _____ C:\Users\User\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-10-06 22:37 - 2013-10-06 21:30 - 00010522 _____ C:\Users\User\Documents\TombRaider.log
2013-10-06 21:30 - 2012-10-10 22:45 - 00000000 ____D C:\Users\User\AppData\Local\SKIDROW
2013-10-06 19:50 - 2013-10-06 19:50 - 00000000 ____D C:\Users\User\AppData\Roaming\Blue Tea Games
2013-10-06 16:36 - 2012-07-19 21:13 - 00000000 ___RD C:\Users\User\Desktop\Spiele
2013-10-06 16:17 - 2012-07-19 22:17 - 00000000 ____D C:\Program Files (x86)\Spiele
2013-10-06 15:48 - 2012-07-17 13:37 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-06 13:20 - 2013-07-29 21:57 - 00000000 ___RD C:\Users\User\Desktop\Für Christian
2013-10-05 16:34 - 2012-07-19 20:06 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-05 15:07 - 2012-07-18 16:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-02 11:24 - 2012-07-18 15:47 - 00000000 ____D C:\Users\User\AppData\Local\Mozilla
2013-10-02 02:12 - 2012-07-20 03:01 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2013-10-01 16:20 - 2013-10-01 16:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 13:49 - 2012-07-17 14:30 - 00174736 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-30 13:49 - 2009-07-14 06:45 - 05208184 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-29 22:11 - 2012-07-20 22:36 - 00000000 ____D C:\Users\User\AppData\Local\Daedalic Entertainment
2013-09-29 21:47 - 2012-07-17 13:54 - 00513029 _____ C:\Windows\DirectX.log
2013-09-28 18:13 - 2012-08-14 19:07 - 00000000 ____D C:\Users\User\AppData\Roaming\Doublefine
2013-09-24 20:59 - 2013-01-13 22:02 - 00000000 ____D C:\Users\User\Downloads\Spiele
2013-09-24 19:58 - 2013-06-10 19:27 - 00000000 ____D C:\Users\User\AppData\Roaming\Azureus
2013-09-24 18:53 - 2013-09-24 18:49 - 00000000 ____D C:\Users\User\AppData\Roaming\Phantasmat_bf_ce1
2013-09-24 18:36 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\Phantasmat_css_ce
2013-09-24 18:35 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\StoneLoops!
2013-09-24 18:35 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\Saqqarah
2013-09-24 18:35 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\PhantasmatCE
2013-09-24 18:35 - 2013-09-24 18:35 - 00000000 ____D C:\Users\User\AppData\Roaming\MagicMatch
2013-09-22 20:20 - 2013-09-22 20:20 - 00000000 ____D C:\Users\User\AppData\Roaming\Unity
2013-09-22 20:19 - 2013-09-22 20:19 - 00000000 ____D C:\Users\User\AppData\Local\Unity
2013-09-22 12:02 - 2013-09-22 12:02 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_wpdcomp_01_09_00.Wdf
2013-09-21 22:44 - 2012-08-17 20:01 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-21 22:44 - 2012-07-17 14:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-21 22:44 - 2012-07-17 14:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 12:04 - 2013-09-20 11:58 - 00000000 ____D C:\Users\User\AppData\Roaming\dBpoweramp
2013-09-20 12:00 - 2013-09-20 11:54 - 00000000 ____D C:\Users\User\AppData\Roaming\AccurateRip
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Wave64 Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Batch Ripper.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Tag From Filename] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Multi Encoder] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Length Split] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [ID Tag Update] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Audio Info] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Arrange Audio] Codec.bmp
2013-09-20 11:59 - 2013-09-20 11:59 - 00003118 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Multi Encoder] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002902 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [ID Tag Update] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002880 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Arrange Audio] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002872 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Audio Info] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002870 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Tag From Filename] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002863 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp [Length Split] Codec.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00002451 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Batch Ripper.dat
2013-09-20 11:59 - 2013-09-20 11:59 - 00001231 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Wave64 Codec.dat
2013-09-20 11:58 - 2013-09-20 11:58 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBPoweramp tooLame MP2 codec.bmp
2013-09-20 11:58 - 2013-09-20 11:58 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp mp3 (Fraunhofer IIS) Codec.bmp
2013-09-20 11:58 - 2013-09-20 11:58 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Midi Decoder.bmp
2013-09-20 11:58 - 2013-09-20 11:58 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp DirectShow Decoder.bmp
2013-09-20 11:58 - 2013-09-20 11:58 - 00003160 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp mp3 (Fraunhofer IIS) Codec.dat
2013-09-20 11:58 - 2013-09-20 11:58 - 00002745 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp DirectShow Decoder.dat
2013-09-20 11:58 - 2013-09-20 11:58 - 00002656 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Midi Decoder.dat
2013-09-20 11:58 - 2013-09-20 11:58 - 00002235 _____ C:\Windows\SysWOW64\SpoonUninstall-dBPoweramp tooLame MP2 codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp WavPack Codec.bmp
2013-09-20 11:57 - 2013-09-20 11:57 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBPowerAMP Mp2 and BwfMp2 codec.bmp
2013-09-20 11:57 - 2013-09-20 11:57 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp AIFF Codec.bmp
2013-09-20 11:57 - 2013-09-20 11:57 - 00003153 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Monkeys Audio Codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00003025 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp FLAC Codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00003019 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp WavPack Codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00001746 _____ C:\Windows\SysWOW64\SpoonUninstall-dBPowerAMP Mp2 and BwfMp2 codec.dat
2013-09-20 11:57 - 2013-09-20 11:57 - 00001087 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp AIFF Codec.dat
2013-09-20 11:56 - 2013-09-20 11:57 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp FLAC Codec.bmp
2013-09-20 11:56 - 2013-09-20 11:56 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Windows Media Audio 10 Codec.bmp
2013-09-20 11:56 - 2013-09-20 11:56 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Musepack Codec.bmp
2013-09-20 11:56 - 2013-09-20 11:56 - 00003290 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Musepack Codec.dat
2013-09-20 11:56 - 2013-09-20 11:56 - 00003191 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Windows Media Audio 10 Codec.dat
2013-09-20 11:56 - 2013-09-20 11:56 - 00003041 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Ogg Vorbis Codec.dat
2013-09-20 11:55 - 2013-09-20 11:55 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp m4a Nero AAC Encoder.bmp
2013-09-20 11:55 - 2013-09-20 11:55 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp m4a Codec.bmp
2013-09-20 11:55 - 2013-09-20 11:55 - 00033846 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp AAC Encoder.bmp
2013-09-20 11:55 - 2013-09-20 11:55 - 00003628 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp m4a Nero AAC Encoder.dat
2013-09-20 11:55 - 2013-09-20 11:55 - 00003335 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp AAC Encoder.dat
2013-09-20 11:55 - 2013-09-20 11:55 - 00003298 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp m4a Codec.dat
2013-09-20 11:54 - 2013-09-20 11:54 - 00018000 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp Music Converter.dat
2013-09-20 11:54 - 2013-09-20 11:54 - 00013968 _____ C:\Windows\SysWOW64\SpoonUninstall-dBpoweramp DSP Effects.dat
2013-09-20 11:54 - 2013-09-20 11:53 - 00000000 ____D C:\Program Files (x86)\dBpoweramp
2013-09-18 12:01 - 2012-07-26 17:19 - 00010559 _____ C:\Users\User\Sti_Trace.log
2013-09-12 14:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-11 21:00 - 2012-07-17 13:30 - 00000000 ___RD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-11 17:50 - 2013-07-21 21:34 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 17:49 - 2012-07-17 14:09 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 15:46 - 2012-07-17 14:36 - 00000000 ____D C:\Users\User\AppData\Roaming\Adobe
2013-09-11 11:49 - 2013-09-11 11:48 - 00002121 _____ C:\Users\User\Desktop\Photoshop 7.0.lnk
2013-09-10 22:21 - 2012-07-17 14:35 - 00000000 ____D C:\ProgramData\Adobe
2013-09-09 20:21 - 2013-09-09 20:21 - 00000000 ____D C:\Users\User\AppData\Roaming\Orneon

Some content of TEMP:
====================
C:\Users\eve_everyday\AppData\Local\Temp\AskSLib.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2012-07-17 13:58] - [2011-02-25 08:19] - 2871808 ____A (Microsoft Corporation) B0C9341DF232B3E7E19E1C876130FEF2

C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-01 15:55

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by eva at 2013-10-08 16:07:17
Running from E:\Eigene Dateien\Tools\MalwareRemoval
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

AbiWord 2.8.6 (x32 Version: 2.8.6)
Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.1.8)
Adobe Creative Suite 5.5 Design Premium (x32 Version: 5.5)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Photoshop 7.0 (x32 Version: 7.0)
Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.12.5.0)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Brütal Legend (x32)
Capsule (x32 Version: 1.0.000)
Classic Shell (Version: 3.5.1)
Corel Graphics - Windows Shell Extension (x32 Version: 16.3.0.1114)
Corel Graphics - Windows Shell Extension (x32 Version: 16.3.1114)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 16.3.1114)
CorelDRAW Graphics Suite 12 (x32 Version: 12.0.0.458)
CorelDRAW Technical Suite X6 - Capture (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Common (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Common Apps (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Connect (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Core (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Custom Data (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - DE (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Designer (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Draw (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Filters (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - FontNav (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - IPM (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - IPM Content (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - IPM Lattice (x32 Version: 16.0)
CorelDRAW Technical Suite X6 - PHOTO-PAINT (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Photozoom Plugin (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Redist (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Setup Files (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - VBA (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - VideoBrowser (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - VSTA (x32 Version: 16.4)
CorelDRAW Technical Suite X6 - Writing Tools (x32 Version: 16.4)
CorelDRAW Technical Suite X6 (x32 Version: 16.3.0.1114)
DAEMON Tools Lite (x32 Version: 4.45.4.0315)
dBpoweramp [Arrange Audio] Codec (x32 Version: Release 3)
dBpoweramp [Audio Info] Codec (x32 Version: Release 1)
dBpoweramp [ID Tag Update] Codec (x32 Version: Release 3)
dBpoweramp [Length Split] Codec (x32)
dBpoweramp [Multi Encoder] Codec (x32 Version: Release 4)
dBpoweramp [Tag From Filename] Codec (x32 Version: Release 1)
dBpoweramp AAC Encoder (x32)
dBpoweramp AIFF Codec (x32 Version: Release 11)
dBpoweramp Batch Ripper (x32 Version: Release 1.5)
dBpoweramp DirectShow Decoder (x32 Version: Release 2)
dBpoweramp DSP Effects (x32 Version: Release 9)
dBpoweramp FLAC Codec (x32 Version: Release 14 (FLAC 1.2.1))
dBpoweramp m4a Codec (x32 Version: Release 14)
dBpoweramp m4a Nero AAC Encoder (x32 Version: Release 1)
dBpoweramp Midi Decoder (x32)
dBpoweramp Monkeys Audio Codec (x32 Version: Release 11 (Monkeys v4.06 PP))
dBPowerAMP Mp2 and BwfMp2 codec (x32 Version: Release 6)
dBpoweramp mp3 (Fraunhofer IIS) Codec (x32 Version: Release 2a (v4.0.3))
dBpoweramp Musepack Codec (x32)
dBpoweramp Music Converter (x32 Version: Release 14.4)
dBpoweramp Ogg Vorbis Codec (x32 Version: Release 22 (Vorbis v1.3.3))
dBPoweramp tooLame MP2 codec (x32)
dBpoweramp Wave64 Codec (x32)
dBpoweramp WavPack Codec (x32 Version: Release 8 (WavPack v4.60))
dBpoweramp Windows Media Audio 10 Codec (x32 Version: Release 7)
Dual-Core Optimizer (x32 Version: 1.1.4.0169)
DVDFab 9.0.5.5 (26/07/2013) (x32)
EPSON Scan (x32)
FileZilla Client 3.7.1.1 (x32 Version: 3.7.1.1)
Free YouTube Download version 3.2.9.725 (x32 Version: 3.2.9.725)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (x32 Version: 1)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JDownloader 0.9 (x32 Version: 0.9)
LAME v3.99.3 (for Windows) (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Visual Basic for Applications 7.1 (x86) (x32 Version: 7.1.00.00)
Microsoft Visual Basic for Applications 7.1 (x86) English (x32 Version: 7.1.0.0)
Microsoft Visual Basic for Applications 7.1 (x86) German (x32 Version: 7.1.0.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (x32 Version: 9.0.30729)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (x32 Version: 9.0.30729)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nero Burning ROM (x32 Version: 12.0.20000)
Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000)
Nero BurningROM 12 (x32 Version: 12.0.00300)
Nero ControlCenter (x32 Version: 11.0.15300)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.5000)
Nero Core Components (x32 Version: 11.0.18100)
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0)
Nero WaveEditor (x32 Version: 12.0.00500)
Nero WaveEditor (x32 Version: 12.0.4000)
Nero WaveEditor Help (CHM) (x32 Version: 12.0.4000)
Nokia Connectivity Cable Driver (Version: 7.1.32.69)
NVIDIA 3D Vision Controller Driver (x32 Version: 280.19)
NVIDIA 3D Vision Controller-Treiber 280.19 (Version: 280.19)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA HD-Audiotreiber 1.2.23.3 (Version: 1.2.23.3)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA PhysX (x32 Version: 9.12.0613)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenAL (x32)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
PDF Settings CS5 (x32 Version: 10.0)
PDFCreator (x32 Version: 1.4.3)
PDFill PDF Editor with FREE Writer and FREE Tools (Version: 10.0)
Prerequisite installer (x32 Version: 12.0.0002)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)
Psychonauts (x32)
Rainmeter (x32 Version: 2.3.3 r1522)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6446)
Resource Hacker Version 3.6.0 (x32)
Revo Uninstaller 1.94 (x32 Version: 1.94)
Skype™ 5.10 (x32 Version: 5.10.116)
Steam (x32 Version: 1.0.0.0)
System Requirements Lab for Intel (x32 Version: 4.5.5.0)
tento.XT v1.1 (x32)
The Longest Journey (x32)
The Raven - Legacy of a Master Thief (x32 Version: 1)
TuneUp Utilities 2011 (x32 Version: 10.0.4600.4)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4600.4)
Typograf4.8f (x32 Version: 4.8f)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
VLC media player 2.0.2 (Version: 2.0.2)
Winamp (x32 Version: 5.57 )
Winamp Anwendungserkennung (HKCU Version: 1.0.0.1)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)

==================== Restore Points  =========================

27-09-2013 23:03:51 Geplanter Prüfpunkt
28-09-2013 16:12:27 DirectX wurde installiert
29-09-2013 19:26:00 Installiert Memoria
06-10-2013 13:47:47 Entfernt Memoria
06-10-2013 14:32:09 DirectX wurde installiert

==================== Hosts content: ==========================

2009-07-14 04:34 - 2012-09-24 13:42 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {2A4C237A-AA61-4481-9B41-485E261D0D34} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-eva => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-30] (Adobe Systems Incorporated)
Task: {3BBAD0CE-A568-4E54-939D-C9403B203F92} - System32\Tasks\Restart Capsule Task => C:\Program Files (x86)\Capsule\bin\Capsule.exe [2012-02-22] ()
Task: {3D3B6E01-AEFD-4318-AB26-8BD2947EBE9E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {5094B668-8DC1-45ED-BC92-71867DE443C9} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {6BEBA36A-1FEF-4C62-82A6-5C687063D174} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-21] (Adobe Systems Incorporated)
Task: {B7748D7A-502F-4E4F-AE4A-6400FB61E632} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe [2011-12-13] (TuneUp Software)
Task: {D5446BF9-BD31-4A2E-97E8-F5C2079CDB22} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-07-03 14:21 - 2012-07-03 14:21 - 00754376 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2012-07-03 14:19 - 2012-07-03 14:19 - 00056832 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2013-08-06 15:10 - 2013-08-06 15:06 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-09-03 15:54 - 2013-09-03 15:54 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\locale\de_de\acrotray.deu
2013-10-01 16:20 - 2013-10-01 16:20 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-11 15:23 - 2013-09-11 15:23 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:65C4D44A

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/08/2013 10:58:20 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/07/2013 11:22:06 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_stisvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: esxwia30.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x452f3a4d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000005c7651
ID des fehlerhaften Prozesses: 0x744
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_stisvc0
Pfad der fehlerhaften Anwendung: svchost.exe_stisvc1
Pfad des fehlerhaften Moduls: svchost.exe_stisvc2
Berichtskennung: svchost.exe_stisvc3

Error: (10/07/2013 03:38:34 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile  SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0".
Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (10/07/2013 03:14:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/06/2013 02:56:00 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile  SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0".
Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (10/06/2013 02:17:03 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe, Version: 10.0.4600.4, Zeitstempel: 0x4ee70dfd
Name des fehlerhaften Moduls: RPCRT4.dll, Version: 6.1.7601.18205, Zeitstempel: 0x51dba4dc
Ausnahmecode: 0xc0020043
Fehleroffset: 0x000000000008a5d3
ID des fehlerhaften Prozesses: 0x70c
Startzeit der fehlerhaften Anwendung: 0xTuneUpUtilitiesService64.exe0
Pfad der fehlerhaften Anwendung: TuneUpUtilitiesService64.exe1
Pfad des fehlerhaften Moduls: TuneUpUtilitiesService64.exe2
Berichtskennung: TuneUpUtilitiesService64.exe3

Error: (10/06/2013 01:21:22 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/05/2013 04:11:59 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile  SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0".
Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (10/05/2013 03:09:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/02/2013 02:55:21 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_stisvc, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: esxwia30.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x452f3a4d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001e7651
ID des fehlerhaften Prozesses: 0x74c
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_stisvc0
Pfad der fehlerhaften Anwendung: svchost.exe_stisvc1
Pfad des fehlerhaften Moduls: svchost.exe_stisvc2
Berichtskennung: svchost.exe_stisvc3


System errors:
=============
Error: (10/08/2013 10:59:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/08/2013 10:59:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/07/2013 11:22:08 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/07/2013 03:15:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/07/2013 03:15:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/06/2013 02:17:04 PM) (Source: Service Control Manager) (User: )
Description: Dienst "TuneUp Utilities Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/06/2013 01:22:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/06/2013 01:22:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/05/2013 04:34:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (10/05/2013 04:34:41 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.


Microsoft Office Sessions:
=========================
Error: (10/08/2013 10:58:20 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/07/2013 11:22:06 PM) (Source: Application Error)(User: )
Description: svchost.exe_stisvc6.1.7600.163854a5bc3c1esxwia30.dll_unloaded0.0.0.0452f3a4dc000000500000000005c765174401cec35ef575a22dC:\Windows\system32\svchost.exeesxwia30.dll8408f770-2f96-11e3-9476-5404a6efa92a

Error: (10/07/2013 03:38:34 PM) (Source: SideBySide)(User: )
Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files (x86)\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files (x86)\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3

Error: (10/07/2013 03:14:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/06/2013 02:56:00 PM) (Source: SideBySide)(User: )
Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files (x86)\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files (x86)\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3

Error: (10/06/2013 02:17:03 PM) (Source: Application Error)(User: )
Description: TuneUpUtilitiesService64.exe10.0.4600.44ee70dfdRPCRT4.dll6.1.7601.1820551dba4dcc0020043000000000008a5d370c01cec285f5e214ddC:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exeC:\Windows\system32\RPCRT4.dll3509c0b0-2e81-11e3-beec-5404a6efa92a

Error: (10/06/2013 01:21:22 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/05/2013 04:11:59 PM) (Source: SideBySide)(User: )
Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files (x86)\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files (x86)\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3

Error: (10/05/2013 03:09:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/02/2013 02:55:21 PM) (Source: Application Error)(User: )
Description: svchost.exe_stisvc6.1.7600.163854a5bc3c1esxwia30.dll_unloaded0.0.0.0452f3a4dc000000500000000001e765174c01cebf50ea4ebbcbC:\Windows\system32\svchost.exeesxwia30.dlle4d6153d-2b61-11e3-981f-5404a6efa92a


CodeIntegrity Errors:
===================================
  Date: 2012-09-24 13:42:32.723
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-24 13:42:32.707
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-10 22:10:16.823
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-10 22:10:16.807
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 8173.24 MB
Available physical RAM: 5577.7 MB
Total Pagefile: 16344.66 MB
Available Pagefile: 13250.71 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:670.24 GB) NTFS
Drive e: (OneTouch4) (Fixed) (Total:465.76 GB) (Free:145.49 GB) NTFS
Drive f: (Memoria Disc 2) (CDROM) (Total:1.9 GB) (Free:0 GB) CDFS
Drive g: (USB-HDD) (Fixed) (Total:596.02 GB) (Free:137.34 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 38A2D237)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: 7DC36B97)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 596 GB) (Disk ID: FF8622DB)
Partition 1: (Not Active) - (Size=596 GB) - (Type=0C)

==================== End Of Log ============================