|
Log-Analyse und Auswertung: "Windows Pc-Reparatur"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.05.2014, 08:28 | #1 |
| "Windows Pc-Reparatur" Hallo zusammen, ich habe in diesem Forum schon einen Thread gelesen, in der dasselbe Problem wie bei mir auftrat, also befürchte ich mal es ist was Ernstes... leider kam es in erstgenanntem Thread (http://www.trojaner-board.de/138420-...-entdeckt.html) zu keiner Diagnose. Es geht darum, dass, wenn ich meinen Browser öffne, ein Popup erscheint mit der Meldung "Ihr PC läuft langsamer als sonst? Ihr PC hat 14 Fehler und braucht 3 Reparaturen." Tatsächlich läuft mein PC langsamer als sonst und ein Klick auf das Popup führt zu folgender Seite : hxxp://de.reimageplus.com/lp/sys/index.php?tracking=aptv&banner=aptv&adgroup=1946&ads_name=direct&keyword=direct&context=MjAyNzg1Mjc0NzkyMzM6OjI3ODU6OjM6OkRFOjo1OjowODo6MDo6Mzo6MjY3Oj ozODc3OjoyNjcwMjA6OjE6OlVSTDo6MTk0Njo6MjUzNTo6OjoyNzQ3OTI6OjE6Ojc4NjQzMTM4NDo6MDo6MTAyOjowOjoxOjowOjowOjow Ich habe mir also wie in oben genanntem Thread empfohlen das Farbar Recovery Scan Tool heruntergeladen. Weil es zu lang wäre die beiden Dateien hier zu posten, werde ich sie als Antwort auf diesen Thread posten. Ich bedanke mich im Voraus für jegliche Hilfe MfG Ive FRST.txt FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-05-2014 02 Ran by Ive (administrator) on IVE-PC on 09-05-2014 09:13:21 Running from C:\Users\Ive\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (Dropbox, Inc.) C:\Users\Ive\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (SecureW2 B.V.) C:\Program Files (x86)\SecureW2\sw2_tray.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\pg_ctl.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (SplitCam Co.) C:\Program Files (x86)\SplitCam\SplitCamService.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_13_0_0_206_ActiveX.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-30] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.) HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [SecureW2 Tray] => C:\Program Files (x86)\SecureW2\sw2_tray.exe [287112 2012-04-10] (SecureW2 B.V.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707472 2013-12-13] (Cisco Systems, Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-04-30] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-05-06] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-2813519919-2714014398-3896331259-1000\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-2813519919-2714014398-3896331259-1001\...\Run: [Google Update] => C:\Users\Ive\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-18] (Google Inc.) HKU\S-1-5-21-2813519919-2714014398-3896331259-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2813519919-2714014398-3896331259-1001\...\MountPoints2: {58dcdcda-33ea-11e3-a065-dc0ea1583a4a} - E:\setup.exe HKU\S-1-5-21-2813519919-2714014398-3896331259-1002\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] () AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355552 2014-04-08] (Conduit) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050912 2014-04-08] (Conduit) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Ive\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&ISID=MD53C7329-7D6D-4E7A-8406-3011F027A099&SearchSource=55&CUI=&UM=5&UP=SP20F4524F-5D64-42F9-830A-5ADF048C1D25&SSPV= HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&ISID=MD53C7329-7D6D-4E7A-8406-3011F027A099&SearchSource=58&CUI=&UM=5&UP=SP20F4524F-5D64-42F9-830A-5ADF048C1D25&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&ISID=MD53C7329-7D6D-4E7A-8406-3011F027A099&SearchSource=58&CUI=&UM=5&UP=SP20F4524F-5D64-42F9-830A-5ADF048C1D25&q={searchTerms}&SSPV= SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {E64A7B45-BA44-4FCD-831F-F5316BCBB0C8} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYES&apn_uid=08DE7418-970D-43C2-800A-9680FEB3E05E&apn_sauid=7E2E0954-8E83-44FC-9095-3A246DEFCA9C SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC8} URL = hxxp://search.icq.com/search/results.php?q=%s&ch_id=hm&search_mode=web BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: 193.197.62.198 vpn.uni-ulm.de ###Cisco AnyConnect VPN client modified this file. Please do not modify contents until this comment is removed. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 82.212.62.62 78.42.43.62 FireFox: ======== FF ProfilePath: C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default FF SearchEngineOrder.1: Ask.com FF Homepage: hxxp://search.conduit.com/?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&ISID=MD53C7329-7D6D-4E7A-8406-3011F027A099&SearchSource=55&CUI=&UM=5&UP=SP20F4524F-5D64-42F9-830A-5ADF048C1D25&SSPV= FF NetworkProxy: "ftp", "72.64.146.136" FF NetworkProxy: "ftp_port", 43 FF NetworkProxy: "http", "72.64.146.136" FF NetworkProxy: "http_port", 43 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "72.64.146.136" FF NetworkProxy: "socks_port", 43 FF NetworkProxy: "ssl", "72.64.146.136" FF NetworkProxy: "ssl_port", 43 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - F:\vlc\npvlc.dll No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Ive\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Ive\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\searchplugins\icq.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ReminderFox - C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-04-19] FF Extension: Ciuvo - C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\Extensions\extension@ciuvo.com.xpi [2012-09-18] FF Extension: Stealthy - C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\Extensions\stealthyextension@gmail.com.xpi [2013-01-27] FF Extension: Adblock Plus - C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-18] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-30] Chrome: ======= CHR HomePage: CHR Extension: (SiteAdvisor) - C:\Users\Ive\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2012-09-18] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-05-06] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-05-06] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [125008 2014-04-30] (Avira Operations GmbH & Co. KG) R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2470688 2014-04-08] (Conduit) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] () R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation) R2 SpliCamService; C:\Program Files (x86)\SplitCam\SplitCamService.exe [311456 2013-10-23] (SplitCam Co.) R2 postgresql-x64-9.0; C:/Program Files (x86)/PostgreSQL/9.0/bin/pg_ctl.exe runservice -N "postgresql-x64-9.0" -D "C:/Program Files/PostgreSQL/9.0/data" -w [X] ==================== Drivers (Whitelisted) ==================== R3 automap; C:\Windows\System32\DRIVERS\automap.sys [18776 2012-04-19] (Focusrite Audio Engineering Limited) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-05-06] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-05-06] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-06] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-13] (DT Soft Ltd) S3 ffusb2audio; C:\Windows\System32\DRIVERS\ffusb2audio.sys [127280 2013-09-25] (Focusrite Audio Engineering Limited.) S3 NvnUsbAudio; C:\Windows\System32\DRIVERS\nvnusbaudio.sys [53552 2014-01-03] (Novation DMS Ltd.) R3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2013-04-24] (Windows (R) Win 7 DDK provider) R3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37496 2013-07-12] (Windows (R) Win 7 DDK provider) S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-12-13] (Cisco Systems, Inc.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-09 09:13 - 2014-05-09 09:15 - 00025792 _____ () C:\Users\Ive\Downloads\FRST.txt 2014-05-09 09:13 - 2014-05-09 09:13 - 00000000 ____D () C:\FRST 2014-05-09 09:12 - 2014-05-09 09:12 - 02063872 _____ (Farbar) C:\Users\Ive\Downloads\FRST64.exe 2014-05-07 18:27 - 2014-05-07 18:27 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-05-07 11:08 - 2014-05-07 11:08 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Avira 2014-05-07 11:02 - 2014-05-06 19:49 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-05-07 11:02 - 2014-05-06 19:49 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-05-07 11:02 - 2014-05-06 19:49 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-05-07 00:19 - 2014-05-07 00:19 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-06 20:22 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-06 20:22 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-06 12:57 - 2014-05-06 12:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-06 12:57 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-06 12:57 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-06 12:57 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-06 12:57 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-06 12:56 - 2014-05-06 12:57 - 00004328 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-05 21:11 - 2014-05-05 21:14 - 397523882 _____ () C:\Users\Ive\Downloads\Guitar_Rig_5_510_PC.zip 2014-05-05 19:49 - 2014-05-05 19:49 - 00000000 ____D () C:\ProgramData\Package Cache 2014-05-05 19:48 - 2014-05-05 19:48 - 04530864 _____ (Avira Operations GmbH & Co. KG) C:\Users\Ive\Downloads\avira_de_av___ws.exe 2014-05-05 19:46 - 2014-05-07 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-05-05 19:46 - 2014-05-07 11:02 - 00000000 ____D () C:\ProgramData\Avira 2014-05-05 19:46 - 2014-05-07 11:02 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-05-05 17:57 - 2014-05-08 13:56 - 00001244 _____ () C:\Users\Ive\Desktop\Focusrite USB 2.0 Audio Control Panel.lnk 2014-05-04 16:31 - 2014-05-04 16:31 - 00001015 _____ () C:\Users\Ive\Desktop\SplitCam.lnk 2014-05-04 16:31 - 2014-05-04 16:31 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SplitCam 2014-05-04 16:26 - 2013-04-24 10:45 - 00810496 _____ () C:\Windows\SysWOW64\xvidcore.dll 2014-05-04 16:26 - 2013-04-24 10:45 - 00183808 _____ () C:\Windows\SysWOW64\xvidvfw.dll 2014-05-04 16:26 - 2013-04-24 10:45 - 00080896 _____ () C:\Windows\SysWOW64\ff_vfw.dll 2014-05-04 16:26 - 2013-04-24 10:45 - 00000590 _____ () C:\Windows\SysWOW64\ff_vfw.dll.manifest 2014-05-04 16:24 - 2014-05-04 16:31 - 00000000 ____D () C:\Program Files (x86)\SplitCam 2014-05-04 16:24 - 2014-05-04 16:24 - 00000000 ____D () C:\Users\Ive\AppData\Local\SearchProtect 2014-05-04 16:24 - 2014-05-04 16:24 - 00000000 ____D () C:\Program Files (x86)\SearchProtect 2014-05-04 16:14 - 2014-05-04 16:15 - 74033640 _____ (SplitCam Co.) C:\Users\Ive\Downloads\nw_13504_splitcamsetupexe.exe 2014-05-04 16:14 - 2014-05-04 16:14 - 00613200 _____ (Chip Digital GmbH) C:\Users\Ive\Downloads\SplitCam - CHIP-Downloader(1).exe 2014-05-04 16:13 - 2014-05-04 16:13 - 00613200 _____ (Chip Digital GmbH) C:\Users\Ive\Downloads\SplitCam - CHIP-Downloader.exe 2014-05-04 13:35 - 2014-05-04 13:35 - 00000761 _____ () C:\Users\Ive\Desktop\Ableton Live 9 Lite (2).lnk 2014-05-04 13:34 - 2014-05-04 13:34 - 00000761 _____ () C:\Users\Ive\Desktop\Ableton Live 9 Lite.lnk 2014-05-04 13:32 - 2014-05-04 13:33 - 00000000 ____D () C:\Users\Ive\Desktop\cubasezeuch 2014-05-03 17:43 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-03 17:43 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-03 17:43 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-03 17:43 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-03 17:02 - 2014-05-04 12:18 - 00000000 ____D () C:\Users\Ive\Documents\Ableton 2014-05-03 17:00 - 2014-05-03 17:08 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Ableton 2014-05-03 17:00 - 2014-05-03 17:00 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software 2014-05-03 16:58 - 2014-05-03 16:58 - 00000761 _____ () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Lite.lnk 2014-05-03 16:16 - 2014-05-03 16:20 - 739524724 _____ () C:\Users\Ive\Downloads\ableton_live_lite_9.1.2_64.zip 2014-05-03 15:59 - 2014-05-03 16:08 - 954359199 _____ () C:\Users\Ive\Downloads\LOOPMASTERS_EXCITE_PACK2014.zip 2014-05-03 15:59 - 2014-05-03 15:59 - 01621480 _____ (Novation ) C:\Users\Ive\Downloads\bassstation-2.0(1).exe 2014-05-03 15:58 - 2014-05-03 15:58 - 01621480 _____ (Novation ) C:\Users\Ive\Downloads\bassstation-2.0.exe 2014-05-03 15:01 - 2014-05-03 15:01 - 00000000 ____D () C:\Users\Ive\AppData\Local\Novation 2014-05-03 14:59 - 2014-05-03 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Novation 2014-05-03 14:59 - 2014-05-03 15:58 - 00000000 ____D () C:\Program Files (x86)\Novation 2014-05-03 14:59 - 2014-05-03 14:59 - 00000000 ____D () C:\ProgramData\Propellerhead Software 2014-05-03 14:59 - 2014-05-03 14:59 - 00000000 ____D () C:\Program Files\Novation 2014-05-03 14:59 - 2014-01-03 12:22 - 00053552 _____ (Novation DMS Ltd.) C:\Windows\system32\Drivers\nvnusbaudio.sys 2014-05-03 14:59 - 2014-01-03 12:22 - 00021808 _____ (Novation DMS Ltd.) C:\Windows\system32\nvnusbaudio_coinst.dll 2014-05-03 14:59 - 2012-04-19 11:31 - 00018776 _____ (Focusrite Audio Engineering Limited) C:\Windows\system32\Drivers\automap.sys 2014-05-03 14:58 - 2014-05-03 14:58 - 28130144 _____ (Focusrite Audio Engineering Ltd. ) C:\Users\Ive\Downloads\automap-4.8.exe 2014-05-03 14:21 - 2014-05-03 16:08 - 00000000 ____D () C:\Program Files (x86)\VSTPlugIns 2014-05-03 14:21 - 2014-05-03 14:21 - 03491288 _____ (Focusrite ) C:\Users\Ive\Downloads\scarlett-plug-in-suite-1.5.exe 2014-05-03 14:21 - 2014-05-03 14:21 - 00000000 ____D () C:\Program Files (x86)\Focusrite 2014-05-03 11:11 - 2014-05-03 11:11 - 00000000 ____D () C:\Program Files\DIFX 2014-05-03 11:10 - 2014-05-03 14:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite 2014-05-03 11:10 - 2014-05-03 11:10 - 00000000 ____D () C:\Program Files\Focusrite 2014-05-03 11:10 - 2013-09-25 14:41 - 00022832 _____ (Focusrite Audio Engineering Limited.) C:\Windows\system32\ffusb2audio_coinst.dll 2014-05-03 11:10 - 2013-09-25 14:40 - 00127280 _____ (Focusrite Audio Engineering Limited.) C:\Windows\system32\Drivers\ffusb2audio.sys 2014-05-03 11:08 - 2014-05-03 11:08 - 00929768 _____ (Focusrite Audio Engineering Limited. ) C:\Users\Ive\Downloads\focusrite-usb-2-driver-2.5.1.exe 2014-04-30 12:09 - 2014-04-30 12:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-28 20:07 - 2014-04-28 20:07 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-04-22 20:31 - 2014-04-22 20:31 - 00000000 __SHD () C:\Users\Ive\AppData\Local\EmieUserList 2014-04-22 20:31 - 2014-04-22 20:31 - 00000000 __SHD () C:\Users\Ive\AppData\Local\EmieSiteList 2014-04-22 08:09 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 08:09 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 08:09 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 08:09 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 08:09 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 08:09 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 08:09 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 08:09 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 08:09 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 08:09 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 08:09 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 08:09 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 08:09 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 08:09 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 08:09 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 08:09 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 08:09 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 08:09 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 08:09 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 08:09 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 08:09 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 08:09 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 08:09 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 08:09 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 08:09 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 08:09 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 08:09 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 08:09 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 08:09 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 08:09 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 08:09 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 08:09 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 08:09 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 08:09 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 08:09 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 08:09 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 08:09 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 08:09 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 08:09 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 08:09 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 08:09 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 08:09 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 08:09 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 08:09 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-17 23:42 - 2014-04-17 23:42 - 00001048 _____ () C:\Users\Public\Desktop\Guitar Rig 5.lnk 2014-04-17 23:42 - 2014-04-17 23:42 - 00000000 __HDC () C:\ProgramData\{B7072B15-6E80-42FF-A9AE-4E62AF2B2418} 2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 __HDC () C:\ProgramData\{95B4F0ED-951F-4D36-B068-5EC1C4C19C14} 2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 __HDC () C:\ProgramData\{30FA7941-4170-4C83-A9A8-FDF01C431704} 2014-04-17 23:29 - 2014-04-17 23:29 - 00000000 __HDC () C:\ProgramData\{ACEB5C90-39F7-4044-91EF-FBD59A59D240} 2014-04-17 23:24 - 2014-04-17 23:24 - 00000000 ____D () C:\Users\Ive\Desktop\Native.Instruments.Guitar.Rig.5.Pro+Update v5.1.1.UNLOCKED-R2R 2014-04-17 23:11 - 2014-04-17 23:11 - 00000000 ____D () C:\Users\Ive\Desktop\DYNAMiCS-WiN 2014-04-17 22:48 - 2014-04-17 22:48 - 00000000 __HDC () C:\ProgramData\{AB38F02B-C891-457C-B8C8-DA9D96EFA317} 2014-04-17 22:48 - 2014-04-17 22:48 - 00000000 __HDC () C:\ProgramData\{27D02406-6F0F-419F-AF2F-A4EE19D2E463} 2014-04-17 22:45 - 2014-04-17 22:45 - 00000000 __HDC () C:\ProgramData\{91377244-4B4E-4A81-9F72-FA41DECB3D8F} 2014-04-17 22:45 - 2014-04-17 22:45 - 00000000 ____D () C:\Users\Public\Documents\Scarbee Vintage Keys Library 2014-04-17 22:44 - 2014-04-17 22:45 - 00000000 ____D () C:\Users\Public\Documents\Upright Piano Library 2014-04-17 22:44 - 2014-04-17 22:44 - 00000000 __HDC () C:\ProgramData\{F2026C51-8509-47B4-816D-CCD2DB993FC1} 2014-04-17 22:40 - 2014-04-17 23:18 - 00000000 ____D () C:\Users\Public\Documents\Scarbee MM-Bass Library 2014-04-17 22:40 - 2014-04-17 22:40 - 00000000 __HDC () C:\ProgramData\{DFB8047B-FF22-438D-90BD-83E8B78F83D7} 2014-04-17 22:39 - 2014-04-17 22:39 - 00000000 __HDC () C:\ProgramData\{68233086-CF7D-452D-8519-A7815257EC6B} 2014-04-17 22:39 - 2014-04-17 22:39 - 00000000 ____D () C:\Users\Public\Documents\New York Concert Grand Library 2014-04-17 22:37 - 2014-04-17 22:38 - 00000000 ____D () C:\Users\Public\Documents\Berlin Concert Grand Library 2014-04-17 22:36 - 2014-04-17 22:36 - 00000000 __HDC () C:\ProgramData\{80A0A482-175E-4DE8-9D32-C8C8463D1362} 2014-04-17 22:34 - 2014-04-17 22:36 - 00000000 ____D () C:\Users\Public\Documents\Vintage Organs Library 2014-04-17 22:33 - 2014-04-17 22:34 - 00000000 __HDC () C:\ProgramData\{35B46D49-85E2-40EA-8EC6-43B281EDD8E7} 2014-04-17 22:16 - 2014-04-17 22:17 - 00000000 ____D () C:\Users\Public\Documents\Kontakt Factory Library 2014-04-17 22:16 - 2014-04-17 22:16 - 00000000 __HDC () C:\ProgramData\{E9CDB61C-771D-42BB-B441-4CA7622ACA52} 2014-04-17 22:04 - 2014-04-17 22:09 - 00000000 ____D () C:\Users\Public\Documents\Battery 3 Library 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{CA03436C-933D-4ADA-9E89-2C39CC03E904} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{588D017F-D30B-4C08-8A10-1FEF7D039369} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{0A583E76-A7A0-45F8-9386-AEE1E529A4DE} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\The Finger R2 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\Reflektor Library 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\Reaktor Spark R2 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{DC597CF0-DB39-40C2-9F8C-CF9D0A386548} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{D04E7E60-5F77-4E61-9CD4-7AEC5E15C525} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{B0DF9098-245E-479F-A4ED-B5F91EA4948B} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{6E467D89-1963-440B-84F9-852C8150E323} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{3DFBC806-D62A-4312-81FF-5F343DDCB5DC} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Transient Master 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Traktors 12 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Reaktor Prism 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Rammfire 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Battery Library Importer for Maschine 2014-04-17 22:01 - 2014-04-17 22:01 - 00000000 __HDC () C:\ProgramData\{DE181BBE-2522-484E-A620-BDCFB298DC87} 2014-04-17 21:56 - 2014-04-17 21:56 - 00000000 __HDC () C:\ProgramData\{E26B3878-7CEC-469C-B449-5CAA336DF8CD} 2014-04-17 21:48 - 2014-04-17 21:48 - 00000000 __HDC () C:\ProgramData\{3006A797-CDFA-44FC-98EF-155579E2CDBF} 2014-04-17 21:47 - 2014-04-17 21:47 - 00000000 __HDC () C:\ProgramData\{C2A88E6D-FA3D-462B-BDFF-A09B1EFA8FBE} 2014-04-17 21:42 - 2014-04-17 23:41 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments 2014-04-17 21:38 - 2014-04-17 23:46 - 00000000 ____D () C:\Program Files\Native Instruments 2014-04-17 21:38 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2014-04-17 21:38 - 2014-04-17 23:36 - 00000000 ____D () C:\ProgramData\Native Instruments 2014-04-17 21:20 - 2009-10-11 21:58 - 01177600 _____ (AD) C:\Windows\SysWOW64\SYNSOEMU.DLL 2014-04-17 21:18 - 2014-04-17 21:18 - 00000000 ____D () C:\ProgramData\VST3 Presets 2014-04-17 21:12 - 2014-04-17 21:12 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg HALionOne 2014-04-17 21:12 - 2014-04-17 21:12 - 00000000 ____D () C:\ProgramData\Steinberg 2014-04-17 21:11 - 2014-04-17 21:11 - 00002134 _____ () C:\Users\Ive\Desktop\Cubase 5.lnk 2014-04-17 21:10 - 2014-04-17 21:22 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Steinberg 2014-04-17 21:10 - 2014-04-17 21:19 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 5 2014-04-17 21:10 - 2014-04-17 21:11 - 00000000 ____D () C:\Program Files (x86)\Steinberg 2014-04-11 09:45 - 2014-04-11 09:45 - 00005233 _____ () C:\Users\Ive\Downloads\aimpsoundoutbpm.zip 2014-04-10 19:14 - 2014-04-10 19:14 - 00000358 _____ () C:\Users\Ive\Downloads\unbenannt(3) 2014-04-10 10:47 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 10:47 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 10:47 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 10:47 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 10:47 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 10:47 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 10:47 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 10:47 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 10:47 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 10:47 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 10:47 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-10 10:47 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-10 10:47 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 10:47 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 10:47 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 10:47 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 10:47 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys ==================== One Month Modified Files and Folders ======= 2014-05-09 09:15 - 2014-05-09 09:13 - 00025792 _____ () C:\Users\Ive\Downloads\FRST.txt 2014-05-09 09:13 - 2014-05-09 09:13 - 00000000 ____D () C:\FRST 2014-05-09 09:12 - 2014-05-09 09:12 - 02063872 _____ (Farbar) C:\Users\Ive\Downloads\FRST64.exe 2014-05-09 09:07 - 2012-09-18 18:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-09 08:47 - 2013-11-26 12:29 - 00000514 _____ () C:\Windows\Tasks\MATLAB R2013b Startup Accelerator.job 2014-05-09 08:47 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-09 08:47 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-09 08:44 - 2012-02-15 01:02 - 01958525 _____ () C:\Windows\WindowsUpdate.log 2014-05-09 08:40 - 2013-10-17 18:02 - 00000000 ____D () C:\Users\Ive\AppData\Local\LogMeIn Hamachi 2014-05-09 08:39 - 2013-03-31 20:29 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Dropbox 2014-05-09 08:39 - 2012-09-18 01:28 - 00000000 ____D () C:\ProgramData\clear.fi 2014-05-09 08:38 - 2013-03-31 20:34 - 00000000 ___RD () C:\Users\Ive\Dropbox 2014-05-09 08:37 - 2012-09-18 17:26 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001UA.job 2014-05-09 08:36 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-09 08:36 - 2009-07-14 06:51 - 00155502 _____ () C:\Windows\setupact.log 2014-05-08 15:37 - 2012-09-18 17:26 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001Core.job 2014-05-08 15:32 - 2012-09-18 17:26 - 00004078 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001UA 2014-05-08 15:32 - 2012-09-18 17:26 - 00003682 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001Core 2014-05-08 13:56 - 2014-05-05 17:57 - 00001244 _____ () C:\Users\Ive\Desktop\Focusrite USB 2.0 Audio Control Panel.lnk 2014-05-08 13:56 - 2014-03-03 05:08 - 00092672 ___SH () C:\Users\Ive\Desktop\Thumbs.db 2014-05-07 18:27 - 2014-05-07 18:27 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-05-07 18:25 - 2010-11-21 05:47 - 00334566 _____ () C:\Windows\PFRO.log 2014-05-07 11:08 - 2014-05-07 11:08 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Avira 2014-05-07 11:02 - 2014-05-05 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-05-07 11:02 - 2014-05-05 19:46 - 00000000 ____D () C:\ProgramData\Avira 2014-05-07 11:02 - 2014-05-05 19:46 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-05-07 11:01 - 2014-04-03 05:55 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-05-07 00:19 - 2014-05-07 00:19 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-07 00:18 - 2012-09-17 16:38 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Skype 2014-05-06 19:49 - 2014-05-07 11:02 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-05-06 19:49 - 2014-05-07 11:02 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-05-06 19:49 - 2014-05-07 11:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-05-06 13:01 - 2013-11-15 02:10 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-06 12:57 - 2014-05-06 12:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-06 12:57 - 2014-05-06 12:56 - 00004328 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-06 12:57 - 2013-02-15 14:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-05-05 21:14 - 2014-05-05 21:11 - 397523882 _____ () C:\Users\Ive\Downloads\Guitar_Rig_5_510_PC.zip 2014-05-05 19:49 - 2014-05-05 19:49 - 00000000 ____D () C:\ProgramData\Package Cache 2014-05-05 19:48 - 2014-05-05 19:48 - 04530864 _____ (Avira Operations GmbH & Co. KG) C:\Users\Ive\Downloads\avira_de_av___ws.exe 2014-05-04 16:31 - 2014-05-04 16:31 - 00001015 _____ () C:\Users\Ive\Desktop\SplitCam.lnk 2014-05-04 16:31 - 2014-05-04 16:31 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SplitCam 2014-05-04 16:31 - 2014-05-04 16:24 - 00000000 ____D () C:\Program Files (x86)\SplitCam 2014-05-04 16:24 - 2014-05-04 16:24 - 00000000 ____D () C:\Users\Ive\AppData\Local\SearchProtect 2014-05-04 16:24 - 2014-05-04 16:24 - 00000000 ____D () C:\Program Files (x86)\SearchProtect 2014-05-04 16:15 - 2014-05-04 16:14 - 74033640 _____ (SplitCam Co.) C:\Users\Ive\Downloads\nw_13504_splitcamsetupexe.exe 2014-05-04 16:14 - 2014-05-04 16:14 - 00613200 _____ (Chip Digital GmbH) C:\Users\Ive\Downloads\SplitCam - CHIP-Downloader(1).exe 2014-05-04 16:13 - 2014-05-04 16:13 - 00613200 _____ (Chip Digital GmbH) C:\Users\Ive\Downloads\SplitCam - CHIP-Downloader.exe 2014-05-04 13:35 - 2014-05-04 13:35 - 00000761 _____ () C:\Users\Ive\Desktop\Ableton Live 9 Lite (2).lnk 2014-05-04 13:34 - 2014-05-04 13:34 - 00000761 _____ () C:\Users\Ive\Desktop\Ableton Live 9 Lite.lnk 2014-05-04 13:33 - 2014-05-04 13:32 - 00000000 ____D () C:\Users\Ive\Desktop\cubasezeuch 2014-05-04 12:18 - 2014-05-03 17:02 - 00000000 ____D () C:\Users\Ive\Documents\Ableton 2014-05-03 23:00 - 2013-01-30 14:32 - 00000000 ____D () C:\Users\postgres 2014-05-03 17:08 - 2014-05-03 17:00 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Ableton 2014-05-03 17:00 - 2014-05-03 17:00 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software 2014-05-03 16:58 - 2014-05-03 16:58 - 00000761 _____ () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Lite.lnk 2014-05-03 16:20 - 2014-05-03 16:16 - 739524724 _____ () C:\Users\Ive\Downloads\ableton_live_lite_9.1.2_64.zip 2014-05-03 16:08 - 2014-05-03 15:59 - 954359199 _____ () C:\Users\Ive\Downloads\LOOPMASTERS_EXCITE_PACK2014.zip 2014-05-03 16:08 - 2014-05-03 14:21 - 00000000 ____D () C:\Program Files (x86)\VSTPlugIns 2014-05-03 15:59 - 2014-05-03 15:59 - 01621480 _____ (Novation ) C:\Users\Ive\Downloads\bassstation-2.0(1).exe 2014-05-03 15:58 - 2014-05-03 15:58 - 01621480 _____ (Novation ) C:\Users\Ive\Downloads\bassstation-2.0.exe 2014-05-03 15:58 - 2014-05-03 14:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Novation 2014-05-03 15:58 - 2014-05-03 14:59 - 00000000 ____D () C:\Program Files (x86)\Novation 2014-05-03 15:01 - 2014-05-03 15:01 - 00000000 ____D () C:\Users\Ive\AppData\Local\Novation 2014-05-03 14:59 - 2014-05-03 14:59 - 00000000 ____D () C:\ProgramData\Propellerhead Software 2014-05-03 14:59 - 2014-05-03 14:59 - 00000000 ____D () C:\Program Files\Novation 2014-05-03 14:58 - 2014-05-03 14:58 - 28130144 _____ (Focusrite Audio Engineering Ltd. ) C:\Users\Ive\Downloads\automap-4.8.exe 2014-05-03 14:21 - 2014-05-03 14:21 - 03491288 _____ (Focusrite ) C:\Users\Ive\Downloads\scarlett-plug-in-suite-1.5.exe 2014-05-03 14:21 - 2014-05-03 14:21 - 00000000 ____D () C:\Program Files (x86)\Focusrite 2014-05-03 14:21 - 2014-05-03 11:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite 2014-05-03 11:38 - 2013-09-29 17:42 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Audacity 2014-05-03 11:11 - 2014-05-03 11:11 - 00000000 ____D () C:\Program Files\DIFX 2014-05-03 11:11 - 2012-02-15 01:14 - 00017758 _____ () C:\Windows\DPINST.LOG 2014-05-03 11:10 - 2014-05-03 11:10 - 00000000 ____D () C:\Program Files\Focusrite 2014-05-03 11:08 - 2014-05-03 11:08 - 00929768 _____ (Focusrite Audio Engineering Limited. ) C:\Users\Ive\Downloads\focusrite-usb-2-driver-2.5.1.exe 2014-05-01 22:00 - 2012-09-23 19:12 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\vlc 2014-05-01 04:00 - 2012-09-18 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-30 12:09 - 2014-04-30 12:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-29 16:01 - 2014-05-03 17:43 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-29 15:40 - 2014-05-03 17:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-29 14:48 - 2014-05-03 17:43 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-29 14:34 - 2014-05-03 17:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-28 20:07 - 2014-04-28 20:07 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-04-28 20:07 - 2012-09-18 18:35 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-28 20:07 - 2012-09-18 18:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-04-28 20:07 - 2011-10-14 06:45 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-27 19:22 - 2011-10-14 06:26 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-04-25 22:06 - 2012-10-16 10:33 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\AIMP3 2014-04-23 13:47 - 2012-02-15 09:55 - 01661644 _____ () C:\Windows\system32\perfh007.dat 2014-04-23 13:47 - 2012-02-15 09:55 - 00457854 _____ () C:\Windows\system32\perfc007.dat 2014-04-23 13:47 - 2009-07-14 07:13 - 00006500 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-22 20:31 - 2014-04-22 20:31 - 00000000 __SHD () C:\Users\Ive\AppData\Local\EmieUserList 2014-04-22 20:31 - 2014-04-22 20:31 - 00000000 __SHD () C:\Users\Ive\AppData\Local\EmieSiteList 2014-04-22 09:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-20 19:25 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-04-17 23:46 - 2014-04-17 21:38 - 00000000 ____D () C:\Program Files\Native Instruments 2014-04-17 23:45 - 2013-01-16 13:11 - 00000000 ____D () C:\Users\Ive\Documents\Native Instruments 2014-04-17 23:45 - 2013-01-16 13:11 - 00000000 ____D () C:\Users\Ive\AppData\Local\Native Instruments 2014-04-17 23:42 - 2014-04-17 23:42 - 00001048 _____ () C:\Users\Public\Desktop\Guitar Rig 5.lnk 2014-04-17 23:42 - 2014-04-17 23:42 - 00000000 __HDC () C:\ProgramData\{B7072B15-6E80-42FF-A9AE-4E62AF2B2418} 2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 __HDC () C:\ProgramData\{95B4F0ED-951F-4D36-B068-5EC1C4C19C14} 2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 __HDC () C:\ProgramData\{30FA7941-4170-4C83-A9A8-FDF01C431704} 2014-04-17 23:41 - 2014-04-17 21:42 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments 2014-04-17 23:41 - 2014-04-17 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2014-04-17 23:36 - 2014-04-17 21:38 - 00000000 ____D () C:\ProgramData\Native Instruments 2014-04-17 23:29 - 2014-04-17 23:29 - 00000000 __HDC () C:\ProgramData\{ACEB5C90-39F7-4044-91EF-FBD59A59D240} 2014-04-17 23:24 - 2014-04-17 23:24 - 00000000 ____D () C:\Users\Ive\Desktop\Native.Instruments.Guitar.Rig.5.Pro+Update v5.1.1.UNLOCKED-R2R 2014-04-17 23:18 - 2014-04-17 22:40 - 00000000 ____D () C:\Users\Public\Documents\Scarbee MM-Bass Library 2014-04-17 23:11 - 2014-04-17 23:11 - 00000000 ____D () C:\Users\Ive\Desktop\DYNAMiCS-WiN 2014-04-17 22:48 - 2014-04-17 22:48 - 00000000 __HDC () C:\ProgramData\{AB38F02B-C891-457C-B8C8-DA9D96EFA317} 2014-04-17 22:48 - 2014-04-17 22:48 - 00000000 __HDC () C:\ProgramData\{27D02406-6F0F-419F-AF2F-A4EE19D2E463} 2014-04-17 22:45 - 2014-04-17 22:45 - 00000000 __HDC () C:\ProgramData\{91377244-4B4E-4A81-9F72-FA41DECB3D8F} 2014-04-17 22:45 - 2014-04-17 22:45 - 00000000 ____D () C:\Users\Public\Documents\Scarbee Vintage Keys Library 2014-04-17 22:45 - 2014-04-17 22:44 - 00000000 ____D () C:\Users\Public\Documents\Upright Piano Library 2014-04-17 22:44 - 2014-04-17 22:44 - 00000000 __HDC () C:\ProgramData\{F2026C51-8509-47B4-816D-CCD2DB993FC1} 2014-04-17 22:40 - 2014-04-17 22:40 - 00000000 __HDC () C:\ProgramData\{DFB8047B-FF22-438D-90BD-83E8B78F83D7} 2014-04-17 22:39 - 2014-04-17 22:39 - 00000000 __HDC () C:\ProgramData\{68233086-CF7D-452D-8519-A7815257EC6B} 2014-04-17 22:39 - 2014-04-17 22:39 - 00000000 ____D () C:\Users\Public\Documents\New York Concert Grand Library 2014-04-17 22:38 - 2014-04-17 22:37 - 00000000 ____D () C:\Users\Public\Documents\Berlin Concert Grand Library 2014-04-17 22:36 - 2014-04-17 22:36 - 00000000 __HDC () C:\ProgramData\{80A0A482-175E-4DE8-9D32-C8C8463D1362} 2014-04-17 22:36 - 2014-04-17 22:34 - 00000000 ____D () C:\Users\Public\Documents\Vintage Organs Library 2014-04-17 22:34 - 2014-04-17 22:33 - 00000000 __HDC () C:\ProgramData\{35B46D49-85E2-40EA-8EC6-43B281EDD8E7} 2014-04-17 22:17 - 2014-04-17 22:16 - 00000000 ____D () C:\Users\Public\Documents\Kontakt Factory Library 2014-04-17 22:16 - 2014-04-17 22:16 - 00000000 __HDC () C:\ProgramData\{E9CDB61C-771D-42BB-B441-4CA7622ACA52} 2014-04-17 22:09 - 2014-04-17 22:04 - 00000000 ____D () C:\Users\Public\Documents\Battery 3 Library 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{CA03436C-933D-4ADA-9E89-2C39CC03E904} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{588D017F-D30B-4C08-8A10-1FEF7D039369} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{0A583E76-A7A0-45F8-9386-AEE1E529A4DE} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\The Finger R2 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\Reflektor Library 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\Reaktor Spark R2 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{DC597CF0-DB39-40C2-9F8C-CF9D0A386548} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{D04E7E60-5F77-4E61-9CD4-7AEC5E15C525} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{B0DF9098-245E-479F-A4ED-B5F91EA4948B} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{6E467D89-1963-440B-84F9-852C8150E323} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{3DFBC806-D62A-4312-81FF-5F343DDCB5DC} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Transient Master 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Traktors 12 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Reaktor Prism 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Rammfire 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Battery Library Importer for Maschine 2014-04-17 22:01 - 2014-04-17 22:01 - 00000000 __HDC () C:\ProgramData\{DE181BBE-2522-484E-A620-BDCFB298DC87} 2014-04-17 21:56 - 2014-04-17 21:56 - 00000000 __HDC () C:\ProgramData\{E26B3878-7CEC-469C-B449-5CAA336DF8CD} 2014-04-17 21:48 - 2014-04-17 21:48 - 00000000 __HDC () C:\ProgramData\{3006A797-CDFA-44FC-98EF-155579E2CDBF} 2014-04-17 21:47 - 2014-04-17 21:47 - 00000000 __HDC () C:\ProgramData\{C2A88E6D-FA3D-462B-BDFF-A09B1EFA8FBE} 2014-04-17 21:22 - 2014-04-17 21:10 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Steinberg 2014-04-17 21:19 - 2014-04-17 21:10 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 5 2014-04-17 21:18 - 2014-04-17 21:18 - 00000000 ____D () C:\ProgramData\VST3 Presets 2014-04-17 21:12 - 2014-04-17 21:12 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg HALionOne 2014-04-17 21:12 - 2014-04-17 21:12 - 00000000 ____D () C:\ProgramData\Steinberg 2014-04-17 21:11 - 2014-04-17 21:11 - 00002134 _____ () C:\Users\Ive\Desktop\Cubase 5.lnk 2014-04-17 21:11 - 2014-04-17 21:10 - 00000000 ____D () C:\Program Files (x86)\Steinberg 2014-04-15 17:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-04-14 20:13 - 2014-05-06 12:57 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-14 20:05 - 2014-05-06 12:57 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-14 20:05 - 2014-05-06 12:57 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-14 20:04 - 2014-05-06 12:57 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-14 04:24 - 2014-05-06 20:22 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-04-14 04:19 - 2014-05-06 20:22 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-04-11 09:45 - 2014-04-11 09:45 - 00005233 _____ () C:\Users\Ive\Downloads\aimpsoundoutbpm.zip 2014-04-10 19:14 - 2014-04-10 19:14 - 00000358 _____ () C:\Users\Ive\Downloads\unbenannt(3) 2014-04-10 17:39 - 2012-10-30 15:06 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-09 20:10 - 2013-12-25 16:31 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\BitTorrent Some content of TEMP: ==================== C:\Users\Ive\AppData\Local\Temp\AskSLib.dll C:\Users\Ive\AppData\Local\Temp\avgnt.exe C:\Users\Ive\AppData\Local\Temp\fp_pl_pfs_installer-1.exe C:\Users\Ive\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Ive\AppData\Local\Temp\icqsetup.exe C:\Users\Ive\AppData\Local\Temp\install_flashplayer11x32_mssa_aih.exe C:\Users\Ive\AppData\Local\Temp\install_reader10_de_mssd_aih.exe C:\Users\Ive\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\nsg3D97.exe C:\Users\Ive\AppData\Local\Temp\nsgE1DC.exe C:\Users\Ive\AppData\Local\Temp\nsqDA7B.exe C:\Users\Ive\AppData\Local\Temp\nsr376F.exe C:\Users\Ive\AppData\Local\Temp\nsw43C0.exe C:\Users\Ive\AppData\Local\Temp\nswD3E6.exe C:\Users\Ive\AppData\Local\Temp\OperaBrowser-17.0.exe C:\Users\Ive\AppData\Local\Temp\plus-hd-2-6.exe C:\Users\Ive\AppData\Local\Temp\SkypeSetup.exe C:\Users\Ive\AppData\Local\Temp\SpotifyUninstall.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.0.5-win32.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.0.7-win32.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.0.8-win32.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.1.1-win32.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.1.3-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-19 12:23 ==================== End Of Log ============================ --- --- --- |
09.05.2014, 08:29 | #2 |
| "Windows Pc-Reparatur" FRST Additions Logfile:
__________________Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-05-2014 02 Ran by Ive at 2014-05-09 09:16:40 Running from C:\Users\Ive\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Ableton Live 9 Lite (HKLM\...\{5E67A0D3-7694-40CA-9F0A-377E26DC0830}) (Version: 9.0.0.0 - Ableton) Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation) Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.) Acer Crystal Eye Webcam (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated) Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3504 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0519.2011 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3500 - Acer Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated) Adobe Reader X (10.1.0) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.0 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.) Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.00.985 - AIMP DevTeam) Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Audacity 2.0.4 (HKLM-x32\...\Audacity_is1) (Version: 2.0.4 - Audacity Team) Automap 4.8 (HKLM\...\Automap Universal_is1) (Version: 4.8 - Focusrite Audio Engineering Ltd.) Automap ReWire 1.0 (HKLM-x32\...\Automap Universal ReWire_is1) (Version: 4.8 - Focusrite Audio Engineering Ltd.) Avira (HKLM-x32\...\{e932572a-a65f-40cb-bdb9-fde856c8b6f5}) (Version: 1.1.12.20001 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.12.20001 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira) Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden Bass Station 2.0 (HKLM-x32\...\{ABAF1232-6213-4062-9D52-04E04A730CEA}_is1) (Version: 2.0 - Novation) Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Bing Bar (HKLM-x32\...\{C28D96C0-6A90-459E-A077-A6706F4EC0FC}) (Version: 7.0.765.0 - Microsoft Corporation) BitTorrent (HKCU\...\BitTorrent) (Version: 7.8.2.30332 - BitTorrent Inc.) Blobby Volley 2 Version 1.0RC3 (HKLM-x32\...\Blobby Volley 2 Version 1.0RC3_is1) (Version: - ) BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.4.3036 - BlueStack Systems, Inc.) BlueStacks Notification Center (HKLM-x32\...\{44181DF6-2751-48C7-B918-72F14508F127}) (Version: 0.8.4.3036 - BlueStack Systems, Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.8.2.2 - Broadcom Corporation) Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.8.4.1 - Broadcom Corporation) CarbonPoker (HKCU\...\CarbonPoker) (Version: 6.0 - ) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.05152 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.05152 - Cisco Systems, Inc.) Hidden clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.) clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden clear.fi (x32 Version: 1.0.2024.00 - CyberLink Corp.) Hidden clear.fi (x32 Version: 9.0.8026 - CyberLink Corp.) Hidden clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated) Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version: - Microsoft) Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc) Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.) eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM) Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.) FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden FileViewPro (HKLM\...\{29938C06-6962-4C27-A94C-25E4F424A665}_is1) (Version: 1.5 - Solvusoft Corporation) Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden Focusrite USB 2.0 Audio Driver 2.5.1 (HKLM\...\Focusrite USB 2.0 Audio Driver_is1) (Version: 2.5.1 - Focusrite Audio Engineering Limited.) Football Manager 2014 (HKLM-x32\...\Rm9vdGJhbGxNYW5hZ2VyMjAxNA==_is1) (Version: 1 - ) Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.) Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Full Tilt Poker (HKLM-x32\...\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}) (Version: 4.65.0.WIN.FullTilt.COM - ) Full Tilt Poker.Eu (HKLM-x32\...\{127BEFB3-24B2-4B44-8E99-AD22C2A5A8ED}) (Version: 4.65.0.WIN.FullTilt.EU - ) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.) GPL Ghostscript (HKLM\...\GPL Ghostscript 9.06) (Version: 9.06 - Artifex Software Inc.) GSview 4.9 (HKLM-x32\...\GSview 4.9) (Version: - ) Guitar Pro 5.0 (HKLM-x32\...\Guitar Pro 5_is1) (Version: - Arobas Music) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated) Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden Intel PROSet Wireless (Version: - ) Hidden Intel PROSet Wireless (x32 Version: - ) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3223 - Intel Corporation) Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{3C41721F-AF0F-4086-AA1C-4C7F29076228}) (Version: 14.01.1000 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel(R) WiDi (HKLM-x32\...\{781A93CD-1608-427D-B7F0-D05C07795B25}) (Version: 2.1.41.0 - Intel Corporation) Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version: - ) iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.) JabRef 2.8.1 (HKLM-x32\...\JabRef 2.8.1) (Version: 2.8.1 - JabRef Team) JabRef 2.9.2 (HKLM-x32\...\JabRef 2.9.2) (Version: 2.9.2 - JabRef Team) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.) Little Fighter 2 version 2.0a (HKLM-x32\...\Little Fighter 2) (Version: version 2.0a - ) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.58 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.58 - LogMeIn, Inc.) Hidden LyX 2.0.5.1 (HKLM\...\LyX2051) (Version: 2.0.5.1 - LyX Team) Magic Workstation 0.94f (HKLM-x32\...\Magic Workstation_is1) (Version: - Magic Technology) MATLAB R2013b (HKLM\...\Matlab R2013b) (Version: 8.2 - The MathWorks, Inc.) MATLAB Student R2009a (HKLM-x32\...\MatlabR2009a) (Version: 7.8 - The MathWorks, Inc.) Maxima 5.28.0-2 (HKLM-x32\...\Maxima-5.28.0-2_is1) (Version: 5.28.0-2 - The Maxima Development Team) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MiKTeX 2.9 (HKLM-x32\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org) Mozilla Firefox 29.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0 (x86 de)) (Version: 29.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version: - Native Instruments) Native Instruments Absynth 5 (Version: 5.1.0.1013 - Native Instruments) Hidden Native Instruments Battery 3 (HKLM-x32\...\Native Instruments Battery 3) (Version: - Native Instruments) Native Instruments Battery 3 (Version: 3.2.2.633 - Native Instruments) Hidden Native Instruments Battery Library Importer for Maschine (HKLM-x32\...\Native Instruments Battery Library Importer for Maschine) (Version: - Native Instruments) Native Instruments Battery Library Importer for Maschine (Version: 1.0.0.003 - Native Instruments) Hidden Native Instruments Berlin Concert Grand (HKLM-x32\...\Native Instruments Berlin Concert Grand) (Version: - Native Instruments) Native Instruments Berlin Concert Grand (Version: 1.3.0.004 - Native Instruments) Hidden Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: - Native Instruments) Native Instruments Controller Editor (Version: 1.5.1.1124 - Native Instruments) Hidden Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: - Native Instruments) Native Instruments FM8 (Version: 1.2.0.1016 - Native Instruments) Hidden Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: - Native Instruments) Native Instruments Guitar Rig 5 (Version: 5.1.1.2673 - Native Instruments) Hidden Native Instruments Komplete 8 (HKLM-x32\...\Native Instruments Komplete 8) (Version: - Native Instruments) Native Instruments Komplete 8 (Version: 8.0.0.001 - Native Instruments) Hidden Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.2.1.6382 - Native Instruments) Native Instruments Kontakt 5 (Version: 5.2.1.6382 - Native Instruments) Hidden Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: - Native Instruments) Native Instruments Kontakt Factory Library (Version: 1.0.0.004 - Native Instruments) Hidden Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: - Native Instruments) Native Instruments Massive (Version: 1.3.0.2050 - Native Instruments) Hidden Native Instruments New York Concert Grand (HKLM-x32\...\Native Instruments New York Concert Grand) (Version: - Native Instruments) Native Instruments New York Concert Grand (Version: 1.3.0.004 - Native Instruments) Hidden Native Instruments Rammfire (HKLM-x32\...\Native Instruments Rammfire) (Version: - Native Instruments) Native Instruments Rammfire (Version: 1.1.0.003 - Native Instruments) Hidden Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: - Native Instruments) Native Instruments Reaktor 5 (Version: 5.6.1.11150 - Native Instruments) Hidden Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: - Native Instruments) Native Instruments Reaktor Prism (Version: 1.2.0.005 - Native Instruments) Hidden Native Instruments Reaktor Spark R2 (HKLM-x32\...\Native Instruments Reaktor Spark R2) (Version: - Native Instruments) Native Instruments Reaktor Spark R2 (Version: 1.1.0.004 - Native Instruments) Hidden Native Instruments Reflektor (HKLM-x32\...\Native Instruments Reflektor) (Version: - Native Instruments) Native Instruments Reflektor (Version: 1.2.0.003 - Native Instruments) Hidden Native Instruments Scarbee MM-Bass (HKLM-x32\...\Native Instruments Scarbee MM-Bass) (Version: - Native Instruments) Native Instruments Scarbee MM-Bass (Version: 1.2.0.006 - Native Instruments) Hidden Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: - Native Instruments) Native Instruments Scarbee Vintage Keys (Version: 1.1.0.002 - Native Instruments) Hidden Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: - Native Instruments) Native Instruments Service Center (Version: 2.3.2.926 - Native Instruments) Hidden Native Instruments The Finger R2 (HKLM-x32\...\Native Instruments The Finger R2) (Version: - Native Instruments) Native Instruments The Finger R2 (Version: 1.1.0.004 - Native Instruments) Hidden Native Instruments Traktors 12 (HKLM-x32\...\Native Instruments Traktors 12) (Version: - Native Instruments) Native Instruments Traktors 12 (Version: 1.1.0.002 - Native Instruments) Hidden Native Instruments Transient Master (HKLM-x32\...\Native Instruments Transient Master) (Version: - Native Instruments) Native Instruments Transient Master (Version: 1.0.0.004 - Native Instruments) Hidden Native Instruments Upright Piano (HKLM-x32\...\Native Instruments Upright Piano) (Version: - Native Instruments) Native Instruments Upright Piano (Version: 1.3.0.004 - Native Instruments) Hidden Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: - Native Instruments) Native Instruments Vintage Organs (Version: 1.1.0.007 - Native Instruments) Hidden newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.) newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) Novation USB Audio Driver 2.6b3 (HKLM\...\Novation USB Audio Driver_is1) (Version: 2.6b3 - Novation DMS Ltd.) NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation) NTI Media Maker 9 (x32 Version: 9.0.2.9002 - NTI Corporation) Hidden NVIDIA Grafiktreiber 285.64 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 285.64 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.46.235 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.5.20 (Version: 1.5.20 - NVIDIA Corporation) Hidden NVIDIA PhysX (HKLM-x32\...\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}) (Version: 9.10.0514 - NVIDIA Corporation) NVIDIA Systemsteuerung 285.64 (Version: 285.64 - NVIDIA Corporation) Hidden NVIDIA Update Components (Version: 1.5.20 - NVIDIA Corporation) Hidden Opera Stable 21.0.1432.57 (HKLM-x32\...\Opera 21.0.1432.57) (Version: 21.0.1432.57 - Opera Software ASA) PDF Blender (HKLM-x32\...\PDF Blender) (Version: - ) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.5.0 - Frank Heindörfer, Philip Chinery) Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden PokerStars.es (HKLM-x32\...\PokerStars.es) (Version: - PokerStars.es) PokerTracker 4 (remove only) (HKLM-x32\...\PokerTracker4) (Version: - ) Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden PostgreSQL 9.0 (HKLM\...\PostgreSQL 9.0) (Version: 9.0 - PostgreSQL Global Development Group) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) R for Windows 3.0.0 (HKLM\...\R for Windows 3.0.0_is1) (Version: 3.0.0 - R Core Team) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden RStudio (HKLM-x32\...\RStudio) (Version: 0.97.336 - RStudio) Scarlett Plug-in Suite 1.5 (HKLM-x32\...\{D7F912D4-C237-4079-966A-5044A5025CBF}}_is1) (Version: 1.5 - Focusrite) ScummVM 1.6.0 (HKLM-x32\...\ScummVM_is1) (Version: - The ScummVM Team) Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.12.20.154 - Conduit) <==== ATTENTION SecureW2 3.5.8 - Universidad de Malaga JUN-2012 (HKLM-x32\...\{1DE2619D-6636-48AA-B08D-7F8A0BA4924D}) (Version: 3.5.8 - SecureW2) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation) Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden SopCast 3.5.0 (HKLM-x32\...\SopCast) (Version: 3.5.0 - www.sopcast.com) SplitCam (HKLM-x32\...\SplitCam) (Version: 5.15.4.1 - SplitCam Co) Steinberg Cubase 5 (HKLM-x32\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.0 - Steinberg Media Technologies GmbH) Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 1.0.0.1 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg HALionOne (HKLM-x32\...\{E70E7159-93B1-470D-9FBD-D8E9EF34B538}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Additional Content Set 01 (HKLM-x32\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH) Steinberg HALionOne Expression Set (HKLM-x32\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Drum Set (HKLM-x32\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne GM Set (HKLM-x32\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Pro Set (HKLM-x32\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Drum Set (HKLM-x32\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg HALionOne Studio Set (HKLM-x32\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 1.0.0.005 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 1.0.0.006 - Steinberg Media Technologies GmbH) Stronghold Crusader (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: - ) Stronghold Crusader Demo (HKLM-x32\...\{BDC96E64-A010-4341-A072-47EFDBD6CFBA}) (Version: - ) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.6.0 - Synaptics Incorporated) Texmaker (HKLM-x32\...\Texmaker) (Version: - ) TeXnicCenter Version 2.0 Beta 1 (HKLM\...\TeXnicCenter_is1) (Version: 2.0 Beta 1 - The TeXnicCenter Team) Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN) Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated) WildTangent Games App (Acer Games) (x32 Version: 4.0.5.14 - WildTangent) Hidden WinDjView 2.0.2 (HKLM\...\WinDjView) (Version: 2.0.2 - Andrew Zhezherun) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows-Treiberpaket - Focusrite USB 2.0 Audio Driver (09/25/2013 2.5.128.1) (HKLM\...\CF1FC201D237269A9CD51A3A6B14ADBF67175C32) (Version: 09/25/2013 2.5.128.1 - Focusrite) WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Xming 6.9.0.31 (HKLM-x32\...\Xming_is1) (Version: 6.9.0.31 - Colin Harrison) YTD Video Downloader 3.9.6 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 3.9.6 - GreenTree Applications SRL) <==== ATTENTION Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 06-05-2014 10:56:05 Installed Java 7 Update 55 06-05-2014 22:19:10 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-05-08 10:06 - 00000977 ____A C:\Windows\system32\Drivers\etc\hosts 193.197.62.198 vpn.uni-ulm.de ###Cisco AnyConnect VPN client modified this file. Please do not modify contents until this comment is removed. ==================== Scheduled Tasks (whitelisted) ============= Task: {190B4825-585C-4C58-8B70-5783BEC0240A} - System32\Tasks\MATLAB R2013b Startup Accelerator => C:\Program Files\Matlab\bin\win64\MATLABStartupAccelerator.exe [2013-08-05] () Task: {30607DA1-3DC4-40C0-A6AD-C1EB3668C6E1} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-08-24] (CyberLink) Task: {A21BBC9B-E66D-4512-8B19-D481C63A2FC8} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-08-24] (CyberLink Corp.) Task: {A6252E71-1207-4B92-97B9-4EA8A0E8EC2C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {BF993974-B51F-4618-9E00-2CA4255AE967} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001UA => C:\Users\Ive\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18] (Google Inc.) Task: {DB099919-CFCF-4D7B-8D05-5316DD32FFAA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-28] (Adobe Systems Incorporated) Task: {E0280380-86AB-416E-B9E1-7AD03359C8EB} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-08-24] (Acer Incorporated) Task: {F3AB47F8-BB75-4FC6-9E76-5550E8283934} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001Core => C:\Users\Ive\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001Core.job => C:\Users\Ive\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001UA.job => C:\Users\Ive\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\MATLAB R2013b Startup Accelerator.job => C:\Program Files\Matlab\bin\win64\MATLABStartupAccelerator.exe ==================== Loaded Modules (whitelisted) ============= 2011-05-02 14:41 - 2011-05-02 14:41 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll 2011-05-02 14:41 - 2011-05-02 14:41 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll 2011-10-14 06:59 - 2011-06-10 19:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-01-30 14:31 - 2012-09-21 09:55 - 00217600 _____ () C:\Program Files (x86)\PostgreSQL\9.0\bin\LIBPQ.dll 2013-01-30 14:32 - 2012-08-14 14:02 - 02258432 _____ () C:\Program Files (x86)\PostgreSQL\9.0\bin\libxml2.dll 2013-12-13 00:36 - 2013-12-13 00:36 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-05-07 11:02 - 2014-05-06 19:49 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Ive\AppData\Roaming\Dropbox\bin\libcef.dll 2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll 2011-08-24 19:03 - 2011-08-24 19:03 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll 2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll 2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll 2014-04-30 11:38 - 2014-04-30 11:38 - 00138320 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll 2014-05-07 11:03 - 2014-04-30 11:38 - 00049744 _____ () C:\Users\Ive\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll 2013-10-23 10:11 - 2013-10-23 10:11 - 00114336 _____ () C:\Program Files (x86)\SplitCam\splitcam_hd_driver_ProxyPlugin.ax 2014-04-30 11:38 - 2014-04-30 11:38 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll 2014-04-30 12:09 - 2014-04-30 12:09 - 03845232 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-02-14 13:29 - 2014-02-14 13:29 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\ae685719bd599604bdf031cdad0ba38a\IsdiInterop.ni.dll 2011-10-14 06:13 - 2011-04-30 09:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2014-04-28 20:07 - 2014-04-28 20:07 - 16351920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:373E1720 ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Hamachi Network Interface Description: Hamachi Network Interface Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: LogMeIn, Inc. Service: hamachi Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (05/09/2014 08:38:07 AM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/08/2014 10:06:36 AM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/07/2014 08:01:16 PM) (Source: Application Error) (User: ) (EventID: 1000) Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: stobject.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c9c9 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000002c68 ID des fehlerhaften Prozesses: 0x890 Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0 Pfad der fehlerhaften Anwendung: Explorer.EXE1 Pfad des fehlerhaften Moduls: Explorer.EXE2 Berichtskennung: Explorer.EXE3 Error: (05/07/2014 07:59:21 PM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/07/2014 06:33:01 PM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/07/2014 06:31:10 PM) (Source: Application Hang) (User: ) (EventID: 1002) Description: Programm vpnui.exe, Version 3.1.5152.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: f1c Startzeit: 01cf6a110bec247d Endzeit: 0 Anwendungspfad: C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe Berichts-ID: fc9bab79-d604-11e3-8194-dc0ea1583a4a Error: (05/07/2014 06:27:27 PM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/07/2014 10:53:17 AM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/06/2014 06:16:17 PM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/06/2014 01:19:10 PM) (Source: Application Error) (User: ) (EventID: 1000) Description: Name der fehlerhaften Anwendung: DMREngine.exe, Version: 1.1.0.3904, Zeitstempel: 0x4d709ab4 Name des fehlerhaften Moduls: CLNetMediaDMA.dll, Version: 1.1.0.3904, Zeitstempel: 0x4d709aa8 Ausnahmecode: 0xc0000094 Fehleroffset: 0x00014102 ID des fehlerhaften Prozesses: 0xd60 Startzeit der fehlerhaften Anwendung: 0xDMREngine.exe0 Pfad der fehlerhaften Anwendung: DMREngine.exe1 Pfad des fehlerhaften Moduls: DMREngine.exe2 Berichtskennung: DMREngine.exe3 System errors: ============= Error: (05/09/2014 08:38:09 AM) (Source: Service Control Manager) (User: ) (EventID: 7000) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/09/2014 08:38:09 AM) (Source: Service Control Manager) (User: ) (EventID: 7009) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (05/08/2014 10:06:39 AM) (Source: Service Control Manager) (User: ) (EventID: 7000) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/08/2014 10:06:39 AM) (Source: Service Control Manager) (User: ) (EventID: 7009) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (05/07/2014 08:00:51 PM) (Source: Service Control Manager) (User: ) (EventID: 7000) Description: Der Dienst "Client Virtualization Handler" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/07/2014 08:00:51 PM) (Source: Service Control Manager) (User: ) (EventID: 7009) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Client Virtualization Handler erreicht. Error: (05/07/2014 07:59:54 PM) (Source: Service Control Manager) (User: ) (EventID: 7009) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht. Error: (05/07/2014 07:59:23 PM) (Source: Service Control Manager) (User: ) (EventID: 7000) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/07/2014 07:59:23 PM) (Source: Service Control Manager) (User: ) (EventID: 7009) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (05/07/2014 07:58:16 PM) (Source: Service Control Manager) (User: ) (EventID: 7000) Description: Der Dienst "Skype Click to Call Updater" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (05/09/2014 08:38:07 AM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/08/2014 10:06:36 AM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/07/2014 08:01:16 PM) (Source: Application Error) (User: ) (EventID: 1000) Description: Explorer.EXE6.1.7601.175674d672ee4stobject.dll6.1.7601.175144ce7c9c9c00000050000000000002c6889001cf6a1dc3f9aac9C:\Windows\Explorer.EXEC:\Windows\system32\stobject.dll94cc329b-d611-11e3-8b4d-dc0ea1583a4a Error: (05/07/2014 07:59:21 PM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/07/2014 06:33:01 PM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/07/2014 06:31:10 PM) (Source: Application Hang) (User: ) (EventID: 1002) Description: vpnui.exe3.1.5152.0f1c01cf6a110bec247d0C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exefc9bab79-d604-11e3-8194-dc0ea1583a4a Error: (05/07/2014 06:27:27 PM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/07/2014 10:53:17 AM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/06/2014 06:16:17 PM) (Source: WinMgmt) (User: ) (EventID: 10) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/06/2014 01:19:10 PM) (Source: Application Error) (User: ) (EventID: 1000) Description: DMREngine.exe1.1.0.39044d709ab4CLNetMediaDMA.dll1.1.0.39044d709aa8c000009400014102d6001cf6911d82ced32C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exeC:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll3e64fb33-d510-11e3-9dc9-dc0ea1583a4a ==================== Memory info =========================== Percentage of memory in use: 45% Total physical RAM: 8043.86 MB Available physical RAM: 4413.38 MB Total Pagefile: 16085.9 MB Available Pagefile: 10638.42 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:228.01 GB) (Free:41.8 GB) NTFS Drive e: (NIGR5PRO511) (CDROM) (Total:0.69 GB) (Free:0 GB) CDFS Drive f: (Volume) (Fixed) (Total:222.66 GB) (Free:46.61 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0F635FE6) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=228 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=223 GB) - (Type=OF Extended) ==================== End Of Log ============================ |
09.05.2014, 08:42 | #3 |
/// TB-Ausbilder | "Windows Pc-Reparatur"Mein Name ist Timo und ich werde Dir bei deinem Problem behilflich sein.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist. Wichtig: |
09.05.2014, 10:33 | #4 | |
/// TB-Ausbilder | "Windows Pc-Reparatur"Zitat:
Die von mir gelisteten Einträge deuten stark darauf hin, dass auf diesem Rechner Software benutzt wird, die nicht legal erworben wurde. Supportunterbrechung Lesestoff: Das Thema wird erst nach Entfernung fortgeführt. Cracks und Keygens Den Kopierschutz von Software zu umgehen ist nach geltendem Recht illegal. Die Logfiles deuten stark darauf hin, dass du nicht legal erworbene Software einsetzt. Zudem sind Cracks und Patches aus dubioser Quelle sehr oft mit Schädlingen versehen, womit man sich also fast vorsätzlich infiziert. Wir haben uns hier auf dem Board darauf geeinigt, dass wir an dieser Stelle nicht weiter bereinigen, da wir ein solches Vorgehen nicht unterstützen. Hinzu kommt, dass wir dich in unserer Anleitung und auch in diesem Wichtig-Thema unmissverständlich darauf hingewiesen haben, wie wir damit umgehen werden. Saubere, gute Software hat seinen Preis und die Softwarefirmen leben von diesen Einnahmen. Unsere Hilfe beschränkt sich daher nur auf das Neuaufsetzen und Absichern deines Systems. Fragen dazu beantworten wir dir aber weiterhin gerne und zwar in unserem Forum. |
11.05.2014, 11:23 | #5 |
/// TB-Ausbilder | "Windows Pc-Reparatur" Hallo, ich habe von dir keine Antwort auf meinen letzten Post erhalten, benötigst Du noch weiterhin Hilfe? Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten. |
Themen zu "Windows Pc-Reparatur" |
ads, antwort, banner, bingbar, bluestacks, brauch, browser, dasselbe, dateien, fehler, folge, forum, hallo zusammen, klick, langsamer, launch, meldung, msiexec.exe, popup, posten, problem, recovery, scan, seite, spark, thread, tool, tracking, windows, wscript.exe, zusammen |