| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Keylogger oder etwas Anderes 2.0Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
15.06.2014, 13:38
| #1 |
| |  Keylogger oder etwas Anderes 2.0 Ich konnte irgendwie meinen alten Trojaner Board Account nicht mehr zurücksetzen wegen dem Passwort Recovery. Sorry deswegen. Hab mir dummerweiße ein Programm von Elitepvpers herruntergeladen das trusted aussah aber doch nicht so war. Aufjedenfall beim League of Legends spielen schloss sich mein Spiel einfach und ich wurde gezwungen mich noch einmal anzumelden. Alles ging wunderbar und ich spielte das Spiel zu ende. Als ich das Spiel dann schloss und wieder anmachte war das Passwort und die Email Adresse geändert. Ich hab das Programm sofort gelöscht. Als ich daraufhin beim Antivirencheck war poppte eine Anwendung namens Chat und da hat mich der nette Hacker nach Bitcoins gefragt für mein Passwort. Ich hab daraufhin den PC vom Internet getrennt und tippe das gerade am Laptop. Der Antivirencheck (Avira) hat nichts ergeben. Sollte ich jetzt meine Festplatte formatieren oder irgendein bestimmtes Programm drüber laufen lassen. Der Downloadlink zum Programm: hxxp://sharesend.com/du4ti08a Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02
Ran by Name (administrator) on NAME-PC on 15-06-2014 13:34:13
Running from C:\Users\Name\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
() C:\Windows\System32\PnkBstrA.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-11] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Winlogon] => C:\Users\Name\AppData\Roaming\winlogon.exe [679936 2014-06-14] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-38518460-617553831-2217780685-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-38518460-617553831-2217780685-1000\...\Run: [Winlogon] => C:\Users\Name\AppData\Roaming\winlogon.exe [679936 2014-06-14] ()
==================== Internet (Whitelisted) ====================
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: FRITZ!Box Addon BHO - {C0C86BBE-9509-4296-8459-FDBFDAF4B673} - C:\Program Files\FRITZ!Box\AddOn (IE)\FBoxIESplitButton.dll (AVM Berlin)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Name\AppData\Roaming\Mozilla\Firefox\Profiles\j0scgiqr.default
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
Chrome:
=======
CHR HomePage: hxxp://www.trovi.com/?a=hp
CHR StartupUrls: "hxxp://google.de/"
CHR Extension: (Google Docs) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-08]
CHR Extension: (Google Drive) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-08]
CHR Extension: (YouTube) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-08]
CHR Extension: (Google-Suche) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-08]
CHR Extension: (AdBlock) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-08]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2014-03-08]
CHR Extension: (Google Wallet) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-08]
CHR Extension: (YouTube Unblocker) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-05-11]
CHR Extension: (Google Mail) - C:\Users\Name\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-08]
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-09-11] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3647992 2014-05-14] (devolo AG)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-05-15] ()
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [42240 2013-07-31] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-06-09] (Disc Soft Ltd)
R3 Lycosa; C:\Windows\System32\drivers\Lycosa.sys [18816 2008-01-17] (Razer USA Ltd.)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-03-04] (CACE Technologies)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-15 13:34 - 2014-06-15 13:34 - 00009532 _____ () C:\Users\Name\Desktop\FRST.txt
2014-06-15 13:34 - 2014-06-15 13:34 - 00000000 ____D () C:\FRST
2014-06-15 13:33 - 2014-06-15 13:33 - 02081792 _____ (Farbar) C:\Users\Name\Desktop\FRST64.exe
2014-06-15 13:29 - 2014-06-15 13:29 - 00000000 _____ () C:\Users\Name\Desktop\Neues Textdokument.txt
2014-06-14 22:42 - 2014-06-14 22:42 - 00961360 _____ (Chip Digital GmbH) C:\Users\Name\Desktop\Emsisoft Anti Malware - CHIP-Installer.exe
2014-06-14 18:41 - 2014-06-14 18:40 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-14 18:40 - 2014-06-14 18:40 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Avira
2014-06-14 18:39 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-14 18:39 - 2014-05-09 11:16 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-14 18:39 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-14 18:38 - 2014-06-14 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-14 18:38 - 2014-06-14 18:38 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\Name\Desktop\avira_de_av_4018660801__ws.exe
2014-06-14 18:38 - 2014-06-14 18:38 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-14 17:40 - 2014-06-14 17:40 - 00000000 ____D () C:\Users\Name\AppData\Local\kJKxc2SrE2J0FNouaB
2014-06-14 17:39 - 2014-06-14 17:24 - 00679936 _____ () C:\Users\Name\AppData\Roaming\winlogon.exe
2014-06-13 13:51 - 2014-06-13 13:51 - 00275512 _____ () C:\Windows\Minidump\061314-16426-01.dmp
2014-06-11 12:42 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 12:42 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 12:42 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 12:42 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 12:42 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-11 12:42 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 12:42 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 12:42 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 12:42 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 12:42 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 12:42 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 12:42 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 12:42 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 12:42 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 12:42 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-11 12:42 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 12:42 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 12:42 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-11 12:42 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-11 12:42 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 12:42 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 12:42 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-11 12:42 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 12:42 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 12:42 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 12:42 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 12:42 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 12:42 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 12:42 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 12:42 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-11 12:42 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 12:42 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 12:42 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 12:42 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-11 12:42 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 12:42 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 12:42 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-11 12:42 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 12:42 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 12:42 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 12:42 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 12:42 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 12:42 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 12:42 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-11 12:42 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 12:42 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 12:42 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 12:42 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 12:42 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 12:42 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 12:42 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 12:42 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-11 12:42 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 12:42 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-11 12:42 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 12:42 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-11 12:42 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 12:42 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 12:42 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 12:42 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 12:42 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-11 12:42 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-11 12:42 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-11 12:42 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 12:42 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-11 12:42 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-11 12:41 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-11 12:41 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-10 01:45 - 2014-06-10 01:54 - 00000000 ____D () C:\Users\Name\Desktop\Neuer Ordner (2)
2014-06-10 01:09 - 2014-06-10 18:41 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-06-10 01:09 - 2014-06-10 01:39 - 00001162 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-06-10 01:09 - 2014-06-10 01:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-06-09 23:25 - 2014-06-09 23:25 - 00000000 ____D () C:\ProgramData\Battle.net
2014-06-09 21:49 - 2014-06-09 21:49 - 00001155 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-09 21:49 - 2014-06-09 21:49 - 00001143 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-09 21:49 - 2014-06-09 21:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-09 21:49 - 2014-06-09 21:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-09 21:14 - 2014-06-09 21:14 - 00003112 _____ () C:\Windows\System32\Tasks\{0AB881DA-6013-4775-B51D-81DE9859ED23}
2014-06-09 21:14 - 2014-06-09 21:14 - 00000000 ____D () C:\ProgramData\Blizzard
2014-06-09 21:13 - 2014-06-09 21:13 - 00000000 ____D () C:\Users\Public\Documents\Blizzard Entertainment
2014-06-09 20:57 - 2014-06-09 20:59 - 00000000 ____D () C:\Users\Name\AppData\Local\Skyrim
2014-06-09 20:57 - 2014-06-09 20:57 - 00000000 ____D () C:\Users\Name\Documents\My Games
2014-06-09 20:56 - 2014-06-09 20:56 - 00002418 _____ () C:\Users\Name\Desktop\The Elder Scrolls V Skyrim - Legendary Edition (Launcher).lnk
2014-06-09 20:46 - 2014-06-09 20:56 - 00000000 ____D () C:\Program Files (x86)\The Elder Scrolls V Skyrim - Legendary Edition (Game of the Year)
2014-06-09 20:18 - 2014-06-09 20:18 - 00275512 _____ () C:\Windows\Minidump\060914-26426-01.dmp
2014-06-09 20:09 - 2014-06-09 20:09 - 00000000 ____D () C:\Users\Name\AppData\Roaming\WinRAR
2014-06-09 20:09 - 2014-06-09 20:09 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-09 20:09 - 2014-06-09 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-09 20:09 - 2014-06-09 20:09 - 00000000 ____D () C:\Program Files\WinRAR
2014-06-09 20:05 - 2014-06-09 20:20 - 00000000 ____D () C:\Users\Name\Desktop\Neuer Ordner
2014-06-09 19:05 - 2014-06-09 19:05 - 00001946 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-06-09 19:05 - 2014-06-09 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-06-09 19:04 - 2014-06-09 19:05 - 00000000 ____D () C:\Users\Name\AppData\Roaming\DAEMON Tools Lite
2014-06-09 19:04 - 2014-06-09 19:05 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-06-09 19:04 - 2014-06-09 19:04 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-06-09 19:04 - 2014-06-09 19:04 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-06-09 18:09 - 2014-06-09 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911
2014-06-09 18:04 - 2014-06-09 18:07 - 00000000 ____D () C:\Program Files (x86)\The Elder Scrolls V Skyrim
2014-06-09 17:25 - 2014-06-09 19:21 - 00000000 ____D () C:\Users\Name\Downloads\rzr-skrm
2014-06-09 17:21 - 2014-06-09 17:21 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes
2014-06-09 16:40 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-09 16:39 - 2014-06-14 22:46 - 00000000 ____D () C:\AdwCleaner
2014-06-09 16:39 - 2014-06-09 16:39 - 00961360 _____ (Chip Digital GmbH) C:\Users\Name\Desktop\AdwCleaner - CHIP-Installer.exe
2014-06-09 16:35 - 2014-06-11 13:34 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-09 16:35 - 2014-06-09 16:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-09 16:25 - 2014-06-14 19:46 - 00000000 ____D () C:\Users\Name\AppData\Roaming\uTorrent
2014-06-09 16:25 - 2014-06-09 16:25 - 01671504 _____ (BitTorrent Inc.) C:\Users\Name\Downloads\uTorrent_v.3.4.2_31515.exe
2014-06-09 16:24 - 2014-06-09 16:24 - 00006641 _____ () C:\Users\Name\Downloads\The_Elder_Scrolls_V_Skyrim.7031509.TPB.torrent
2014-06-05 23:46 - 2014-06-06 00:47 - 00000000 ____D () C:\Users\Name\AppData\Roaming\SleepTimerUltimate
2014-06-05 23:46 - 2014-06-05 23:46 - 00922840 _____ (Christian Handorf ) C:\Users\Name\Downloads\setup_sleeptimer.exe
2014-06-05 23:46 - 2014-06-05 23:46 - 00001130 _____ () C:\Users\Public\Desktop\SleepTimer Ultimate.lnk
2014-06-05 23:46 - 2014-06-05 23:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SleepTimer Ultimate
2014-06-05 23:46 - 2014-06-05 23:46 - 00000000 ____D () C:\Program Files (x86)\SleepTimer Ultimate
2014-06-03 18:05 - 2014-06-03 18:05 - 00000000 ____D () C:\Users\Name\AppData\Local\Adobe
2014-06-02 22:35 - 2014-06-02 22:35 - 00005933 _____ () C:\Users\Name\Downloads\LOL_OPGG_Observer_1461786040.bat
2014-06-02 22:11 - 2014-06-14 23:17 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-02 22:11 - 2014-06-02 22:11 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-02 22:11 - 2014-06-02 22:11 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-02 22:11 - 2014-06-02 22:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-06-02 22:11 - 2014-06-02 22:11 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-06-02 22:11 - 2014-06-02 22:11 - 00000000 ____D () C:\Windows\system32\Macromed
2014-06-02 15:25 - 2014-06-02 15:25 - 00961360 _____ (Chip Digital GmbH) C:\Users\Name\Downloads\Open Broadcaster Software - CHIP-Installer.exe
2014-06-02 15:25 - 2014-06-02 15:25 - 00000931 _____ () C:\Users\Name\Desktop\Open Broadcaster Software.lnk
2014-06-02 15:25 - 2014-06-02 15:25 - 00000000 ____D () C:\Users\Name\AppData\Roaming\OBS
2014-06-02 15:25 - 2014-06-02 15:25 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-06-02 15:25 - 2014-06-02 15:25 - 00000000 ____D () C:\Program Files\OBS
2014-06-02 15:25 - 2014-06-02 15:25 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-06-02 14:00 - 2014-06-02 14:00 - 00002972 _____ () C:\Windows\avmadd32.log
2014-06-02 14:00 - 2014-06-02 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!Box
2014-06-02 14:00 - 2014-06-02 14:00 - 00000000 ____D () C:\Program Files (x86)\FRITZ!Box
2014-06-02 14:00 - 2006-12-14 14:42 - 00069120 ____R (AVM Berlin) C:\Windows\SysWOW64\avmadd32.dll
2014-06-02 13:44 - 2014-06-02 13:44 - 02960288 _____ () C:\Users\Name\Downloads\FRITZ!BoxAddOnIE64_German.exe
2014-06-02 13:44 - 2014-06-02 13:44 - 00000000 ____D () C:\Program Files\FRITZ!Box
2014-06-02 13:41 - 2014-06-02 13:41 - 00961360 _____ (Chip Digital GmbH) C:\Users\Name\Downloads\Linux Mint Qiana Cinnamon 32 Bit - CHIP-Installer.exe
2014-06-02 13:29 - 2014-06-02 13:29 - 00002099 _____ () C:\Users\Public\Desktop\devolo Cockpit.lnk
2014-06-02 13:29 - 2014-06-02 13:29 - 00000000 ____D () C:\Users\Name\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-06-02 13:29 - 2014-06-02 13:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-06-02 13:29 - 2014-06-02 13:29 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-06-02 13:28 - 2014-06-02 13:29 - 23128568 _____ (devolo AG) C:\Users\Name\Downloads\software-devolo-cockpit-windows-v4-2-2.exe
2014-05-28 18:47 - 2014-05-28 18:47 - 00022600 _____ () C:\Users\Name\Downloads\Bestellung.html
2014-05-28 18:06 - 2014-05-28 18:06 - 02247960 _____ () C:\Users\Name\Downloads\battlelog-web-plugins_2.4.0_141.exe
2014-05-25 12:12 - 2014-05-25 12:13 - 04709126 _____ () C:\Users\Name\Downloads\linie41aushangfahrplanab15.12..pdf.part
2014-05-25 12:03 - 2014-05-25 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-05-25 12:02 - 2014-05-25 12:02 - 00918672 _____ (Google Inc.) C:\Users\Name\Downloads\GoogleEarthSetup.exe
2014-05-25 12:02 - 2014-05-25 12:02 - 00918672 _____ (Google Inc.) C:\Users\Name\Downloads\GoogleEarthSetup (1).exe
==================== One Month Modified Files and Folders =======
2014-06-15 13:34 - 2014-06-15 13:34 - 00009532 _____ () C:\Users\Name\Desktop\FRST.txt
2014-06-15 13:34 - 2014-06-15 13:34 - 00000000 ____D () C:\FRST
2014-06-15 13:34 - 2014-03-05 11:38 - 00000000 ____D () C:\Users\Name\AppData\Local\Temp
2014-06-15 13:33 - 2014-06-15 13:33 - 02081792 _____ (Farbar) C:\Users\Name\Desktop\FRST64.exe
2014-06-15 13:33 - 2011-04-12 09:43 - 00699092 _____ () C:\Windows\system32\perfh007.dat
2014-06-15 13:33 - 2011-04-12 09:43 - 00149232 _____ () C:\Windows\system32\perfc007.dat
2014-06-15 13:33 - 2009-07-14 07:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-15 13:31 - 2014-03-08 14:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-15 13:29 - 2014-06-15 13:29 - 00000000 _____ () C:\Users\Name\Desktop\Neues Textdokument.txt
2014-06-15 13:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-15 13:27 - 2014-03-08 14:10 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-15 13:27 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-15 13:27 - 2009-07-14 06:51 - 00034942 _____ () C:\Windows\setupact.log
2014-06-14 23:32 - 2014-03-05 11:38 - 01145102 _____ () C:\Windows\WindowsUpdate.log
2014-06-14 23:17 - 2014-06-02 22:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-14 22:55 - 2009-07-14 06:45 - 00028320 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-14 22:55 - 2009-07-14 06:45 - 00028320 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-14 22:47 - 2010-11-21 05:47 - 00624920 _____ () C:\Windows\PFRO.log
2014-06-14 22:46 - 2014-06-09 16:39 - 00000000 ____D () C:\AdwCleaner
2014-06-14 22:42 - 2014-06-14 22:42 - 00961360 _____ (Chip Digital GmbH) C:\Users\Name\Desktop\Emsisoft Anti Malware - CHIP-Installer.exe
2014-06-14 20:20 - 2014-03-08 14:30 - 00000000 ____D () C:\Users\Name\AppData\Roaming\TS3Client
2014-06-14 19:46 - 2014-06-09 16:25 - 00000000 ____D () C:\Users\Name\AppData\Roaming\uTorrent
2014-06-14 18:40 - 2014-06-14 18:41 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-14 18:40 - 2014-06-14 18:40 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Avira
2014-06-14 18:39 - 2014-06-14 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-14 18:39 - 2014-05-14 23:30 - 00000000 ____D () C:\ProgramData\Avira
2014-06-14 18:39 - 2014-05-14 23:30 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-14 18:38 - 2014-06-14 18:38 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\Name\Desktop\avira_de_av_4018660801__ws.exe
2014-06-14 18:38 - 2014-06-14 18:38 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-14 18:38 - 2014-03-08 14:28 - 00000000 ____D () C:\Users\Name\AppData\Local\PMB Files
2014-06-14 18:38 - 2014-03-08 14:27 - 00000000 ____D () C:\ProgramData\PMB Files
2014-06-14 18:38 - 2014-03-05 11:48 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-14 17:40 - 2014-06-14 17:40 - 00000000 ____D () C:\Users\Name\AppData\Local\kJKxc2SrE2J0FNouaB
2014-06-14 17:24 - 2014-06-14 17:39 - 00679936 _____ () C:\Users\Name\AppData\Roaming\winlogon.exe
2014-06-14 16:21 - 2014-04-27 19:51 - 00000000 ____D () C:\ProgramData\Origin
2014-06-14 15:27 - 2014-05-15 17:20 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-06-14 15:18 - 2014-04-27 19:51 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-06-13 15:53 - 2014-04-10 18:09 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Skype
2014-06-13 13:51 - 2014-06-13 13:51 - 00275512 _____ () C:\Windows\Minidump\061314-16426-01.dmp
2014-06-13 13:51 - 2014-04-03 18:35 - 482686140 _____ () C:\Windows\MEMORY.DMP
2014-06-13 13:51 - 2014-04-03 18:35 - 00000000 ____D () C:\Windows\Minidump
2014-06-13 00:57 - 2014-04-10 18:09 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-13 00:57 - 2014-04-10 18:09 - 00000000 ____D () C:\ProgramData\Skype
2014-06-12 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-12 13:59 - 2014-03-08 16:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 13:58 - 2014-03-08 16:48 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 13:56 - 2014-05-01 03:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-11 13:34 - 2014-06-09 16:35 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-10 18:41 - 2014-06-10 01:09 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-06-10 01:54 - 2014-06-10 01:45 - 00000000 ____D () C:\Users\Name\Desktop\Neuer Ordner (2)
2014-06-10 01:39 - 2014-06-10 01:09 - 00001162 _____ () C:\Users\Public\Desktop\World of Warcraft.lnk
2014-06-10 01:38 - 2014-06-10 01:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-06-09 23:47 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-09 23:25 - 2014-06-09 23:25 - 00000000 ____D () C:\ProgramData\Battle.net
2014-06-09 21:49 - 2014-06-09 21:49 - 00001155 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-09 21:49 - 2014-06-09 21:49 - 00001143 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-09 21:49 - 2014-06-09 21:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-09 21:49 - 2014-06-09 21:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-09 21:14 - 2014-06-09 21:14 - 00003112 _____ () C:\Windows\System32\Tasks\{0AB881DA-6013-4775-B51D-81DE9859ED23}
2014-06-09 21:14 - 2014-06-09 21:14 - 00000000 ____D () C:\ProgramData\Blizzard
2014-06-09 21:13 - 2014-06-09 21:13 - 00000000 ____D () C:\Users\Public\Documents\Blizzard Entertainment
2014-06-09 20:59 - 2014-06-09 20:57 - 00000000 ____D () C:\Users\Name\AppData\Local\Skyrim
2014-06-09 20:57 - 2014-06-09 20:57 - 00000000 ____D () C:\Users\Name\Documents\My Games
2014-06-09 20:56 - 2014-06-09 20:56 - 00002418 _____ () C:\Users\Name\Desktop\The Elder Scrolls V Skyrim - Legendary Edition (Launcher).lnk
2014-06-09 20:56 - 2014-06-09 20:46 - 00000000 ____D () C:\Program Files (x86)\The Elder Scrolls V Skyrim - Legendary Edition (Game of the Year)
2014-06-09 20:20 - 2014-06-09 20:05 - 00000000 ____D () C:\Users\Name\Desktop\Neuer Ordner
2014-06-09 20:18 - 2014-06-09 20:18 - 00275512 _____ () C:\Windows\Minidump\060914-26426-01.dmp
2014-06-09 20:09 - 2014-06-09 20:09 - 00000000 ____D () C:\Users\Name\AppData\Roaming\WinRAR
2014-06-09 20:09 - 2014-06-09 20:09 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-09 20:09 - 2014-06-09 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-09 20:09 - 2014-06-09 20:09 - 00000000 ____D () C:\Program Files\WinRAR
2014-06-09 19:24 - 2014-03-08 17:24 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-06-09 19:21 - 2014-06-09 17:25 - 00000000 ____D () C:\Users\Name\Downloads\rzr-skrm
2014-06-09 19:05 - 2014-06-09 19:05 - 00001946 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-06-09 19:05 - 2014-06-09 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-06-09 19:05 - 2014-06-09 19:04 - 00000000 ____D () C:\Users\Name\AppData\Roaming\DAEMON Tools Lite
2014-06-09 19:05 - 2014-06-09 19:04 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-06-09 19:04 - 2014-06-09 19:04 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-06-09 19:04 - 2014-06-09 19:04 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-06-09 18:09 - 2014-06-09 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911
2014-06-09 18:09 - 2014-03-08 14:55 - 00065276 _____ () C:\Windows\DirectX.log
2014-06-09 18:07 - 2014-06-09 18:04 - 00000000 ____D () C:\Program Files (x86)\The Elder Scrolls V Skyrim
2014-06-09 17:21 - 2014-06-09 17:21 - 00000000 ____D () C:\Program Files (x86)\Elaborate Bytes
2014-06-09 16:39 - 2014-06-09 16:39 - 00961360 _____ (Chip Digital GmbH) C:\Users\Name\Desktop\AdwCleaner - CHIP-Installer.exe
2014-06-09 16:35 - 2014-06-09 16:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-09 16:35 - 2014-03-08 14:10 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-09 16:25 - 2014-06-09 16:25 - 01671504 _____ (BitTorrent Inc.) C:\Users\Name\Downloads\uTorrent_v.3.4.2_31515.exe
2014-06-09 16:24 - 2014-06-09 16:24 - 00006641 _____ () C:\Users\Name\Downloads\The_Elder_Scrolls_V_Skyrim.7031509.TPB.torrent
2014-06-08 22:18 - 2014-05-15 17:20 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-06-08 11:13 - 2014-06-11 12:41 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-11 12:41 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-06 16:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-06-06 00:47 - 2014-06-05 23:46 - 00000000 ____D () C:\Users\Name\AppData\Roaming\SleepTimerUltimate
2014-06-05 23:46 - 2014-06-05 23:46 - 00922840 _____ (Christian Handorf ) C:\Users\Name\Downloads\setup_sleeptimer.exe
2014-06-05 23:46 - 2014-06-05 23:46 - 00001130 _____ () C:\Users\Public\Desktop\SleepTimer Ultimate.lnk
2014-06-05 23:46 - 2014-06-05 23:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SleepTimer Ultimate
2014-06-05 23:46 - 2014-06-05 23:46 - 00000000 ____D () C:\Program Files (x86)\SleepTimer Ultimate
2014-06-03 18:05 - 2014-06-03 18:05 - 00000000 ____D () C:\Users\Name\AppData\Local\Adobe
2014-06-02 22:35 - 2014-06-02 22:35 - 00005933 _____ () C:\Users\Name\Downloads\LOL_OPGG_Observer_1461786040.bat
2014-06-02 22:11 - 2014-06-02 22:11 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-02 22:11 - 2014-06-02 22:11 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-02 22:11 - 2014-06-02 22:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-06-02 22:11 - 2014-06-02 22:11 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-06-02 22:11 - 2014-06-02 22:11 - 00000000 ____D () C:\Windows\system32\Macromed
2014-06-02 15:25 - 2014-06-02 15:25 - 00961360 _____ (Chip Digital GmbH) C:\Users\Name\Downloads\Open Broadcaster Software - CHIP-Installer.exe
2014-06-02 15:25 - 2014-06-02 15:25 - 00000931 _____ () C:\Users\Name\Desktop\Open Broadcaster Software.lnk
2014-06-02 15:25 - 2014-06-02 15:25 - 00000000 ____D () C:\Users\Name\AppData\Roaming\OBS
2014-06-02 15:25 - 2014-06-02 15:25 - 00000000 ____D () C:\Users\Name\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-06-02 15:25 - 2014-06-02 15:25 - 00000000 ____D () C:\Program Files\OBS
2014-06-02 15:25 - 2014-06-02 15:25 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-06-02 14:00 - 2014-06-02 14:00 - 00002972 _____ () C:\Windows\avmadd32.log
2014-06-02 14:00 - 2014-06-02 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!Box
2014-06-02 14:00 - 2014-06-02 14:00 - 00000000 ____D () C:\Program Files (x86)\FRITZ!Box
2014-06-02 13:44 - 2014-06-02 13:44 - 02960288 _____ () C:\Users\Name\Downloads\FRITZ!BoxAddOnIE64_German.exe
2014-06-02 13:44 - 2014-06-02 13:44 - 00000000 ____D () C:\Program Files\FRITZ!Box
2014-06-02 13:41 - 2014-06-02 13:41 - 00961360 _____ (Chip Digital GmbH) C:\Users\Name\Downloads\Linux Mint Qiana Cinnamon 32 Bit - CHIP-Installer.exe
2014-06-02 13:29 - 2014-06-02 13:29 - 00002099 _____ () C:\Users\Public\Desktop\devolo Cockpit.lnk
2014-06-02 13:29 - 2014-06-02 13:29 - 00000000 ____D () C:\Users\Name\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-06-02 13:29 - 2014-06-02 13:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-06-02 13:29 - 2014-06-02 13:29 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-06-02 13:29 - 2014-06-02 13:28 - 23128568 _____ (devolo AG) C:\Users\Name\Downloads\software-devolo-cockpit-windows-v4-2-2.exe
2014-06-01 11:22 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-05-30 12:21 - 2014-06-11 12:42 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 12:02 - 2014-06-11 12:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 12:02 - 2014-06-11 12:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 11:45 - 2014-06-11 12:42 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:39 - 2014-06-11 12:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 11:39 - 2014-06-11 12:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 11:38 - 2014-06-11 12:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 11:28 - 2014-06-11 12:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:27 - 2014-06-11 12:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 11:24 - 2014-06-11 12:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 11:21 - 2014-06-11 12:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 11:21 - 2014-06-11 12:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 11:20 - 2014-06-11 12:42 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-11 12:42 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:11 - 2014-06-11 12:42 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 11:08 - 2014-06-11 12:42 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-11 12:42 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 11:02 - 2014-06-11 12:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-30 10:55 - 2014-06-11 12:42 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:49 - 2014-06-11 12:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:46 - 2014-06-11 12:42 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-11 12:42 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-30 10:44 - 2014-06-11 12:42 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-11 12:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:42 - 2014-06-11 12:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-11 12:42 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-11 12:42 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:34 - 2014-06-11 12:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-30 10:33 - 2014-06-11 12:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-30 10:30 - 2014-06-11 12:42 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-30 10:29 - 2014-06-11 12:42 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:28 - 2014-06-11 12:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-30 10:27 - 2014-06-11 12:42 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:24 - 2014-06-11 12:42 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 10:23 - 2014-06-11 12:42 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-11 12:42 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:10 - 2014-06-11 12:42 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-11 12:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-30 10:04 - 2014-06-11 12:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-11 12:42 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-11 12:42 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-11 12:42 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-11 12:42 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:50 - 2014-06-11 12:42 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-11 12:42 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-11 12:42 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-11 12:42 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-11 12:42 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-11 12:42 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-11 12:42 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-11 12:42 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-11 12:42 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-28 18:47 - 2014-05-28 18:47 - 00022600 _____ () C:\Users\Name\Downloads\Bestellung.html
2014-05-28 18:06 - 2014-05-28 18:06 - 02247960 _____ () C:\Users\Name\Downloads\battlelog-web-plugins_2.4.0_141.exe
2014-05-28 18:06 - 2014-05-08 18:23 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-05-25 12:13 - 2014-05-25 12:12 - 04709126 _____ () C:\Users\Name\Downloads\linie41aushangfahrplanab15.12..pdf.part
2014-05-25 12:03 - 2014-05-25 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-05-25 12:03 - 2014-03-08 14:10 - 00000000 ____D () C:\Users\Name\AppData\Local\Google
2014-05-25 12:02 - 2014-05-25 12:02 - 00918672 _____ (Google Inc.) C:\Users\Name\Downloads\GoogleEarthSetup.exe
2014-05-25 12:02 - 2014-05-25 12:02 - 00918672 _____ (Google Inc.) C:\Users\Name\Downloads\GoogleEarthSetup (1).exe
Some content of TEMP:
====================
C:\Users\Name\AppData\Local\Temp\13-12_win7_win8_64_dd_ccc_whql.exe
C:\Users\Name\AppData\Local\Temp\avgnt.exe
C:\Users\Name\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpawktnr.dll
C:\Users\Name\AppData\Local\Temp\Loader1.6.1d.exe
C:\Users\Name\AppData\Local\Temp\nsb6FB9.exe
C:\Users\Name\AppData\Local\Temp\nsdA665.exe
C:\Users\Name\AppData\Local\Temp\nsdB62B.exe
C:\Users\Name\AppData\Local\Temp\nsiA8E5.exe
C:\Users\Name\AppData\Local\Temp\nsiC9D2.exe
C:\Users\Name\AppData\Local\Temp\nsn1AF.exe
C:\Users\Name\AppData\Local\Temp\nsn50A.exe
C:\Users\Name\AppData\Local\Temp\nsoCCB1.exe
C:\Users\Name\AppData\Local\Temp\nssBACD.exe
C:\Users\Name\AppData\Local\Temp\nstCFDD.exe
C:\Users\Name\AppData\Local\Temp\nsyAB66.exe
C:\Users\Name\AppData\Local\Temp\Quarantine.exe
C:\Users\Name\AppData\Local\Temp\raptrpatch.exe
C:\Users\Name\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Name\AppData\Local\Temp\sfamcc00002.dll
C:\Users\Name\AppData\Local\Temp\sfareca00002.dll
C:\Users\Name\AppData\Local\Temp\sfextra.dll
C:\Users\Name\AppData\Local\Temp\sonarinst.exe
C:\Users\Name\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Name\AppData\Local\Temp\utt7F84.tmp.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-09 01:54
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-06-2014 02
Ran by Name at 2014-06-15 13:35:09
Running from C:\Users\Name\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.30911 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.0911.2154.37488 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{47F6824F-CA45-FAD2-2F5B-906D36BA3393}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.0911.2154.37488 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80911.2216 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In (Version: 2.06.0000 - AMD) Hidden
Avira (HKLM-x32\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
AVM FRITZ!Box AddOn (IE) (x64) (HKLM\...\{EC3671D7-98AC-4951-8FFD-5556BE066137}) (Version: 1.7.0 - AVM Berlin)
AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version: - AVM Berlin)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.2.0.2 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0911.2154.37488 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0911.2154.37488 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0911.2154.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0911.2153.37488 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0911.2154.37488 - Advanced Micro Devices, Inc.) Hidden
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
CPUID CPU-Z 1.68 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dead Space (HKLM-x32\...\{025A585C-0C66-413D-80D2-4C05CB699771}) (Version: 1.0.0.222 - Electronic Arts)
devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.2.2.0 - devolo AG)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Logitech Unifying-Software 2.10 (HKLM\...\Logitech Unifying) (Version: 2.10.37 - Logitech)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SleepTimer Ultimate 1.21 (HKLM-x32\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version: - Christian Handorf)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
The Elder Scrolls V Skyrim - Legendary Edition (Game of the Year) Deutsche Version 1.9.32.0.8 (HKLM-x32\...\The Elder Scrolls V Skyrim - Legendary Edition (Game of the Year) Deutsche Version 1.9.32.0.8) (Version: 1.9.32.0.8 - .x.X.RIDDICK.X.x.)
WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 3.3.5.12340 - Blizzard Entertainment)
==================== Restore Points =========================
11-06-2014 22:00:00 Geplanter Prüfpunkt
12-06-2014 11:55:31 Windows Update
13-06-2014 01:00:10 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {58B176F9-3EBE-4933-824E-52D34FFF2213} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-02] (Adobe Systems Incorporated)
Task: {5A60B018-B971-4756-ABA4-632F5AA548E5} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {66FE81B8-10D9-482E-BD1C-3794908F4479} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-08] (Google Inc.)
Task: {7C246756-B721-4964-81C0-BA771640F21D} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
Task: {8C2B4385-5075-4C85-8764-E6AEC20D7C6F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-08] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-11 22:57 - 2013-09-11 22:57 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 07:59 - 2013-07-26 07:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 07:59 - 2013-07-26 07:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2014-05-15 17:20 - 2014-05-15 17:20 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-06-11 13:34 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-11 13:34 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-11 13:34 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-11 13:34 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-11 13:34 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
MSCONFIG\Services: TuneUp.UtilitiesSvc => 2
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/15/2014 01:29:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/14/2014 10:49:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/14/2014 01:34:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2014 11:51:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: b60
Startzeit: 01cf8751a9b904ab
Endzeit: 16
Anwendungspfad: C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
Berichts-ID: eba8fe30-f344-11e3-a513-b8975a706bd0
Error: (06/13/2014 01:52:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2014 00:07:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2014 03:18:09 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 06:28:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 01:53:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 00:37:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/13/2014 01:51:07 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0xa0000001 (0x0000000000000005, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000)C:\Windows\MEMORY.DMP061314-16426-01
Error: (06/13/2014 01:51:03 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 13.06.2014 um 13:49:43 unerwartet heruntergefahren.
Error: (06/12/2014 02:01:10 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800f0902 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2800095)
Error: (06/11/2014 10:22:18 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (06/09/2014 08:24:40 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error: (06/09/2014 08:18:17 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0xa0000001 (0x0000000000000005, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000)C:\Windows\MEMORY.DMP060914-26426-01
Error: (06/09/2014 08:18:11 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 09.06.2014 um 20:16:44 unerwartet heruntergefahren.
Error: (06/09/2014 07:22:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/09/2014 07:22:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (06/09/2014 04:40:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UPnP-Gerätehost" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Microsoft Office Sessions:
=========================
Error: (06/15/2014 01:29:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/14/2014 10:49:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/14/2014 01:34:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2014 11:51:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: rads_user_kernel.exe0.0.0.0b6001cf8751a9b904ab16C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeeba8fe30-f344-11e3-a513-b8975a706bd0
Error: (06/13/2014 01:52:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2014 00:07:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2014 03:18:09 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 06:28:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2014 01:53:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/11/2014 00:37:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2014-03-09 02:34:52.377
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Name\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-03-09 02:34:52.348
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Name\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-03-09 02:34:52.185
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-03-09 02:34:52.156
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 25%
Total physical RAM: 8175.3 MB
Available physical RAM: 6086.42 MB
Total Pagefile: 16348.79 MB
Available Pagefile: 14074.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.66 GB) (Free:280.69 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4A8B191A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Dazu kommt noch dieser Screenshot über eine Anwendung die sich neuerdings von alleine Starten will :  |
Baum-Darstellung