| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
02.04.2014, 15:03
| #1 |
| |  Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware? Sehr geehrtes Trojaner Board - Team, vorab möchte ich mich schon mal bedanken für Euere angebotene Hilfe. Ich surfe viel im Internet und mittlerweile habe ich das Gefühlt, dass mit meinem Rechner etwas nicht stimmt. Oft arbeitet die Festplatte, teilweise sehr heftig, dass man meinen könnte, dass irgendwelche Dateien runtergeladen werden, ohne, dass ich dies veranlasst habe. Ich habe den Avirus Free Virenschutz und Spybot installiert. Ich habe schon folgende Programme nach Schadsoftware suchen lassen, jedoch ohne Fund: Malwarebytes, Adw Cleaner, Super Anti Spyware free, Junkware remooval tool (thisisu). Der Esest online scanner hat einiges gefunden und mittlerweile findet er nur noch eine infizierte Datei, nämlich die Ask toolbar von antivir. Gestern ist mein Computer auch zum ersten Mal von der einen auf die andere Sekunde ohne Vorwarnung ausgegangen. Ich habe da so eine Vermutung, aber nun möchte ich mich endgültig an Profis wenden. Habe die txt. Dateien auf meinem Rechner (Gmer, Defrogger....) muss aber mitteilen, dass ich beim Ausschalten des Virenschutzes vor dem Scan von GMER nicht in der Lage war. Es kam immer eine Fehlermeldung, dass ich angeblich nciht berechtigt sei, was mir noch nie passiert ist. Ich habe beim ESET Online scanner auch davor den Virenschutz ausschalten können, bei GMEER aber nicht! Ich hoffe Ihr könnt mir helfen. Vielen Dank schon einmal im Voraus. Grüße Mike |
|
02.04.2014, 16:54
| #2 |
| /// the machine /// TB-Ausbilder    | Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
02.04.2014, 21:24
| #3 |
| | Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware? Hi,
__________________danke für die rasche Antwort. Dann poste ich mal. Ich hoffe das Posting ist so korrekt? FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Michi K (administrator) on MICHIK on 02-04-2014 15:27:39
Running from C:\Users\Michi K\Downloads\Anti-Schädlingsprogramme
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaUI.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
() C:\Program Files (x86)\Opera\20.0.1387.82\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82\opera.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2000-01-01] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-428823464-3123948977-1050832530-1000\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-428823464-3123948977-1050832530-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.22.0.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Privitize Chrome Toolbar) - C:\Users\Michi K\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhfcbmlocifngpbjdpgnkbjmgkadkjpp [2013-06-19]
==================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1862480 2014-03-30] (SurfRight B.V.)
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-03-20] (IObit)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [193888 2010-06-01] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [211296 2010-06-01] (Ralink Technology, Corp.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
R0 06812730; C:\Windows\System32\DRIVERS\06812730.sys [460888 2014-02-21] (Kaspersky Lab ZAO)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2013-09-01] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2013-09-01] ()
R3 AtcL001; C:\Windows\System32\DRIVERS\l160x64.sys [61440 2009-10-13] (Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-12] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-12] (Avira Operations GmbH & Co. KG)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-03-17] (Glarysoft Ltd)
R2 hmpalert; C:\Windows\system32\drivers\hmpalert.sys [92120 2014-03-30] ()
S3 MEMSWEEP2; C:\Windows\system32\7C51.tmp [6144 2009-06-18] (Sophos Plc)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 cpudrv64; \??\C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-02 15:27 - 2014-04-02 15:27 - 00000000 ____D () C:\FRST
2014-04-02 15:25 - 2014-04-02 15:25 - 00000000 _____ () C:\Users\Michi K\defogger_reenable
2014-04-02 09:00 - 2014-04-02 09:00 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-02 00:14 - 2014-04-02 00:14 - 00067544 _____ () C:\Users\Michi K\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-01 14:54 - 2014-02-26 01:32 - 00450709 _____ () C:\Windows\system32\Drivers\etc\hosts.20140401-145407.backup
2014-04-01 14:35 - 2014-04-02 15:04 - 00000504 _____ () C:\Windows\setupact.log
2014-04-01 14:35 - 2014-04-01 14:35 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-01 14:34 - 2014-04-01 14:35 - 00305768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-31 11:29 - 2014-03-31 11:29 - 00001454 _____ () C:\Users\Michi K\Downloads\URLLink.acsm
2014-03-30 22:19 - 2014-03-30 22:19 - 00000000 ____D () C:\Windows\CryptoGuard
2014-03-30 20:06 - 2014-03-30 20:06 - 00000000 ____D () C:\Program Files\Intel
2014-03-27 17:39 - 2014-03-27 17:41 - 00000000 ____D () C:\ProgramData\Ralink
2014-03-27 17:38 - 2014-03-27 17:38 - 00000000 ____D () C:\Windows\system32\RaLanguages
2014-03-27 17:38 - 2014-03-27 17:38 - 00000000 ____D () C:\Program Files (x86)\Hama
2014-03-27 17:38 - 2014-03-27 17:38 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-03-27 17:38 - 2010-05-26 21:30 - 01121632 _____ (Ralink Technology Corp.) C:\Windows\system32\Drivers\netr28ux.sys
2014-03-27 17:38 - 2010-05-26 19:09 - 00326496 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll
2014-03-27 17:38 - 2010-05-26 19:09 - 00014051 _____ () C:\Windows\SysWOW64\RaCoInst.dat
2014-03-27 17:38 - 2010-05-26 19:09 - 00014051 _____ () C:\Windows\system32\RaCoInst.dat
2014-03-27 17:38 - 2010-03-11 18:11 - 01098528 _____ (Ralink Technology, Corp.) C:\Windows\SysWOW64\RAIHV.dll
2014-03-27 17:38 - 2010-03-08 22:07 - 02036000 _____ (Ralink Technology, Corp.) C:\Windows\system32\RaCertMgr.dll
2014-03-27 17:38 - 2010-03-08 22:07 - 01606944 _____ (Ralink Technology, Corp.) C:\Windows\SysWOW64\RaCertMgr.dll
2014-03-27 17:38 - 2010-03-08 16:02 - 00128800 _____ (Ralink Technology, Corp.) C:\Windows\SysWOW64\RAEXTUI.dll
2014-03-27 17:38 - 2010-03-08 16:02 - 00128800 _____ (Ralink Technology, Corp.) C:\Windows\system32\RAEXTUI.dll
2014-03-27 17:38 - 2010-01-27 13:47 - 00000451 _____ () C:\Windows\system32\DiagFunc.ini
2014-03-27 17:38 - 2010-01-27 12:54 - 00000451 _____ () C:\Windows\SysWOW64\DiagFunc.ini
2014-03-27 17:38 - 2009-05-11 12:45 - 00147456 _____ () C:\Windows\SysWOW64\DiagFunc.dll
2014-03-27 17:38 - 2009-05-11 12:45 - 00147456 _____ () C:\Windows\system32\DiagFunc.dll
2014-03-27 10:03 - 2012-08-01 17:46 - 01115648 _____ (Ralink Technology, Corp.) C:\Windows\system32\RAIHV.dll
2014-03-27 09:38 - 2014-03-27 09:39 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Michi K\Downloads\revosetup95.exe
2014-03-26 14:04 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-26 14:04 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-26 10:24 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-26 10:24 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-26 10:24 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-26 10:24 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-26 10:23 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-26 10:23 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-26 10:23 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-26 10:23 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-26 10:23 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-03-26 10:23 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-03-26 10:23 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-26 10:23 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-26 10:23 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-03-26 10:23 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-26 10:23 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-03-26 10:23 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-03-26 10:23 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-26 10:23 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-24 11:34 - 2014-03-24 11:34 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-24 11:34 - 2014-03-24 11:34 - 00000000 ____D () C:\Program Files\Realtek
2014-03-24 11:33 - 2000-01-01 02:00 - 56270848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-24 11:33 - 2000-01-01 02:00 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-24 11:33 - 2000-01-01 02:00 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-24 11:33 - 2000-01-01 02:00 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-24 11:33 - 2000-01-01 02:00 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-24 11:33 - 2000-01-01 02:00 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00245496 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-03-24 11:33 - 2000-01-01 02:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-03-24 00:22 - 2014-03-24 00:22 - 00001129 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-03-24 00:22 - 2014-03-24 00:22 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-03-24 00:05 - 2014-03-24 00:05 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-03-23 23:37 - 2014-03-23 23:37 - 34734328 _____ (Opera Software ASA) C:\Users\Michi K\Downloads\Opera_20.0.1387.82_Setup.exe
2014-03-23 23:35 - 2014-03-27 09:45 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-21 01:11 - 2014-03-21 01:11 - 00264600 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-21 01:08 - 2014-03-21 01:08 - 00312728 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-20 10:48 - 2014-03-20 10:49 - 69824512 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2014-03-20 10:48 - 2014-03-20 10:48 - 43941888 _____ () C:\Windows\system32\config\components.iodefrag.bak
2014-03-20 10:48 - 2014-03-20 10:48 - 04747264 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2014-03-20 10:48 - 2014-03-20 10:48 - 00061440 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2014-03-20 10:48 - 2014-03-20 10:48 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2014-03-20 10:40 - 2014-03-20 10:40 - 43941888 _____ () C:\Windows\system32\config\components.iobit
2014-03-20 10:35 - 2014-03-20 10:35 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-03-20 10:34 - 2014-03-20 10:35 - 00000462 _____ () C:\ASCInit.log
2014-03-19 10:04 - 2014-03-19 10:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-19 02:04 - 2014-03-17 08:07 - 00017600 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-03-13 09:47 - 2014-03-30 22:18 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-03-13 09:47 - 2014-03-30 22:17 - 00540160 _____ (SurfRight) C:\Windows\system32\hmpalert.dll
2014-03-13 09:47 - 2014-03-30 22:17 - 00472400 _____ (SurfRight) C:\Windows\SysWOW64\hmpalert.dll
2014-03-13 09:47 - 2014-03-30 22:17 - 00092120 _____ () C:\Windows\system32\Drivers\hmpalert.sys
2014-03-13 08:40 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 08:40 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 08:40 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 08:40 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 08:40 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 08:40 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 08:40 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 08:40 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 08:40 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 08:40 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 08:40 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 08:40 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 08:40 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 08:40 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 08:40 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 08:40 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 08:40 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 08:40 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 08:40 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 08:40 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 08:40 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 08:40 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 08:40 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 08:40 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 08:40 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 08:40 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 08:40 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 08:40 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 08:40 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 08:40 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 08:40 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 08:40 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 08:40 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 08:40 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 08:40 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 08:40 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 08:40 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 08:40 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 08:40 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 08:40 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 08:40 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 08:40 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 08:40 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 08:40 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 08:40 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 08:40 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 08:40 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 08:40 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-12 23:47 - 2014-03-12 23:47 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
==================== One Month Modified Files and Folders =======
2014-04-02 15:27 - 2014-04-02 15:27 - 00000000 ____D () C:\FRST
2014-04-02 15:27 - 2014-01-08 17:12 - 00000000 ____D () C:\Users\Michi K\Downloads\Anti-Schädlingsprogramme
2014-04-02 15:25 - 2014-04-02 15:25 - 00000000 _____ () C:\Users\Michi K\defogger_reenable
2014-04-02 15:25 - 2012-12-24 10:56 - 00000000 ____D () C:\Users\Michi K
2014-04-02 15:12 - 2009-07-14 06:45 - 00026896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-02 15:12 - 2009-07-14 06:45 - 00026896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-02 15:09 - 2012-12-24 19:40 - 00710178 _____ () C:\Windows\system32\perfh007.dat
2014-04-02 15:09 - 2012-12-24 19:40 - 00154508 _____ () C:\Windows\system32\perfc007.dat
2014-04-02 15:09 - 2009-07-14 07:13 - 01650550 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-02 15:08 - 2013-10-20 19:37 - 02009559 _____ () C:\Windows\WindowsUpdate.log
2014-04-02 15:04 - 2014-04-01 14:35 - 00000504 _____ () C:\Windows\setupact.log
2014-04-02 15:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-02 09:00 - 2014-04-02 09:00 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-04-02 00:14 - 2014-04-02 00:14 - 00067544 _____ () C:\Users\Michi K\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-02 00:07 - 2013-09-19 17:35 - 00000000 ____D () C:\AdwCleaner
2014-04-01 14:35 - 2014-04-01 14:35 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-01 14:35 - 2014-04-01 14:34 - 00305768 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-01 12:20 - 2014-02-03 17:36 - 00000000 ____D () C:\Users\Michi K\AppData\Local\CrashDumps
2014-04-01 12:18 - 2014-02-26 12:22 - 00000000 ____D () C:\Users\Michi K\Downloads\Neuer Ordner P
2014-03-31 11:29 - 2014-03-31 11:29 - 00001454 _____ () C:\Users\Michi K\Downloads\URLLink.acsm
2014-03-31 11:29 - 2013-08-25 13:11 - 00000000 ____D () C:\Users\Michi K\Documents\My Digital Editions
2014-03-30 22:19 - 2014-03-30 22:19 - 00000000 ____D () C:\Windows\CryptoGuard
2014-03-30 22:18 - 2014-03-13 09:47 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-03-30 22:17 - 2014-03-13 09:47 - 00540160 _____ (SurfRight) C:\Windows\system32\hmpalert.dll
2014-03-30 22:17 - 2014-03-13 09:47 - 00472400 _____ (SurfRight) C:\Windows\SysWOW64\hmpalert.dll
2014-03-30 22:17 - 2014-03-13 09:47 - 00092120 _____ () C:\Windows\system32\Drivers\hmpalert.sys
2014-03-30 20:06 - 2014-03-30 20:06 - 00000000 ____D () C:\Program Files\Intel
2014-03-30 20:05 - 2014-02-06 09:21 - 00000000 ____D () C:\Users\Michi K\Downloads\Treiber
2014-03-30 20:05 - 2013-12-12 23:59 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-27 18:42 - 2013-03-27 16:06 - 00000000 ____D () C:\Users\Michi K\Desktop\Sicherheitsprogramme
2014-03-27 17:41 - 2014-03-27 17:39 - 00000000 ____D () C:\ProgramData\Ralink
2014-03-27 17:39 - 2013-03-27 14:09 - 00073740 _____ () C:\Windows\system32\RaCoInst.log
2014-03-27 17:38 - 2014-03-27 17:38 - 00000000 ____D () C:\Windows\system32\RaLanguages
2014-03-27 17:38 - 2014-03-27 17:38 - 00000000 ____D () C:\Program Files (x86)\Hama
2014-03-27 17:38 - 2014-03-27 17:38 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-03-27 17:38 - 2013-12-18 16:10 - 00000000 ____D () C:\ProgramData\RalinkRT2870 Driver
2014-03-27 17:38 - 2013-03-27 14:13 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-27 16:57 - 2013-03-27 15:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-27 16:03 - 2013-03-27 15:38 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-27 13:03 - 2012-12-24 11:14 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-03-27 10:01 - 2013-04-11 17:58 - 00000000 ____D () C:\Users\Michi K\Desktop\Anwenderprogramme
2014-03-27 10:00 - 2013-12-04 16:48 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 4
2014-03-27 09:45 - 2014-03-23 23:35 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-27 09:44 - 2013-10-06 20:19 - 00000000 ____D () C:\Users\Michi K\Downloads\E-Books
2014-03-27 09:39 - 2014-03-27 09:38 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Michi K\Downloads\revosetup95.exe
2014-03-26 22:45 - 2012-12-24 11:14 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-26 22:41 - 2013-06-24 18:08 - 00000000 ____D () C:\ProgramData\Ralink Driver
2014-03-26 16:12 - 2013-09-12 22:41 - 00259000 _____ () C:\Users\Michi K\AppData\Local\census.cache
2014-03-26 16:12 - 2013-09-12 22:41 - 00100683 _____ () C:\Users\Michi K\AppData\Local\ars.cache
2014-03-26 10:17 - 2012-12-24 10:56 - 00000000 ____D () C:\Users\Michi K\AppData\Local\VirtualStore
2014-03-26 01:52 - 2014-01-05 00:23 - 00000000 ____D () C:\Program Files (x86)\stinger
2014-03-26 00:38 - 2013-04-28 21:25 - 00000000 ____D () C:\Program Files (x86)\Panda Security
2014-03-24 22:05 - 2013-11-25 10:29 - 00000000 ____D () C:\ProgramData\ProductData
2014-03-24 21:52 - 2013-05-29 16:49 - 00000000 ____D () C:\Users\Michi K\AppData\Roaming\QuickScan
2014-03-24 11:34 - 2014-03-24 11:34 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-24 11:34 - 2014-03-24 11:34 - 00000000 ____D () C:\Program Files\Realtek
2014-03-24 09:21 - 2013-05-16 20:11 - 00000000 ____D () C:\Users\Michi K\AppData\Roaming\IObit
2014-03-24 00:22 - 2014-03-24 00:22 - 00001129 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-03-24 00:22 - 2014-03-24 00:22 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-03-24 00:22 - 2013-06-14 11:07 - 00000000 ____D () C:\Users\Michi K\AppData\Roaming\Opera Software
2014-03-24 00:22 - 2013-06-14 11:07 - 00000000 ____D () C:\Users\Michi K\AppData\Local\Opera Software
2014-03-24 00:19 - 2013-05-16 20:11 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-03-24 00:14 - 2012-12-24 11:11 - 00000000 ____D () C:\Users\Michi K\AppData\Roaming\Opera
2014-03-24 00:14 - 2012-12-24 11:11 - 00000000 ____D () C:\Users\Michi K\AppData\Local\Opera
2014-03-24 00:13 - 2012-12-24 10:57 - 00001421 _____ () C:\Users\Michi K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-24 00:05 - 2014-03-24 00:05 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-03-24 00:03 - 2013-08-04 19:38 - 00000000 ____D () C:\Program Files\stinger
2014-03-23 23:37 - 2014-03-23 23:37 - 34734328 _____ (Opera Software ASA) C:\Users\Michi K\Downloads\Opera_20.0.1387.82_Setup.exe
2014-03-21 01:16 - 2014-02-03 22:26 - 00000000 ____D () C:\Program Files\Java
2014-03-21 01:15 - 2014-02-04 22:40 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-21 01:12 - 2013-10-16 14:28 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-21 01:11 - 2014-03-21 01:11 - 00264600 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-21 01:11 - 2014-02-04 22:40 - 00176024 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-21 01:11 - 2014-02-04 22:40 - 00176024 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-21 01:11 - 2014-02-04 22:40 - 00098200 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-21 01:08 - 2014-03-21 01:08 - 00312728 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-21 01:08 - 2013-10-16 14:37 - 00191384 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-21 01:08 - 2013-10-16 14:37 - 00190872 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-21 01:08 - 2013-10-16 14:37 - 00111000 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-20 16:43 - 2013-11-19 17:09 - 00000338 _____ () C:\Windows\Tasks\GlaryInitialize 4.job
2014-03-20 14:45 - 2014-01-10 09:52 - 00002974 _____ () C:\Windows\System32\Tasks\GU4SkipUAC
2014-03-20 14:45 - 2013-11-19 17:09 - 00002636 _____ () C:\Windows\System32\Tasks\GlaryInitialize 4
2014-03-20 10:49 - 2014-03-20 10:48 - 69824512 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2014-03-20 10:48 - 2014-03-20 10:48 - 43941888 _____ () C:\Windows\system32\config\components.iodefrag.bak
2014-03-20 10:48 - 2014-03-20 10:48 - 04747264 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2014-03-20 10:48 - 2014-03-20 10:48 - 00061440 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2014-03-20 10:48 - 2014-03-20 10:48 - 00032768 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2014-03-20 10:48 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-03-20 10:44 - 2013-08-24 22:53 - 00000000 ____D () C:\Users\Michi K\Desktop\E-Book reader Programme
2014-03-20 10:44 - 2012-12-24 19:42 - 00000000 ____D () C:\Windows\Panther
2014-03-20 10:44 - 2012-12-24 10:56 - 00000000 ____D () C:\Users\Michi K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-20 10:40 - 2014-03-20 10:40 - 43941888 _____ () C:\Windows\system32\config\components.iobit
2014-03-20 10:35 - 2014-03-20 10:35 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-03-20 10:35 - 2014-03-20 10:34 - 00000462 _____ () C:\ASCInit.log
2014-03-20 10:35 - 2013-05-16 20:11 - 00000000 ____D () C:\ProgramData\IObit
2014-03-20 10:33 - 2013-08-24 22:40 - 00000000 ____D () C:\Users\Michi K\AppData\Roaming\calibre
2014-03-20 09:38 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-19 17:13 - 2013-08-05 09:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-19 10:05 - 2014-03-19 10:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-03-18 19:12 - 2013-05-27 14:47 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-03-18 15:25 - 2013-07-14 12:59 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 15:23 - 2013-03-28 23:39 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-17 08:22 - 2013-11-19 18:32 - 00118048 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2014-03-17 08:07 - 2014-03-19 02:04 - 00017600 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-03-13 09:47 - 2013-10-08 22:41 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-03-13 08:53 - 2013-07-11 07:07 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 08:53 - 2013-07-11 07:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 23:47 - 2014-03-12 23:47 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 23:47 - 2013-03-27 15:38 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 23:47 - 2013-03-27 15:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-04 00:32 - 2013-08-24 22:43 - 00000000 ____D () C:\Windows\tmp
2014-03-04 00:27 - 2013-08-24 22:43 - 00000000 ____D () C:\Program Files (x86)\Kobo
Some content of TEMP:
====================
C:\Users\Michi K\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-02 11:09
==================== End Of Log ===========================
FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Michi K at 2014-04-02 15:28:45
Running from C:\Users\Michi K\Downloads\Anti-Schädlingsprogramme
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.6 - Sereby Corporation)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
City Racing (HKLM-x32\...\City Racing_is1) (Version: 1.0 - Media Contact LLC)
CPUID CPU-Z 1.66.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Eisenbahn.exe Professional 6.0 (HKLM-x32\...\{6B249FAC-DD1A-405F-A8A2-AA6A2252ED32}) (Version: 6.00.0000 - Trend)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Free Billiards 2008 (HKLM-x32\...\Free Billiards 2008_is1) (Version: - )
Glary Utilities 4.8 (HKLM-x32\...\Glary Utilities 4) (Version: 4.8.0.97 - Glarysoft Ltd)
Hama Wireless LAN Adapter (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 10.6.0 - Hama)
Haushaltsbuch 6.0 (HKLM-x32\...\{BF1295BD-4457-43E2-B666-78720F9C8CE8}) (Version: 6.0.1 - Euchler Software)
HitmanPro.Alert (HKLM\...\HitmanPro.Alert) (Version: 2.6.4.75 - SurfRight B.V.)
Intel(R) Chipset Device Software (Version: 10.0.13 - Intel Corporation) Hidden
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Java 8 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418000FF}) (Version: 8.0.0 - Oracle Corporation)
Java 8 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218000FF}) (Version: 8.0.0 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.00.132 - Oracle, Inc.) Hidden
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.65.11 - JMicron Technology Corp.)
Kobo (HKLM-x32\...\Kobo) (Version: 3.6.0 - Kobo Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Flight (HKLM-x32\...\GFWL_{4D5308D2-DC8E-4658-A37C-351000058100}) (Version: 1.0.0005.129 - Microsoft Studios)
Microsoft Flight (x32 Version: 1.0.0005.129 - Microsoft Studios) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60830 (Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60830 (Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60830 (x32 Version: 11.0.60830 - Microsoft Corporation) Hidden
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1509 - Electronic Arts)
NVIDIA Grafiktreiber 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 307.83 (Version: 307.83 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Opera Stable 20.0.1387.82 (HKLM-x32\...\Opera 20.0.1387.82) (Version: 20.0.1387.82 - Opera Software ASA)
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SlimDrivers (HKLM-x32\...\{A5457401-D56A-43F2-9524-78E54A7FC07A}) (Version: 2.2.32705 - SlimWare Utilities, Inc.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1014 - SUPERAntiSpyware.com)
Sweet Home 3D version 4.0 (HKLM-x32\...\Sweet Home 3D_is1) (Version: - eTeks)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tomb Raider: Anniversary 1.0 (HKLM-x32\...\Tomb Raider: Anniversary) (Version: - )
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
==================== Restore Points =========================
26-03-2014 12:47:09 Windows Update
26-03-2014 20:37:21 Revo Uninstaller's restore point - Ralink RT2870 Wireless LAN Card
26-03-2014 20:40:08 Entfernt Ralink Wireless LAN
26-03-2014 21:01:32 Installiert Hama Wireless LAN Adapter
26-03-2014 21:21:25 Entfernt Hama Wireless LAN Adapter
27-03-2014 07:45:36 Revo Uninstaller's restore point - TP-LINK Wireless Client Utility
27-03-2014 07:46:07 Removed TP-LINK Wireless LAN
27-03-2014 08:03:02 Installiert Hama Wireless LAN Adapter
27-03-2014 08:27:12 Revo Uninstaller's restore point - Hama Wireless LAN Adapter
27-03-2014 08:27:31 Entfernt Hama Wireless LAN Adapter
27-03-2014 08:34:07 Installiert Hama Wireless LAN Adapter
27-03-2014 15:01:52 Revo Uninstaller's restore point - Hama Wireless LAN Adapter
27-03-2014 15:02:37 Entfernt Hama Wireless LAN Adapter
27-03-2014 15:09:26 Installiert Hama Wireless LAN Adapter
27-03-2014 15:31:03 Revo Uninstaller's restore point - Hama Wireless LAN Adapter
27-03-2014 15:31:40 Entfernt Hama Wireless LAN Adapter
27-03-2014 15:38:10 Installiert Hama Wireless LAN Adapter
30-03-2014 18:06:04 Windows-Sicherung
31-03-2014 20:09:19 Windows Update
01-04-2014 22:14:41 02.02.2014
==================== Hosts content: ==========================
2009-07-14 04:34 - 2014-02-26 01:32 - 00450709 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {1B1211D4-A48C-4389-A73A-0FB6736F54EC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {20B93504-87DD-44D3-BEC8-5C542FCE6C1B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {2D698A2D-4B2E-4983-AEF6-4F3082BFD90C} - System32\Tasks\GU4SkipUAC => C:\Program Files (x86)\Glary Utilities 4\Integrator.exe [2014-03-17] (Glarysoft Ltd)
Task: {4222C709-279F-4D01-8F39-E0E9DF29E704} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)
Task: {5DD09E9C-5380-4819-B5A2-75FCB881A2CB} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B98C9170-C407-44BC-8E90-F9B60B0119F1} - System32\Tasks\GlaryInitialize 4 => C:\Program Files (x86)\Glary Utilities 4\Initialize.exe [2014-03-17] (Glarysoft Ltd)
Task: {C9271784-F690-466A-BB04-FFB1680733C7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {CB33B90C-190F-4EBA-A0AB-5D9D7555F777} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {F68D4326-FA24-4D60-B365-90F3BD808634} - \Driver Booster Update No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 4.job => C:\Program Files (x86)\Glary Utilities 4\Initialize.exe
==================== Loaded Modules (whitelisted) =============
2013-03-29 00:34 - 2013-01-31 11:25 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-03-24 00:22 - 2014-03-19 11:59 - 01380704 _____ () C:\Program Files (x86)\Opera\20.0.1387.82\opera_crashreporter.exe
2012-12-24 11:10 - 2012-09-19 19:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-12-24 11:12 - 2012-11-13 15:06 - 00108960 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2012-12-24 11:12 - 2012-11-13 15:06 - 00416160 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2012-12-24 11:12 - 2012-11-13 15:06 - 00158624 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2012-12-24 11:12 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2012-12-24 11:12 - 2012-11-13 15:06 - 00528288 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2012-12-24 11:12 - 2012-11-13 15:06 - 00554400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl
2014-03-27 17:39 - 2010-06-14 15:38 - 00984416 _____ () C:\Program Files (x86)\Hama\Common\RaWLAPI.dll
2014-03-24 00:22 - 2014-03-19 11:59 - 00908640 _____ () C:\Program Files (x86)\Opera\20.0.1387.82\libglesv2.dll
2014-03-24 00:22 - 2014-03-19 11:59 - 00108896 _____ () C:\Program Files (x86)\Opera\20.0.1387.82\libegl.dll
2014-03-24 00:22 - 2014-03-19 11:59 - 00895328 _____ () C:\Program Files (x86)\Opera\20.0.1387.82\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\77002362.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\77002362.sys => ""="Driver"
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK Wireless Client Utility.lnk => C:\Windows\pss\TP-LINK Wireless Client Utility.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/02/2014 03:04:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/02/2014 10:24:44 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/02/2014 09:00:27 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/02/2014 09:00:23 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/02/2014 09:00:22 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/02/2014 08:55:24 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/02/2014 00:19:47 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/01/2014 11:54:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/01/2014 06:33:13 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/01/2014 05:37:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (04/02/2014 03:07:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (04/02/2014 03:07:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (04/02/2014 10:27:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (04/02/2014 10:27:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (04/02/2014 08:57:52 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (04/02/2014 08:57:52 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (04/02/2014 00:22:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (04/02/2014 00:22:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (04/01/2014 11:56:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (04/01/2014 11:56:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Microsoft Office Sessions:
=========================
Error: (04/02/2014 03:04:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/02/2014 10:24:44 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/02/2014 09:00:27 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Michi K\Downloads\Anti-Schädlingsprogramme\esetsmartinstaller_deu.exe
Error: (04/02/2014 09:00:23 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Michi K\Downloads\Anti-Schädlingsprogramme\esetsmartinstaller_deu.exe
Error: (04/02/2014 09:00:22 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Michi K\Downloads\Anti-Schädlingsprogramme\esetsmartinstaller_deu.exe
Error: (04/02/2014 08:55:24 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/02/2014 00:19:47 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/01/2014 11:54:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/01/2014 06:33:13 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (04/01/2014 05:37:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2014-04-02 15:25:09.879
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-02 11:17:08.466
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-02 10:45:23.973
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-02 10:34:58.090
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-02 10:20:27.998
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-02 09:54:53.863
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-02 09:37:37.933
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-01 18:55:35.109
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-01 18:43:33.718
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-04-01 18:18:35.949
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 51%
Total physical RAM: 2047.12 MB
Available physical RAM: 996.71 MB
Total Pagefile: 4094.23 MB
Available Pagefile: 2588.31 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.75 GB) (Free:398.85 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 85998599)
Partition 1: (Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
03.04.2014, 12:04
| #4 |
| /// the machine /// TB-Ausbilder | Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware? Rechner ist sauber, ich tippe auf Hardware/Festplatte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.04.2014, 16:31
| #5 |
| | Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware? Sehr geehrter Herr "schrauber", vielen Dank für die positive Nachricht und für Ihr Bemühen und letztendlich Ihre Hilfe. Gruß Mike |
|
04.04.2014, 11:16
| #6 |
| /// the machine /// TB-Ausbilder | Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware? hab ja nix gemacht 
__________________ --> Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware? |
|
| Themen zu Win7 64bit Festplatte "rödelt" oft im Hintergrund während des Surfens! Virus? Malware? |
| arbeitet, computer, dateien, fehlermeldung, festplatte, folge, free, gmer, hintergrund, infizierte, internet, junkware, malware, malwarebytes, online, programme, scan, schutz, spybot, spyware, suche, super, trojaner, trojaner board, virenschutz, virus, virus? |
Linear-Darstellung
