![]() |
|
Log-Analyse und Auswertung: Windows 7: Virenschutz lässt sich nicht starten 91af09.msi gefundenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Windows 7: Virenschutz lässt sich nicht starten 91af09.msi gefunden Guten Tag, mein Antivirenprogramm hat, wie im Titel ersichtlich, folgenden Fund gemacht: "C:/Windows/Installer/91af09.msi" Bitdefender lässt nun auch keine Änderungen mehr zu, den Virenschutz bezüglich. D.h. ich kann auch das Suchverhalten der Zugriff-Scans bzw. der "Active Virus Control" nicht ändern. Letzteres ist sogar vollständig ausgeschaltet und kann von mir nicht mehr aktiviert werden. Der Virus lässt sich auch nicht durch Bitdefender entfernen. Ich konnte bisher noch keine weiteren offensichtlichen Einschränkungen durch den Virus feststellen. Die Log-Dateien: Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-01-2014 01 Ran by Tarik at 2014-01-14 19:01:52 Running from C:\Users\Tarik\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Bitdefender Virenschutz (Disabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Bitdefender Spyware-Schutz (Disabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09} FW: Bitdefender Firewall (Disabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat X Pro - English, Français, Deutsch (x32 Version: 10.1.8 - Adobe Systems) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden Adobe Bridge 1.0 (x32 Version: 1.0.1.1 - Adobe Systems) Hidden Adobe Common File Installer (x32 Version: 1.00.002 - Adobe System Incorporated) Hidden Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Help Center 2.0 (x32 Version: 2.0.0 - Adobe Systems) Hidden Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden Adobe Premiere Pro 2.0 (x32 Version: 2.000.000 - Adobe Systems, Inc.) Adobe Premiere Pro 2.0 (x32 Version: 2.000.000 - Adobe Systems, Inc.) Hidden Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122 - Adobe Systems, Inc.) Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden Adobe Stock Photos 1.0 (x32 Version: 1.0.2 - Adobe Systems) Hidden Adobe Widget Browser (x32 Version: 2.0 Build 348 - Adobe Systems Incorporated.) Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden ANNO 1404 - Venedig (x32 Version: 2.01.5010 - Ubisoft) Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden ANNO 1404 (x32 Version: 1.02.0000 - Ubisoft) ARMA 2 Operation Arrowhead Uninstall (x32 Version: - ) ArmA 2 Uninstall (x32 Version: - ) Assassin's Creed (x32 Version: 1.02 - Ubisoft) ASUS Xonar DS Audio Driver (Version: - ) Audacity 2.0.3 (x32 Version: 2.0.3 - Audacity Team) Autodesk 3ds Max 2010 64-Bit Komponenten (Version: 12.0 - Autodesk) Autodesk 3ds Max 2010 Lehrgangsdateien (x32 Version: 12.0 - Autodesk) Autodesk 3ds Max 2011 64-Bit (Version: 13.0 - Autodesk) Autodesk 3ds Max 2011 64-Bit Komponenten (Version: 13.0 - Autodesk) Autodesk 3ds Max 2012 64-bit - German (Version: 14.0 - Autodesk) Autodesk 3ds Max 2012 64-bit - German (Version: 14.0 - Autodesk) Hidden Autodesk Backburner 2012.0.0 (x32 Version: 2012.0.0 - Autodesk, Inc.) Autodesk FBX Plugin 2009.4 - 3ds Max 2010 64-bit (Version: - Autodesk) Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit (Version: - Autodesk) Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 64-bit (Version: - Autodesk) Autodesk Material Library 2011 (x32 Version: 2.0.0.100 - Autodesk) Autodesk Material Library 2011 Base Image library (x32 Version: 2.0.0.49 - Autodesk) Autodesk Material Library 2011 Medium Image library (x32 Version: 2.0.0.49 - Autodesk) Autodesk Material Library 2012 (x32 Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (x32 Version: 2.5.0.8 - Autodesk) Autodesk Material Library Medium Resolution Image Library 2012 (x32 Version: 2.5.0.8 - Autodesk) Battle.net (x32 Version: - Blizzard Entertainment) Battlefield 1942™ (x32 Version: 1.6.20.0 - Electronic Arts) Battlefield 3™ (x32 Version: 1.4.0.0 - Electronic Arts) Battlefield 4™ (x32 Version: 1.0.0.1 - Electronic Arts) Battlelog Web Plugins (x32 Version: 2.3.2 - EA Digital Illusions CE AB) BattlEye for OA Uninstall (x32 Version: - ) BattlEye Uninstall (x32 Version: - ) Bitdefender Internet Security 2013 (Version: 16.20.0.1483 - Bitdefender) bl (x32 Version: 1.0.0 - Your Company Name) Hidden Blitzkrieg Mod (x32 Version: 4.6.3.0 - Blitzkrieg Mod Team) Call of Duty: Modern Warfare 3 - Multiplayer (x32 Version: - Infinity Ward) Call of Duty: Modern Warfare 3 (x32 Version: - Infinity Ward - Sledgehammer Games) Camtasia Studio 7 (x32 Version: 7.1.0 - TechSmith Corporation) Command & Conquer™: Generals and Zero Hour (x32 Version: 1.0.0.0 - Electronic Arts, Inc.) Company of Heroes - FAKEMSI (x32 Version: 2.0.0.0 - THQ Inc.) Hidden Company of Heroes (x32 Version: 2.602.0 - THQ Inc.) Composite 2011 (64-bit) (Version: 6.0.0 - Autodesk) Composite 2012 64-bit (Version: 7.0.0 - Autodesk) CPUID HWMonitor 1.21 (Version: - ) Creation Kit (x32 Version: - bgs.bethsoft.com) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DayZ Commander (x32 Version: 0.92.91 - Dotjosh Studios) Dead Space™ (x32 Version: 1.0.222.0 - Electronic Arts) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) Diablo II (x32 Version: - Blizzard Entertainment) Die Sims™ 3 (x32 Version: 1.48.5 - Electronic Arts) Die Sims™ 3 Late Night (x32 Version: 6.5.1 - Electronic Arts) Dota 2 (x32 Version: - Valve) Dragon Age: Origins - Ultimate Edition (x32 Version: - BioWare) Drakensang (x32 Version: - dtp) Emperor - Schlacht um Dune (x32 Version: - ) ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB) Far Cry 2 (x32 Version: - Ubisoft) FileZilla Client 3.7.1 (HKCU Version: 3.7.1 - FileZilla Project) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fraps (remove only) (x32 Version: - ) Gameforge Live 1.2.1734 "Legend" (x32 Version: 1.2.1734 - Gameforge) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.) Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden Gothic 3 (x32 Version: 1.0.0 - JoWood) Grand Theft Auto IV (x32 Version: - Rockstar North) Half-Life 2 (x32 Version: - Valve) Hearthstone (x32 Version: - Blizzard Entertainment) Heroes of Might and Magic® III Complete (x32 Version: - ) Hitman: Absolution (x32 Version: - IO Interactive) Intel® Matrix Storage Manager (Version: - Intel Corporation) Java 7 Update 15 (64-bit) (Version: 7.0.150 - Oracle) Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden Kerbal Space Program (x32 Version: - Squad) Left 4 Dead (x32 Version: - Valve) Left 4 Dead 2 (x32 Version: - Valve) LogMeIn Hamachi (x32 Version: 2.2.0.109 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.109 - LogMeIn, Inc.) Hidden Mass Effect™ 2 (x32 Version: 1.2.1604.0 - Electronic Arts) Metro 2033 (x32 Version: - 4A Games) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319 - Microsoft Corporation) Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.2.3.0 - Microsoft Corporation) Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 R2 (64 Bit) (Version: - Microsoft Corporation) Hidden Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1447.4 - Microsoft Corporation) Microsoft SQL Server 2008 R2 RsFx Driver (Version: 10.51.2500.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 R2 Setup (English) (Version: 10.50.1617.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x32 Version: 10.50.1447.4 - Microsoft Corporation) Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual Studio 2005 Remote Debugger Light (x64) - DEU (Version: 8.0.50727.42 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (x32 Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0 - Microsoft Corporation) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) Mumble 1.2.3 (x32 Version: 1.2.3 - Thorvald Natvig) Natural Selection 2 (x32 Version: - Unknown Worlds Entertainment) Nexon Game Manager (x32 Version: - ) Nexus Mod Manager (Version: 0.46.0 - Black Tree Gaming) Notepad++ (x32 Version: 6.5.1 - Notepad++ Team) NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 331.82 (Version: 331.82 - NVIDIA Corporation) NVIDIA GeForce Experience 1.7 (Version: 1.7 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA ShadowPlay 9.3.16 (Version: 9.3.16 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden NVIDIA Update 9.3.16 (Version: 9.3.16 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9 - NVIDIA Corporation) Oblivion - BTmod 2.20 (x32 Version: 2.20 - Beider & Tikigod) Oblivion (x32 Version: 1.2.0416 - Bethesda Softworks) OpenAL (x32 Version: - ) Origin (x32 Version: 9.0.15.65 - Electronic Arts, Inc.) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden ph (x32 Version: 1.0.0 - Your Company Name) Hidden Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Play withSIX (x32 Version: 1.30.0480 - SIX Networks) Portal 2 (x32 Version: - Valve) PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.) RCRN (x32 Version: AE 2.1.4 - Flying Castle Entertainment) Serious Sam 3: BFE (x32 Version: - Croteam) Service Pack 1 für SQL Server 2008 R2 (KB2528583) (64-bit) (Version: 10.51.2500.0 - Microsoft Corporation) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden SHIELD Streaming (Version: 1.6.34 - NVIDIA Corporation) Hidden Sid Meier's Civilization V (x32 Version: - 2K Games, Inc.) Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) SP1-Zusatzdateien für Autodesk 3ds Max 2010 64-Bit (Version: 1 - Autodesk) SQL Server 2008 R2 SP1 Common Files (Version: 10.51.2500.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP1 Database Engine Services (Version: 10.51.2500.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP1 Database Engine Shared (Version: 10.51.2500.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP1 Management Studio (Version: 10.51.2500.0 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden StarCraft II (x32 Version: - Blizzard Entertainment) StarCraft II Art Tools (64-bit) (Version: 1.0.0 - Blizzard Entertainment) Steam (x32 Version: 1.0.0.0 - Valve Corporation) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (Version: 3.0.13.1 - TeamSpeak Systems GmbH) TeamViewer 8 (x32 Version: 8.0.18051 - TeamViewer) Terraria (x32 Version: - Re-Logic) The Elder Scrolls V Skyrim All in One DLC-Pack Deutsche Version Plus Update 11 (1.8.151.0.7) 1.8.151.0.7 (x32 Version: 1.8.151.0.7 - .x.X.RIDDICK.X.x.) The Elder Scrolls V: Skyrim (x32 Version: - Bethesda Game Studios) The Walking Dead (x32 Version: - ) The Witcher: Enhanced Edition (x32 Version: - CD Projekt RED) Trine 2 (x32 Version: - ) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (x32 Version: 4.0.8080.0 - Microsoft Corporation) Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Mobile-Gerätecenter (Version: 6.1.6965.0 - Microsoft Corporation) Windows Speech Recognition Macros (x32 Version: 1.0.6862.19 - Microsoft Corporation) Windows XP Mode (Version: 1.3.7600.16422 - Microsoft Corporation) ==================== Restore Points ========================= 03-01-2014 20:49:34 Geplanter Prüfpunkt 03-01-2014 21:12:01 DirectX wurde installiert 10-01-2014 15:23:24 Removed Battlefield: Bad Company™ 2 10-01-2014 15:25:06 Entfernt Fable - The Lost Chapters 10-01-2014 15:26:40 Removed Oracle VM VirtualBox 4.3.2 ==================== Hosts content: ========================== 2009-07-14 03:34 - 2013-03-27 23:53 - 00000828 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {16B30E32-6B20-4078-835A-A85F4DB0C24B} - System32\Tasks\AdobeAAMUpdater-1.0-RENDERER2-Tarik => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated) Task: {1B1F6F91-7026-40BB-B7FC-EE6FC77DDD84} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-26] (Google Inc.) Task: {2529016C-EE51-4574-9167-98446C69F7D3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated) Task: {2D517B75-CAB4-4561-899D-4852D9950CDA} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.00.95\AsLoader.exe Task: {4BD5EE22-62D0-4D05-90D2-4E0961C03D5D} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe Task: {5EBF0449-5608-4509-8AC4-39C4CA34A901} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-26] (Google Inc.) Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => C:\Windows\SysWOW64\BthUdTask.exe [2009-07-14] (Microsoft Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-09-13 19:45 - 2013-11-11 16:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () D:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () D:\Program Files (x86)\Notepad++\NppShell_05.dll 2013-03-29 16:11 - 2013-10-24 17:17 - 00265080 _____ () D:\Program files\Bitdefender\Bitdefender 2013\txmlutil.dll 2013-09-13 19:45 - 2013-11-11 16:02 - 00092448 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll 2012-11-26 23:18 - 2011-04-19 14:56 - 00143360 ____N () C:\Program Files\ASUS Xonar DS Audio\Customapp\VmixP8.dll 2013-09-03 14:54 - 2013-09-03 14:54 - 00019968 _____ () C:\Adobe\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu 2013-12-21 10:11 - 2013-12-21 10:11 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-12-11 18:54 - 2013-12-11 18:54 - 16242056 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Microsoft:4S2ZfovljlvCuv2DLjJ AlternateDataStreams: C:\ProgramData\Microsoft:fSdlTgsnvU2txn64F80Qkrr AlternateDataStreams: C:\Users\Tarik\Cookies:tro56nfyeYGKu90TNxsab7g AlternateDataStreams: C:\Users\Tarik\AppData\Local\KK0EOHYM:qsMcH9Cwe4dVTvIhyT0ewL ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Faulty Device Manager Devices ============= Name: WeOnlyDo Network Adapter 2.5 Description: WeOnlyDo Network Adapter 2.5 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: WeOnlyDo Network Provider Service: wod0205 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: ASInsHelp Description: ASInsHelp Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: ASInsHelp Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (01/13/2014 11:19:52 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (01/13/2014 11:19:31 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (01/13/2014 10:55:26 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (01/13/2014 10:54:33 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (01/12/2014 03:30:52 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (01/12/2014 03:29:55 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (01/11/2014 01:37:53 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (01/11/2014 01:36:57 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (01/10/2014 04:31:58 PM) (Source: MsiInstaller) (User: RENDERER2) Description: Product: ICA -- Error 1706.No valid source could be found for product ICA. The Windows Installer cannot continue. Error: (01/10/2014 04:31:53 PM) (Source: MsiInstaller) (User: RENDERER2) Description: Product: IPM_PSP_COM64 -- Error 1706.No valid source could be found for product IPM_PSP_COM64. The Windows Installer cannot continue. System errors: ============= Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 07:01:52 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 06:43:59 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 06:43:59 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Error: (01/14/2014 06:43:59 PM) (Source: Ntfs) (User: ) Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar. Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus. Microsoft Office Sessions: ========================= Error: (01/13/2014 11:19:52 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\Autodesk\Composite 2011\python\lib\distutils\command\wininst-8_d.exe Error: (01/13/2014 11:19:31 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"D:\Program Files\Autodesk\Composite 2012\python\lib\distutils\command\wininst-8_d.exe Error: (01/13/2014 10:55:26 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\Autodesk\Composite 2011\python\lib\distutils\command\wininst-8_d.exe Error: (01/13/2014 10:54:33 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"D:\Program Files\Autodesk\Composite 2012\python\lib\distutils\command\wininst-8_d.exe Error: (01/12/2014 03:30:52 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\Autodesk\Composite 2011\python\lib\distutils\command\wininst-8_d.exe Error: (01/12/2014 03:29:55 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"D:\Program Files\Autodesk\Composite 2012\python\lib\distutils\command\wininst-8_d.exe Error: (01/11/2014 01:37:53 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\Autodesk\Composite 2011\python\lib\distutils\command\wininst-8_d.exe Error: (01/11/2014 01:36:57 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"D:\Program Files\Autodesk\Composite 2012\python\lib\distutils\command\wininst-8_d.exe Error: (01/10/2014 04:31:58 PM) (Source: MsiInstaller)(User: RENDERER2) Description: Product: ICA -- Error 1706.No valid source could be found for product ICA. The Windows Installer cannot continue.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (01/10/2014 04:31:53 PM) (Source: MsiInstaller)(User: RENDERER2) Description: Product: IPM_PSP_COM64 -- Error 1706.No valid source could be found for product IPM_PSP_COM64. The Windows Installer cannot continue.(NULL)(NULL)(NULL)(NULL)(NULL) CodeIntegrity Errors: =================================== Date: 2013-02-09 14:00:05.106 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 14:00:05.037 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 14:00:03.936 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 14:00:03.871 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 14:00:02.805 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 14:00:02.740 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 14:00:01.674 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 14:00:01.607 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 13:59:57.037 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-02-09 13:59:56.972 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 13% Total physical RAM: 24566.08 MB Available physical RAM: 21250.75 MB Total Pagefile: 49130.34 MB Available Pagefile: 45584.77 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:139.73 GB) (Free:16.45 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Volume) (Fixed) (Total:1117.82 GB) (Free:37.18 GB) NTFS Drive e: (Anno 1404 Add-On) (CDROM) (Total:0.77 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1118 GB) (Disk ID: 3793C992) Partition 1: (Not Active) - (Size=-998777028608) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 140 GB) (Disk ID: 513B080A) Partition 1: (Active) - (Size=140 GB) - (Type=07 NTFS) ==================== End Of Log ============================ FRST.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-01-2014 01 Ran by Tarik (administrator) on RENDERER2 on 14-01-2014 19:01:33 Running from C:\Users\Tarik\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\vsserv.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Maxtor) C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe () C:\Windows\SysWOW64\srvany.exe () C:\Windows\KMService.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe () D:\Program files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe () D:\Program files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\updatesrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Maxtor) C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe () C:\Windows\SysWOW64\HsMgr.exe () C:\Windows\system\HsMgr64.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (CMedia) C:\Program Files\ASUS Xonar DS Audio\Customapp\AsusAudioCenter.exe (Bitdefender) D:\Program files\Bitdefender\Bitdefender 2013\bdagent.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Microsoft Corporation) D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE () C:\Program Files\NVIDIA Corporation\Display\nvsmartmaxapp64.exe () C:\Program Files\NVIDIA Corporation\Display\nvsmartmaxapp.exe (Adobe Systems Inc.) C:\Adobe\Acrobat 10.0\Acrobat\acrotray.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe [136472 2008-06-27] (Maxtor) HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [Maxtor Scheduler2 Service] - C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedhlp.exe [136472 2008-06-27] (Maxtor) HKLM\...\Run: [Cmaudio8788] - C:\Windows\Syswow64\cmicnfgp.dll [8769536 2011-05-12] (C-Media Corporation) HKLM\...\Run: [Cmaudio8788GX] - C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] () HKLM\...\Run: [Cmaudio8788GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] () HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [Bdagent] - D:\Program files\Bitdefender\Bitdefender 2013\bdagent.exe [1575192 2013-10-24] (Bitdefender) HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-10-18] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1063200 2013-10-18] (NVIDIA Corporation) HKLM-x32\...\Run: [BCSSync] - D:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2013-09-03] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2013-09-03] (Adobe Systems Inc.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.) HKCU\...\Run: [Steam] - D:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-14] (Valve Corporation) HKCU\...\Run: [AdobeBridge] - [x] HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKCU\...\Run: [OfficeSyncProcess] - D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation) HKCU\...\Run: [Akamai NetSession Interface] - "C:\Users\Tarik\AppData\Local\Akamai\netsession_win.exe" MountPoints2: {72bdc079-89bb-11df-bfbc-806e6f6e6963} - E:\Autorun.exe MountPoints2: {ab0ea488-7f32-11e2-810e-90e6ba153576} - F:\iLinker.exe Startup: C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> D:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RCRN_Autoupdater.exe.lnk ShortcutTarget: RCRN_Autoupdater.exe.lnk -> D:\Program Files (x86)\Steam\SteamApps\common\Skyrim\RCRN\Autoupdater\RCRN_Autoupdater.exe (No File) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=hp&installDate=26/10/2013 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x77F9AA1A2E11CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013 SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013 SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013 SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013 BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog9-x64 11 C:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File Not found () Winsock: Catalog9-x64 12 C:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File Not found () Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{943E789C-5AB5-4979-8A03-1FC88F60C25E}: [NameServer]192.168.1.2 Tcpip\..\Interfaces\{F1ED2B56-7F14-479F-BB8A-0A7A94C8F708}: [NameServer]139.7.30.125 139.7.30.126 FireFox: ======== FF ProfilePath: C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default FF user.js: detected! => C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\user.js FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", ""); FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.4 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.4\npesnlaunch.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @t.garena.com/garenatalk - C:\Users\Tarik\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Acrobat - C:\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Wörterbuch Deutsch (de-DE), Hunspell-unterstützt - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\de_DE@dicts.j3e.de [2013-09-13] FF Extension: British English Dictionary (Updated) - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\en-gb@flyingtophat.co.uk [2013-10-23] FF Extension: FoxyProxy Standard - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\foxyproxy@eric.h.jung [2013-10-26] FF Extension: YouTube Unblocker - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\youtubeunblocker@unblocker.yt [2013-11-01] FF Extension: Deutsch (DE) Language Pack - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2013-10-18] FF Extension: Video Resumer - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\videoresumer@jetpack.xpi [2013-06-25] FF Extension: YouTube Cinema Mode . - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\youtube-cinemode@gmail.com.xpi [2013-09-06] FF Extension: NoScript - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-23] FF Extension: {748284c8-f147-4b29-8544-7a58fa23f520} - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{748284c8-f147-4b29-8544-7a58fa23f520}.xpi [2013-11-01] FF Extension: Adblock Plus - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-01] FF Extension: Skype Compiler Plus - C:\Users\Tarik\AppData\Roaming\Mozilla\Firefox\Profiles\jkhwge7z.default\Extensions\{fd16221d-b893-40f7-bc64-455e68e578ce}.xpi [2013-11-05] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext FF Extension: bdToolbar - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext [2013-01-28] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-03-28] FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext FF Extension: bdToolbar - D:\Program files\Bitdefender\Bitdefender 2013\bdtbext [2013-01-28] Chrome: ======= CHR HomePage: hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=hp&installDate=26/10/2013 CHR RestoreOnStartup: "hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=hp&installDate=26/10/2013" CHR DefaultSearchKeyword: search.snapdo.com CHR DefaultSearchProvider: Web CHR DefaultSearchURL: hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=b4524a91-8b70-014b-092f-6db7c9575efc&searchtype=ds&q={searchTerms}&installDate=26/10/2013 CHR DefaultNewTabURL: CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Nexon Game Controller) - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) CHR Plugin: (Garena Talk Plugin) - C:\Users\Tarik\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.150.3) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Microsoft Office 2010) - D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Extension: (Snap.Do ) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0 [2013-10-26] CHR Extension: (Google Docs) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 [2013-03-26] CHR Extension: (Google Drive) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 [2013-03-26] CHR Extension: (YouTube) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 [2013-04-13] CHR Extension: (Google Search) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 [2013-03-28] CHR Extension: (Proxy link for YouTube\u2122) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpccpcaielehgefaagocjkkgkafaabdp\1.2.3_0 [2013-05-12] CHR Extension: (Google Wallet) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 [2013-12-25] CHR Extension: (Gmail) - C:\Users\Tarik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 [2013-03-26] ==================== Services (Whitelisted) ================= R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe [605976 2008-06-27] (Maxtor) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-02-17] (Adobe Systems) S4 BdDesktopParental; D:\Program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [69392 2013-10-24] (Bitdefender) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-01] () S3 DAUpdaterSvc; D:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2013-12-13] (BioWare) R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.) S2 MaxSch2Svc; C:\Program Files (x86)\Common Files\Maxtor\Schedule2\schedul2.exe [605976 2008-06-27] (Maxtor) R2 mi-raysat_3dsmax2011_64; D:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe [86016 2010-04-01] () R2 mi-raysat_3dsmax2012_64; D:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe [86016 2011-02-22] () S3 Microsoft SharePoint Workspace Audit Service; D:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [30798512 2013-03-09] (Microsoft Corporation) S4 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-30] () S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation) R2 TeamViewer8; D:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [3574624 2013-04-23] (TeamViewer GmbH) R2 UPDATESRV; D:\Program files\Bitdefender\Bitdefender 2013\updatesrv.exe [67320 2013-10-24] (Bitdefender) R2 VSSERV; D:\Program files\Bitdefender\Bitdefender 2013\vsserv.exe [1645256 2013-10-24] (Bitdefender) S3 WinHttpAutoProxySvc; C:\Windows\SysWOW64\winhttp.dll [351232 2010-11-20] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] () R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-05-07] () R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-10-24] (BitDefender) R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender) S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-10-24] (BitDefender) R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-04-29] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC) S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-10-24] (BitDefender SRL) R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2725376 2011-03-10] (C-Media Inc) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-24] (BitDefender LLC) S2 IOPort; C:\Windows\SysWOW64\DRIVERS\IOPORT.SYS [6144 2001-03-01] (Erik Salaj) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-05-07] () S3 mirrorv3; C:\Windows\System32\DRIVERS\rminiv3.sys [5632 2010-04-21] (Famatech International Corp.) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] () R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation) S3 phaudlwr; C:\Windows\System32\DRIVERS\phaudlwr.sys [114608 2009-10-20] (Philips Applied Technologies) S3 RivaTuner64; D:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2013-02-09] () S1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 spc999; C:\Windows\System32\drivers\spc999.sys [584192 2009-12-14] ( ) S3 spc999m; C:\Windows\System32\drivers\spc999m.sys [8192 2009-12-14] ( ) R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-24] (BitDefender S.R.L.) S3 wod0205; C:\Windows\System32\DRIVERS\wod0205.sys [33160 2011-04-23] (WeOnlyDo Software) S3 ALSysIO; \??\C:\Users\mklepper\AppData\Local\Temp\ALSysIO64.sys [x] S2 ASInsHelp; \??\C:\Windows\SysWow64\drivers\AsInsHelp64.sys [x] S3 cpuz136; \??\C:\Users\Tarik\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 GGSAFERDriver; \??\C:\Users\Tarik\Garena Plus\Room\safedrv.sys [x] S3 massfilter; system32\drivers\massfilter.sys [x] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x] S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x] S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x] U3 ufddipob; \??\C:\Users\Tarik\AppData\Local\Temp\ufddipob.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-14 18:59 - 2014-01-14 18:59 - 00037118 _____ C:\Users\Tarik\Downloads\GMER.log 2014-01-14 18:48 - 2014-01-14 18:48 - 00377856 _____ C:\Users\Tarik\Downloads\32xc18gq.exe 2014-01-14 18:47 - 2014-01-14 18:47 - 00000000 ____D C:\Users\Tarik\Downloads\FRST-OlderVersion 2014-01-10 19:44 - 2014-01-10 19:44 - 00000000 ____D C:\Users\Tarik\Documents\ANNO 1404 Venedig 2014-01-10 18:19 - 2014-01-10 18:20 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.technic 2014-01-10 18:19 - 2014-01-10 18:19 - 02314844 _____ () C:\Users\Tarik\Downloads\TechnicLauncher.exe 2014-01-10 18:16 - 2014-01-10 18:16 - 00375581 _____ C:\Users\Tarik\Downloads\Minecraft-Modder_v2.8.4_de.exe 2014-01-10 16:39 - 2014-01-10 16:39 - 00000000 ____D C:\Users\Tarik\Desktop\Crack 2014-01-10 16:39 - 2008-01-23 14:57 - 04500187 _____ C:\Users\Tarik\Desktop\iw3sp.exe 2014-01-05 14:30 - 2014-01-05 14:31 - 00232031 _____ C:\Users\Tarik\Downloads\Essay 2014-01-03 21:56 - 2014-01-03 22:11 - 553230663 _____ (Epic Games, Inc.) C:\Users\Tarik\Downloads\WDS.exe 2013-12-30 15:23 - 2014-01-14 19:01 - 00028793 _____ C:\Users\Tarik\Downloads\FRST.txt 2013-12-30 15:22 - 2014-01-14 18:47 - 00000000 ____D C:\FRST 2013-12-30 15:12 - 2014-01-14 18:46 - 00000472 _____ C:\Users\Tarik\Downloads\defogger_disable.log 2013-12-30 15:12 - 2013-12-30 15:12 - 00000000 _____ C:\Users\Tarik\defogger_reenable 2013-12-30 15:07 - 2014-01-14 18:47 - 02075648 _____ (Farbar) C:\Users\Tarik\Downloads\FRST64.exe 2013-12-30 15:04 - 2013-12-30 15:04 - 00377856 _____ C:\Users\Tarik\Downloads\1jn1ckw1.exe 2013-12-30 15:03 - 2013-12-30 15:03 - 00050477 _____ C:\Users\Tarik\Downloads\Defogger.exe 2013-12-27 13:13 - 2013-12-27 13:13 - 00000000 ____D C:\Users\Tarik\AppData\Local\Flying_Castle_Entertainme 2013-12-26 12:21 - 2013-12-26 12:44 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Natural Selection 2 2013-12-25 14:39 - 2013-12-25 14:39 - 00000199 _____ C:\Users\Tarik\Desktop\Natural Selection 2.url 2013-12-23 22:17 - 2013-12-23 22:17 - 08537832 _____ C:\Users\Tarik\Desktop\Entwurf1.psd 2013-12-23 22:01 - 2013-12-23 22:01 - 00000000 ____D C:\Users\Tarik\Downloads\__MACOSX 2013-12-23 22:01 - 2008-04-13 11:54 - 02483418 ____N C:\Users\Tarik\Downloads\benblogged_grunge.abr 2013-12-23 22:01 - 2008-04-10 10:20 - 01012590 ____N C:\Users\Tarik\Downloads\benblogged_splatter.abr 2013-12-23 21:54 - 2013-12-23 21:54 - 07444038 _____ C:\Users\Tarik\Downloads\Brush_Pack___Splashes_Of_Paint_by_MouritsaDA_Stock.abr 2013-12-23 21:53 - 2013-12-23 21:53 - 01467371 _____ C:\Users\Tarik\Downloads\benblogged_grungeabr.zip 2013-12-23 21:53 - 2013-12-23 21:53 - 00604249 _____ C:\Users\Tarik\Downloads\benblogged_splatterabr.zip 2013-12-22 17:13 - 2013-12-22 17:14 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (3) 2013-12-21 10:11 - 2013-12-25 01:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-16 17:49 - 2013-12-16 17:49 - 00000777 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk 2013-12-15 19:53 - 2013-12-15 19:53 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (2) 2013-12-15 17:16 - 2013-12-15 17:43 - 00000000 ____D C:\Users\Tarik\Desktop\Skyrim plugins 2013-12-15 11:59 - 2013-12-15 11:59 - 00001072 _____ C:\Users\Public\Desktop\RCRN Customizer.lnk 2013-12-15 11:56 - 2013-12-15 11:56 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner ==================== One Month Modified Files and Folders ======= 2014-01-14 19:01 - 2013-12-30 15:23 - 00028793 _____ C:\Users\Tarik\Downloads\FRST.txt 2014-01-14 18:59 - 2014-01-14 18:59 - 00037118 _____ C:\Users\Tarik\Downloads\GMER.log 2014-01-14 18:54 - 2012-05-22 20:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-14 18:50 - 2012-11-26 20:24 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Skype 2014-01-14 18:48 - 2014-01-14 18:48 - 00377856 _____ C:\Users\Tarik\Downloads\32xc18gq.exe 2014-01-14 18:47 - 2014-01-14 18:47 - 00000000 ____D C:\Users\Tarik\Downloads\FRST-OlderVersion 2014-01-14 18:47 - 2013-12-30 15:22 - 00000000 ____D C:\FRST 2014-01-14 18:47 - 2013-12-30 15:07 - 02075648 _____ (Farbar) C:\Users\Tarik\Downloads\FRST64.exe 2014-01-14 18:46 - 2013-12-30 15:12 - 00000472 _____ C:\Users\Tarik\Downloads\defogger_disable.log 2014-01-14 18:21 - 2012-11-26 22:40 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-14 18:21 - 2012-11-26 22:40 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-14 18:05 - 2009-11-12 13:25 - 01390964 _____ C:\Windows\WindowsUpdate.log 2014-01-14 18:05 - 2009-07-14 05:45 - 00020160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-14 18:05 - 2009-07-14 05:45 - 00020160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-14 18:00 - 2013-03-02 15:30 - 00003934 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BE29C0D3-C322-4ABB-A5C8-377AE67DF550} 2014-01-14 17:58 - 2013-06-21 18:46 - 00000000 ____D C:\Users\Tarik\AppData\Local\LogMeIn Hamachi 2014-01-14 17:57 - 2013-11-05 06:38 - 00024615 _____ C:\Windows\setupact.log 2014-01-14 17:57 - 2011-04-19 12:32 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-14 17:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-14 16:48 - 2012-12-07 18:21 - 00000000 ____D C:\Users\Tarik\AppData\Local\ArmA 2 OA 2014-01-14 07:03 - 2012-12-09 10:53 - 00000000 ____D C:\Users\Tarik\AppData\Local\Adobe 2014-01-13 19:18 - 2013-02-23 18:34 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.minecraft 2014-01-13 17:54 - 2013-01-26 15:49 - 00000000 ____D C:\Users\Tarik\Documents\Outlook-Dateien 2014-01-13 16:26 - 2012-12-07 17:51 - 00000000 ____D C:\Users\Tarik\AppData\Local\Play withSIX 2014-01-13 16:26 - 2012-12-07 17:51 - 00000000 ____D C:\Users\Tarik\AppData\Local\Downloaded Installations 2014-01-12 20:34 - 2012-11-27 03:31 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2014-01-12 20:28 - 2012-11-27 03:31 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2014-01-12 18:42 - 2013-09-12 18:30 - 00000000 ____D C:\Users\Tarik\Studienarbeit 2014-01-12 18:42 - 2009-07-14 18:58 - 00771488 _____ C:\Windows\system32\perfh007.dat 2014-01-12 18:42 - 2009-07-14 18:58 - 00176068 _____ C:\Windows\system32\perfc007.dat 2014-01-12 18:42 - 2009-07-14 06:13 - 01817042 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-11 20:12 - 2013-10-17 20:38 - 00000000 ____D C:\Users\Tarik\AppData\Local\Battle.net 2014-01-11 09:58 - 2009-07-14 05:45 - 05055752 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-10 19:44 - 2014-01-10 19:44 - 00000000 ____D C:\Users\Tarik\Documents\ANNO 1404 Venedig 2014-01-10 19:32 - 2013-07-22 22:00 - 00000000 ____D C:\Users\Tarik\Desktop\Spiele 2014-01-10 19:25 - 2013-02-02 13:35 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Ubisoft 2014-01-10 19:24 - 2009-11-15 14:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2014-01-10 18:20 - 2014-01-10 18:19 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\.technic 2014-01-10 18:19 - 2014-01-10 18:19 - 02314844 _____ () C:\Users\Tarik\Downloads\TechnicLauncher.exe 2014-01-10 18:16 - 2014-01-10 18:16 - 00375581 _____ C:\Users\Tarik\Downloads\Minecraft-Modder_v2.8.4_de.exe 2014-01-10 17:32 - 2012-11-27 14:06 - 00281768 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2014-01-10 17:13 - 2012-11-26 16:05 - 00114456 _____ C:\Users\Tarik\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-10 16:39 - 2014-01-10 16:39 - 00000000 ____D C:\Users\Tarik\Desktop\Crack 2014-01-10 16:35 - 2012-11-27 14:06 - 00000000 ____D C:\Users\Tarik\AppData\Local\PunkBuster 2014-01-10 16:32 - 2013-12-05 18:28 - 00000000 ____D C:\ProgramData\Corel 2014-01-10 16:25 - 2012-12-25 21:41 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JoWooD 2014-01-09 19:35 - 2013-12-06 16:40 - 00000000 ____D C:\Users\Tarik\AppData\Local\CrashDumps 2014-01-09 18:02 - 2013-03-24 20:30 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Mumble 2014-01-07 18:48 - 2009-11-16 18:05 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-05 14:32 - 2013-07-04 19:38 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\uTorrent 2014-01-05 14:31 - 2014-01-05 14:30 - 00232031 _____ C:\Users\Tarik\Downloads\Essay 2014-01-04 10:45 - 2013-09-13 19:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2014-01-03 22:12 - 2013-02-23 20:22 - 00737600 _____ C:\Windows\DirectX.log 2014-01-03 22:11 - 2014-01-03 21:56 - 553230663 _____ (Epic Games, Inc.) C:\Users\Tarik\Downloads\WDS.exe 2014-01-03 12:24 - 2013-07-02 20:43 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2014-01-03 12:24 - 2012-11-26 16:17 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-12-30 15:12 - 2013-12-30 15:12 - 00000000 _____ C:\Users\Tarik\defogger_reenable 2013-12-30 15:12 - 2012-11-26 16:05 - 00000000 ____D C:\Users\Tarik 2013-12-30 15:04 - 2013-12-30 15:04 - 00377856 _____ C:\Users\Tarik\Downloads\1jn1ckw1.exe 2013-12-30 15:03 - 2013-12-30 15:03 - 00050477 _____ C:\Users\Tarik\Downloads\Defogger.exe 2013-12-27 13:13 - 2013-12-27 13:13 - 00000000 ____D C:\Users\Tarik\AppData\Local\Flying_Castle_Entertainme 2013-12-26 12:44 - 2013-12-26 12:21 - 00000000 ____D C:\Users\Tarik\AppData\Roaming\Natural Selection 2 2013-12-25 14:39 - 2013-12-25 14:39 - 00000199 _____ C:\Users\Tarik\Desktop\Natural Selection 2.url 2013-12-25 01:44 - 2013-12-21 10:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-23 22:17 - 2013-12-23 22:17 - 08537832 _____ C:\Users\Tarik\Desktop\Entwurf1.psd 2013-12-23 22:01 - 2013-12-23 22:01 - 00000000 ____D C:\Users\Tarik\Downloads\__MACOSX 2013-12-23 21:54 - 2013-12-23 21:54 - 07444038 _____ C:\Users\Tarik\Downloads\Brush_Pack___Splashes_Of_Paint_by_MouritsaDA_Stock.abr 2013-12-23 21:53 - 2013-12-23 21:53 - 01467371 _____ C:\Users\Tarik\Downloads\benblogged_grungeabr.zip 2013-12-23 21:53 - 2013-12-23 21:53 - 00604249 _____ C:\Users\Tarik\Downloads\benblogged_splatterabr.zip 2013-12-22 17:14 - 2013-12-22 17:13 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (3) 2013-12-21 20:13 - 2012-07-04 20:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-20 20:49 - 2012-11-27 17:03 - 00000000 ____D C:\Users\Tarik\Websiten 2013-12-19 06:50 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-16 18:51 - 2012-11-27 15:53 - 00000000 ____D C:\Users\Tarik\AppData\Local\Skyrim 2013-12-16 17:49 - 2013-12-16 17:49 - 00000777 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk 2013-12-16 17:49 - 2013-06-05 15:45 - 00000000 ____D C:\Users\Tarik\AppData\Local\Black_Tree_Gaming 2013-12-15 19:53 - 2013-12-15 19:53 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner (2) 2013-12-15 17:43 - 2013-12-15 17:16 - 00000000 ____D C:\Users\Tarik\Desktop\Skyrim plugins 2013-12-15 11:59 - 2013-12-15 11:59 - 00001072 _____ C:\Users\Public\Desktop\RCRN Customizer.lnk 2013-12-15 11:59 - 2012-11-26 16:05 - 00000000 ___RD C:\Users\Tarik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-12-15 11:56 - 2013-12-15 11:56 - 00000000 ____D C:\Users\Tarik\Desktop\Neuer Ordner 2013-12-15 03:03 - 2013-08-14 21:50 - 00000000 ____D C:\Windows\system32\MRT 2013-12-15 03:00 - 2009-11-13 07:19 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe Some content of TEMP: ==================== C:\Users\Tarik\AppData\Local\Temp\iv_uninstall.exe C:\Users\Tarik\AppData\Local\Temp\NGM.exe C:\Users\Tarik\AppData\Local\Temp\NGMDll.dll C:\Users\Tarik\AppData\Local\Temp\NGMResource.dll C:\Users\Tarik\AppData\Local\Temp\ubi6858.tmp.exe C:\Users\Tarik\AppData\Local\Temp\ubiD03E.tmp.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-11 13:36 ==================== End Of Log ============================ Ich hoffe mir kann hier geholfen werden. Schon einmal vielen Dank für eure Mühen. Liebe Grüße Ryneld / Tarik |
Themen zu Windows 7: Virenschutz lässt sich nicht starten 91af09.msi gefunden |
.com, 4d36e972-e325-11ce-bfc1-08002be10318, adblock, akamai, browser, desktop, error, excel, fehler, firefox, flash player, ftp, help, helper, homepage, hängen, internet, launch, msiinstaller, programm, registry, schutz, security, server, software, starten, svchost.exe, virtualbox, virus, windows |