![]() |
|
Log-Analyse und Auswertung: Nicht schliessbare audiofenster und werbe Pop's die sich nicht schiessen lassenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Nicht schliessbare audiofenster und werbe Pop's die sich nicht schiessen lassen Hallo zusammen, ich habe follgendes Problem welches total nervt. Es gehen andauernd, nicht schliessbare audiofenster und werbe Pop's beim öfnen des Internets auf, die sich nicht schiessen lassen. Hier mal die Log files, ich vermute das irgendwelche Maleware auf dem Rechner ist. Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:11-07-2014 Ran by Robert Mathieu (administrator) on ROBERTMATHIEU on 11-07-2014 11:55:20 Running from C:\Users\Robert Mathieu\Downloads Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Teruten) C:\Windows\System32\FsUsbExService.Exe (Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (COMPANYVERS_NAME) C:\Program Files\MapsGalaxy_39\bar\1.bin\39barsvc.exe (Sony Corporation) C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe (COMPANYVERS_NAME) C:\Program Files\PopularScreensavers_7i\bar\1.bin\7ibarsvc.exe () C:\Program Files\D-Link\DWA-131 revA\WlanWpsSvc.exe () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (D-Link Corp.) C:\Program Files\D-Link\DWA-131 revA\wirelesscm.exe (Microsoft Corporation) C:\Windows\System32\DeviceDisplayObjectProvider.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Windows\System32\audiodg.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.) HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [951576 2014-03-11] (Microsoft Corporation) HKLM\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] () HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12000984 2013-07-05] (Realtek Semiconductor) HKLM\...\Run: [PopularScreensavers Search Scope Monitor] => C:\Program Files\PopularScreensavers_7i\bar\1.bin\7iSrchMn.exe [55368 2014-05-28] (Mindspark) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries) HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation) HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Run: [Optimizer Pro] => C:\Program Files\Optimizer Pro\OptProLauncher.exe [134648 2013-10-28] () HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Run: [NextLive] => C:\Windows\system32\rundll32.exe "C:\Users\Robert Mathieu\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.) HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-06-17] (Google Inc.) HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Policies\system: [NoDispCPL] 0 HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Policies\Explorer: [NoInstrumentation] 0 HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\MountPoints2: E - E:\LaunchU3.exe -a HKU\S-1-5-21-2882362913-2368655990-3563393748-1000\...\MountPoints2: {27f5eaca-c02d-11e0-a876-001a92b07fb8} - E:\LaunchU3.exe -a AppInit_DLLs: c:\progra~1\optimi~1\optpro~1.dll => c:\Program Files\Optimizer Pro\OptProCrash.dll [4027208 2013-10-29] () IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\browsemngr.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browsermngr.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe IFEO\cltmngsvc.exe: [Debugger] tasklist.exe IFEO\delta babylon.exe: [Debugger] tasklist.exe IFEO\delta tb.exe: [Debugger] tasklist.exe IFEO\delta2.exe: [Debugger] tasklist.exe IFEO\deltainstaller.exe: [Debugger] tasklist.exe IFEO\deltasetup.exe: [Debugger] tasklist.exe IFEO\deltatb.exe: [Debugger] tasklist.exe IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe IFEO\iminentsetup.exe: [Debugger] tasklist.exe IFEO\rjatydimofu.exe: [Debugger] tasklist.exe IFEO\sweetimsetup.exe: [Debugger] tasklist.exe IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Connection Manager.lnk ShortcutTarget: Wireless Connection Manager.lnk -> C:\Program Files\D-Link\DWA-131 revA\wirelesscm.exe (D-Link Corp.) HKLM\...\AppCertDlls: [x64] -> c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll <===== ATTENTION GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd1103aw&cd=2XzuyEtN2Y1L1QzuyD0C0Dzyzyzz0BtCtBtByE0C0Bzyzy0CtN0D0Tzu0SyBtDtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=275818405&ir= URLSearchHook: HKCU - (No Name) - {0953a3a2-9223-4990-a1c9-efb4d4686ef2} - C:\Program Files\PopularScreensavers_7i\bar\1.bin\7iSrcAs.dll (Mindspark) URLSearchHook: HKCU - (No Name) - {26842a09-ffa8-4e2c-ae12-0c80f01c3295} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (Mindspark) SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=542&systemid=406&v=n9854-145&apn_uid=2732738017124452&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms} SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103aw&cd=2XzuyEtN2Y1L1QzuyD0C0Dzyzyzz0BtCtBtByE0C0Bzyzy0CtN0D0Tzu0SyBtDtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=275818405&ir= SearchScopes: HKLM - {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^UX^xdm063^YYA^ch&si=CMHXlO2izr4CFYXKtAodHmsADQ&ptb=E89EF45D-0C07-4BD9-8F74-724A8FF27106&ind=2014052805&n=780c01c5&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKCU - 5CDA08BEDB044001A2FD46E62F925DE1 URL = hxxp://www.amazon.com/websearch/ref=bit_bds-p12_serp_ie_us_display?ie=UTF8&tagbase=bds-p12&tag=bds-p12-serp-us-ie-20&tbrId=v1_abb-channel-12_0bc89a34d17d4360a9cdfe8ffc964a2f_39_1006_20131202_CH_ie_ds_&query={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=10588&tl=gcn33589&tt=4712_5&babsrc=SP_def&mntrId=c029b99c0000000000005cd998b1224c SearchScopes: HKCU - {58AFB82A-F51A-4746-A39C-778B96653D34} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=W3I4&o=41648005&src=kw&q={searchTerms}&locale=de_EU&apn_ptnrs=^A9J&apn_dtid=^YYYYYY^YY^CH&apn_uid=238656C8-4263-4345-9918-8F2147230FF1&apn_sauid=F41A9B45-2E0C-44E7-93C8-656E444534AF SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=542&systemid=406&v=n9854-145&apn_uid=2732738017124452&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms} SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103aw&cd=2XzuyEtN2Y1L1QzuyD0C0Dzyzyzz0BtCtBtByE0C0Bzyzy0CtN0D0Tzu0SyBtDtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=275818405&ir= SearchScopes: HKCU - {b0441a0e-a49a-4e16-afc1-74ecced1921f} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^UX^xdm063^YYA^ch&si=CMHXlO2izr4CFYXKtAodHmsADQ&ptb=E89EF45D-0C07-4BD9-8F74-724A8FF27106&ind=2014052805&n=780c01c5&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKCU - {D8E59964-6B24-4B38-8DD6-65C158F4B807} URL = https://www.google.com/search?q={searchTerms} BHO: Toolbar BHO - {0709f2cc-d1e6-4b43-9efc-1c0701cb173d} - C:\Program Files\PopularScreensavers_7i\bar\1.bin\7ibar.dll (Mindspark) BHO: Toolbar BHO - {1e91a655-bb4b-4693-a05e-2edebc4c9d89} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark) BHO: Search Assistant BHO - {3a6625a2-591b-4e83-ac3f-8c25eea30ac0} - C:\Program Files\PopularScreensavers_7i\bar\1.bin\7iSrcAs.dll (Mindspark) BHO: BeetterPriceeChuec - {5B8553D9-3EFD-A354-9CB3-8EAE6EDE10D8} - C:\ProgramData\BeetterPriceeChuec\b8raEfO.dll () BHO: Search Assistant BHO - {71c1d63a-c944-428a-a5bd-ba513190e5d2} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (Mindspark) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: FlAShCoaupoone - {C6CA0E47-7B31-F6B4-6F55-383EFFEF4ADF} - C:\ProgramData\FlAShCoaupoone\bh5q5E.dll () Toolbar: HKLM - PopularScreensavers - {f339a07f-9578-412d-85e0-b8a80277151a} - C:\Program Files\PopularScreensavers_7i\bar\1.bin\7ibar.dll (Mindspark) Toolbar: HKLM - MapsGalaxy - {364ea597-e728-4ce4-bb4a-ed846ef47970} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Toolbar: HKCU - MapsGalaxy - {364EA597-E728-4CE4-BB4A-ED846EF47970} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll (Mindspark) Toolbar: HKCU - PopularScreensavers - {F339A07F-9578-412D-85E0-B8A80277151A} - C:\Program Files\PopularScreensavers_7i\bar\1.bin\7ibar.dll (Mindspark) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Winsock: Catalog9 01 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll [258664] (NVIDIA) Winsock: Catalog9 02 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll [258664] (NVIDIA) Winsock: Catalog9 03 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll [258664] (NVIDIA) Winsock: Catalog9 04 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll [258664] (NVIDIA) Winsock: Catalog9 05 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll [258664] (NVIDIA) Winsock: Catalog9 06 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll [258664] (NVIDIA) Winsock: Catalog9 17 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll [258664] (NVIDIA) Winsock: Catalog9 18 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nvLsp.dll [258664] (NVIDIA) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin: @MapsGalaxy_39.com/Plugin - C:\Program Files\MapsGalaxy_39\bar\1.bin\NP39Stub.dll (Mindspark) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @popularscreensavers.com/Plugin - C:\Program Files\PopularScreensavers\NPp5Stub.dll (popularscreensavers.com) FF Plugin: @PopularScreensavers_7i.com/Plugin - C:\Program Files\PopularScreensavers_7i\bar\1.bin\NP7iStub.dll (Mindspark) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2013-02-19] Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\pdf.dll () CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Mindspark Toolbar Platform Plugin Stub) - C:\Program Files\MapsGalaxy_39\bar\1.bin\NP39Stub.dll (Mindspark) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (Popular Screensavers Plugin Stub) - C:\Program Files\PopularScreensavers\NPp5Stub.dll (popularscreensavers.com) CHR Plugin: (Mindspark Toolbar Platform Plugin Stub) - C:\Program Files\PopularScreensavers_7i\bar\1.bin\NP7iStub.dll (Mindspark) CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll No File CHR Extension: (Docs) - C:\Users\Robert Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-17] CHR Extension: (Google Drive) - C:\Users\Robert Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-17] CHR Extension: (YouTube) - C:\Users\Robert Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-17] CHR Extension: (Google-Suche) - C:\Users\Robert Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-17] CHR Extension: (Google Wallet) - C:\Users\Robert Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-17] CHR Extension: (ImoagEEConvieRter) - C:\Users\Robert Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pehholdmoojocllodmcpeefeakedoggg [2014-06-17] CHR Extension: (MySearchDial Neuer Tab) - C:\Users\Robert Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff [2014-06-17] CHR Extension: (Google Mail) - C:\Users\Robert Mathieu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-17] CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\ROBERT~1\AppData\Local\mysearchdial-speeddial.crx [2013-12-02] CHR HKCU\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\ROBERT~1\AppData\Local\mysearchdial-speeddial.crx [2013-12-02] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= R2 ca82e1a5; c:\Program Files\Optimizer Pro\OptProCrashSvc.dll [193176 2013-12-02] () S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-03-26] (Creative Labs) [File not signed] S3 Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2011-03-26] (Creative Labs) [File not signed] R2 CTAudSvcService; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed] R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-02-05] (Teruten) [File not signed] S2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries) R2 MapsGalaxy_39Service; C:\Program Files\MapsGalaxy_39\bar\1.bin\39barsvc.exe [88648 2014-05-28] (COMPANYVERS_NAME) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2014-03-11] (Microsoft Corporation) R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed] R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [279776 2014-03-11] (Microsoft Corporation) R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [167528 2010-01-21] () R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed] R2 PopularScreensavers_7iService; C:\Program Files\PopularScreensavers_7i\bar\1.bin\7ibarsvc.exe [88648 2014-05-28] (COMPANYVERS_NAME) R2 WlanWpsSvc; C:\Program Files\D-Link\DWA-131 revA\WlanWpsSvc.exe [167936 2008-06-26] () [File not signed] ==================== Drivers (Whitelisted) ==================== R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] () [File not signed] R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [104024 2012-03-31] (JMicron Technology Corp.) R3 LVPr2Mon; C:\Windows\System32\Drivers\LVPr2Mon.sys [25752 2009-10-07] () R3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.) R3 mf; C:\Windows\System32\DRIVERS\mf.sys [114176 2009-07-14] (Microsoft Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231960 2014-01-25] (Microsoft Corporation) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2009-07-16] () R3 NmPar; C:\Windows\System32\DRIVERS\NmPar.sys [81920 2010-01-12] (Windows (R) Codename Longhorn DDK provider) R3 nmserial; C:\Windows\System32\DRIVERS\nmserial.sys [70656 2010-01-07] (Windows (R) Codename Longhorn DDK provider) R3 P17; C:\Windows\System32\drivers\P17.sys [1168896 2009-10-16] (Creative Technology Ltd.) R3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13976 2009-05-01] (Logitech Inc.) R3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-05-01] (Logitech Inc.) S3 TGBMPEnum; C:\Windows\System32\DRIVERS\TGBMPEnum.sys [32440 2013-02-25] (TheGreenBow) S3 TGBVPNVirtM; C:\Windows\System32\DRIVERS\TGBVPNVirtM.sys [112824 2013-02-25] (TheGreenBow) S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-12] (Microsoft Corporation) S3 dgderdrv; System32\drivers\dgderdrv.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-11 11:55 - 2014-07-11 11:55 - 00022314 ____C () C:\Users\Robert Mathieu\Downloads\FRST.txt 2014-07-11 11:55 - 2014-07-11 11:55 - 00000000 ___DC () C:\FRST 2014-07-11 11:54 - 2014-07-11 11:55 - 01075200 ____C (Farbar) C:\Users\Robert Mathieu\Downloads\FRST.exe 2014-07-09 08:58 - 2014-07-09 19:53 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-09 08:58 - 2014-07-09 19:53 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-09 08:58 - 2014-07-09 19:53 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-09 08:58 - 2014-07-09 19:53 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-09 08:58 - 2014-07-09 19:53 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-09 08:58 - 2014-07-09 19:53 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-09 08:58 - 2014-07-09 19:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-09 08:58 - 2014-07-09 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-09 08:58 - 2014-07-09 19:51 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-09 08:58 - 2014-07-09 19:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-09 08:58 - 2014-07-09 19:51 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-09 08:58 - 2014-07-09 19:51 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-09 08:58 - 2014-07-09 19:48 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-09 08:58 - 2014-07-09 19:48 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-04 16:28 - 2014-07-04 16:28 - 00000000 ___DC () C:\Users\Seraina\AppData\Local\Skype 2014-07-04 16:28 - 2014-07-04 16:28 - 00000000 ___DC () C:\Users\Seraina\AppData\Local\PopularScreensavers_7i 2014-07-04 16:28 - 2014-07-04 16:28 - 00000000 ___DC () C:\Users\Seraina\AppData\Local\LogiShrd 2014-07-04 16:27 - 2014-07-04 16:28 - 00000000 _SHDC () C:\Users\Seraina\AppData\Local\EmieUserList 2014-07-04 16:27 - 2014-07-04 16:28 - 00000000 _SHDC () C:\Users\Seraina\AppData\Local\EmieSiteList 2014-07-04 16:27 - 2014-07-04 16:28 - 00000000 ___DC () C:\Users\Seraina\AppData\Roaming\Skype 2014-07-01 14:49 - 2014-07-01 14:49 - 00143297 ____C () C:\Users\Robert Mathieu\Downloads\Route_Donaueschingen_-_Sigmaringen.gpx 2014-07-01 14:49 - 2014-07-01 14:49 - 00143297 ____C () C:\Users\Robert Mathieu\Downloads\Route_Donaueschingen_-_Sigmaringen (1).gpx 2014-06-24 09:42 - 2014-06-24 16:02 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-06-23 07:23 - 2014-06-24 01:11 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-23 07:23 - 2014-06-24 01:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-22 12:24 - 2014-06-22 12:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-06-22 12:24 - 2014-06-22 12:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2014-06-22 12:24 - 2014-06-22 12:24 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2014-06-22 12:23 - 2014-06-22 12:24 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-06-22 12:23 - 2014-06-22 12:23 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-06-22 12:23 - 2014-06-22 12:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-06-22 12:23 - 2014-06-22 12:23 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-06-22 12:23 - 2014-06-22 12:23 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-06-22 12:22 - 2014-06-22 12:24 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-06-17 08:50 - 2014-06-17 08:50 - 00000000 ___DC () C:\Program Files\GUM8AC1.tmp 2014-06-17 08:45 - 2014-06-17 08:45 - 00002205 ____C () C:\Users\Public\Desktop\Google Chrome.lnk 2014-06-17 08:45 - 2014-06-17 08:45 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-06-17 08:44 - 2014-07-11 11:49 - 00001114 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-17 08:44 - 2014-07-11 10:42 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-16 18:35 - 2014-06-17 00:34 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-16 18:35 - 2014-06-17 00:34 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-16 18:35 - 2014-06-17 00:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-16 18:35 - 2014-06-17 00:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-16 18:35 - 2014-06-17 00:33 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-16 18:35 - 2014-06-17 00:33 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-16 18:35 - 2014-06-17 00:32 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll ==================== One Month Modified Files and Folders ======= 2014-07-11 11:55 - 2014-07-11 11:55 - 00022314 ____C () C:\Users\Robert Mathieu\Downloads\FRST.txt 2014-07-11 11:55 - 2014-07-11 11:55 - 00000000 ___DC () C:\FRST 2014-07-11 11:55 - 2014-07-11 11:54 - 01075200 ____C (Farbar) C:\Users\Robert Mathieu\Downloads\FRST.exe 2014-07-11 11:49 - 2014-06-17 08:44 - 00001114 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-11 11:43 - 2011-04-05 20:25 - 00000000 ___DC () C:\Users\Robert Mathieu\AppData\Roaming\Skype 2014-07-11 11:42 - 2012-05-07 09:10 - 00000884 ____C () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-11 10:54 - 2011-03-26 15:25 - 01637351 ____C () C:\Windows\WindowsUpdate.log 2014-07-11 10:49 - 2009-07-14 06:34 - 00015152 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-11 10:49 - 2009-07-14 06:34 - 00015152 ___HC () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-11 10:43 - 2014-01-05 22:40 - 00000000 ___DC () C:\Users\Robert Mathieu\AppData\Roaming\newnext.me 2014-07-11 10:42 - 2014-06-17 08:44 - 00001110 ____C () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-11 10:41 - 2014-06-02 09:17 - 00004137 ____C () C:\Windows\setupact.log 2014-07-11 10:41 - 2011-03-26 16:26 - 00619960 ____C () C:\Windows\PFRO.log 2014-07-11 10:41 - 2009-07-14 06:53 - 00000006 ___HC () C:\Windows\Tasks\SA.DAT 2014-07-10 16:55 - 2013-12-02 16:34 - 00000000 ___DC () C:\Users\Robert Mathieu\Documents\Optimizer Pro 2014-07-10 16:55 - 2013-12-02 16:34 - 00000000 ___DC () C:\ProgramData\TEMP 2014-07-10 16:39 - 2012-04-16 17:21 - 00014574 ____C () C:\Users\Robert Mathieu\Documents\Hypotheken Abrechnung 2012.xlsx 2014-07-10 15:34 - 2013-09-06 19:45 - 00038257 ____C () C:\Users\Robert Mathieu\Documents\Stunden Bria.xlsx 2014-07-10 09:42 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-07-10 09:05 - 2009-07-14 06:33 - 00407984 ____C () C:\Windows\system32\FNTCACHE.DAT 2014-07-10 09:02 - 2014-05-06 21:39 - 00000000 __SDC () C:\Windows\system32\CompatTel 2014-07-10 09:02 - 2009-07-14 10:56 - 00000000 ___DC () C:\Program Files\Windows Journal 2014-07-10 09:02 - 2009-07-14 04:37 - 00000000 ___DC () C:\Windows\system32\de-DE 2014-07-09 19:54 - 2011-04-04 18:46 - 00000000 ___DC () C:\ProgramData\Microsoft Help 2014-07-09 19:53 - 2014-07-09 08:58 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-09 19:53 - 2014-07-09 08:58 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-09 19:53 - 2014-07-09 08:58 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-09 19:53 - 2014-07-09 08:58 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-09 19:53 - 2014-07-09 08:58 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-09 19:53 - 2014-07-09 08:58 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-09 19:53 - 2014-07-09 08:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-09 19:53 - 2014-07-09 08:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-09 19:51 - 2014-07-09 08:58 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-09 19:51 - 2014-07-09 08:58 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-09 19:51 - 2014-07-09 08:58 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-09 19:51 - 2014-07-09 08:58 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-09 19:51 - 2013-07-31 19:52 - 00000000 ___DC () C:\Windows\system32\MRT 2014-07-09 19:49 - 2011-03-26 16:04 - 93585272 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-09 19:48 - 2014-07-09 08:58 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-09 19:48 - 2014-07-09 08:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-09 12:42 - 2012-05-07 09:10 - 00699056 ____C (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-07-09 12:42 - 2011-05-19 10:50 - 00071344 ____C (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-07-04 16:28 - 2014-07-04 16:28 - 00000000 ___DC () C:\Users\Seraina\AppData\Local\Skype 2014-07-04 16:28 - 2014-07-04 16:28 - 00000000 ___DC () C:\Users\Seraina\AppData\Local\PopularScreensavers_7i 2014-07-04 16:28 - 2014-07-04 16:28 - 00000000 ___DC () C:\Users\Seraina\AppData\Local\LogiShrd 2014-07-04 16:28 - 2014-07-04 16:27 - 00000000 _SHDC () C:\Users\Seraina\AppData\Local\EmieUserList 2014-07-04 16:28 - 2014-07-04 16:27 - 00000000 _SHDC () C:\Users\Seraina\AppData\Local\EmieSiteList 2014-07-04 16:28 - 2014-07-04 16:27 - 00000000 ___DC () C:\Users\Seraina\AppData\Roaming\Skype 2014-07-02 19:32 - 2011-08-09 15:07 - 00000000 ___DC () C:\Users\Robert Mathieu\AppData\Local\Deployment 2014-07-01 14:49 - 2014-07-01 14:49 - 00143297 ____C () C:\Users\Robert Mathieu\Downloads\Route_Donaueschingen_-_Sigmaringen.gpx 2014-07-01 14:49 - 2014-07-01 14:49 - 00143297 ____C () C:\Users\Robert Mathieu\Downloads\Route_Donaueschingen_-_Sigmaringen (1).gpx 2014-06-30 09:18 - 2009-07-14 04:37 - 00000000 __RDC () C:\Users\Public 2014-06-29 13:42 - 2011-10-28 21:47 - 00000000 ___DC () C:\Users\Robert Mathieu\Documents\Heidi 2014-06-29 11:09 - 2014-05-05 12:04 - 00010923 ____C () C:\Users\Robert Mathieu\Documents\Ausstaende Philip.xlsx 2014-06-24 16:02 - 2014-06-24 09:42 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-06-24 01:11 - 2014-06-23 07:23 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-24 01:11 - 2014-06-23 07:23 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-23 07:15 - 2014-01-31 09:47 - 00000306 _RSHC () C:\ProgramData\ntuser.pol 2014-06-22 12:28 - 2009-07-14 04:37 - 00000000 __RDC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-06-22 12:25 - 2009-07-14 10:47 - 00000000 ___DC () C:\Windows\system32\Drivers\de-DE 2014-06-22 12:24 - 2014-06-22 12:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-06-22 12:24 - 2014-06-22 12:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2014-06-22 12:24 - 2014-06-22 12:24 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2014-06-22 12:24 - 2014-06-22 12:23 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-06-22 12:24 - 2014-06-22 12:22 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-06-22 12:23 - 2014-06-22 12:23 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2014-06-22 12:23 - 2014-06-22 12:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2014-06-22 12:23 - 2014-06-22 12:23 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2014-06-22 12:23 - 2014-06-22 12:23 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-06-22 12:23 - 2014-06-22 12:23 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-06-17 09:35 - 2011-04-05 20:25 - 00000000 ___DC () C:\Users\Robert Mathieu\AppData\Local\Google 2014-06-17 09:05 - 2014-01-05 22:07 - 00001919 ____C () C:\Users\Public\Desktop\Samsung Kies 3.lnk 2014-06-17 09:05 - 2011-08-09 21:59 - 00000000 ___DC () C:\Users\Robert Mathieu\AppData\Local\Downloaded Installations 2014-06-17 08:58 - 2011-03-26 15:34 - 01620684 ____C () C:\Windows\system32\PerfStringBackup.INI 2014-06-17 08:50 - 2014-06-17 08:50 - 00000000 ___DC () C:\Program Files\GUM8AC1.tmp 2014-06-17 08:45 - 2014-06-17 08:45 - 00002205 ____C () C:\Users\Public\Desktop\Google Chrome.lnk 2014-06-17 08:45 - 2014-06-17 08:45 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-06-17 08:45 - 2011-04-05 20:25 - 00000000 ___DC () C:\Program Files\Google 2014-06-17 08:44 - 2011-04-05 20:25 - 00000000 ___DC () C:\ProgramData\Google 2014-06-17 00:34 - 2014-06-16 18:35 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-17 00:34 - 2014-06-16 18:35 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-17 00:34 - 2014-06-16 18:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-17 00:34 - 2014-06-16 18:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-17 00:33 - 2014-06-16 18:35 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-17 00:33 - 2014-06-16 18:35 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-17 00:32 - 2014-06-16 18:35 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-16 18:49 - 2013-07-08 13:37 - 00000000 ___DC () C:\ProgramData\Package Cache 2014-06-16 18:48 - 2012-04-17 19:31 - 00000000 ___DC () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin 2014-06-16 18:48 - 2012-04-17 19:26 - 00000000 ___DC () C:\ProgramData\GARMIN 2014-06-16 18:48 - 2012-04-17 19:26 - 00000000 ___DC () C:\Program Files\Garmin Files to move or delete: ==================== C:\Users\Public\AlexaNSISPlugin.2060.dll C:\Users\Public\AlexaNSISPlugin.6912.dll Some content of TEMP: ==================== C:\Users\Robert Mathieu\AppData\Local\Temp\Execute2App.exe C:\Users\Robert Mathieu\AppData\Local\Temp\msvcp90.dll C:\Users\Robert Mathieu\AppData\Local\Temp\msvcr90.dll ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-08 11:03 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:11-07-2014 Ran by Robert Mathieu at 2014-07-11 11:56:17 Running from C:\Users\Robert Mathieu\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} ==================== Installed Programs ====================== 32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Reader X (10.1.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated) ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden Apple Application Support (HKLM\...\{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}) (Version: 3.0 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}) (Version: 7.1.0.32 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Install Manager (HKLM\...\{68D1CBD5-899D-037D-FC17-191811C44EA5}) (Version: 3.0.715.0 - ATI Technologies, Inc.) BeetterPriceeChuec (HKLM\...\{4E5FE462-1A84-47B4-3411-C72434AAD86C}) (Version: - BetteerPricieCuhhec) <==== ATTENTION Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.) Catalyst Control Center Core Implementation (Version: 2009.0225.1546.28221 - ATI) Hidden Catalyst Control Center Graphics Full Existing (Version: 2009.0225.1546.28221 - ATI) Hidden Catalyst Control Center Graphics Full New (Version: 2009.0225.1546.28221 - ATI) Hidden Catalyst Control Center Graphics Light (Version: 2009.0225.1546.28221 - ATI) Hidden Catalyst Control Center Graphics Previews Common (Version: 2009.0225.1546.28221 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (Version: 2009.0225.1546.28221 - ATI) Hidden Catalyst Control Center HydraVision Full (Version: 2009.0225.1546.28221 - ATI) Hidden Catalyst Control Center InstallProxy (Version: 2009.0225.1546.28221 - ATI Technologies, Inc.) Hidden CCC Help English (Version: 2009.0225.1545.28221 - ATI) Hidden ccc-core-static (Version: 2009.0225.1546.28221 - Ihr Firmenname) Hidden ccc-utility (Version: 2009.0225.1546.28221 - ATI) Hidden Creative ALchemy (HKLM\...\ALchemy) (Version: 1.41 - Creative Technology Limited) Creative Audio Control Panel (HKLM\...\AudioCS) (Version: 2.56 - Creative Technology Limited) Creative MediaSource 5 (HKLM\...\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}) (Version: 5.26 - Creative Technology Limited) Creative Software AutoUpdate (HKLM\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited) Creative Sound Blaster Properties (HKLM\...\Creative Sound Blaster Properties) (Version: 1.02 - Creative Technology Limited) Creative WaveStudio 7 (HKLM\...\WaveStudio 7) (Version: 7.12 - Creative Technology Limited) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft) D-Link DWA-131 Wireless N Nano USB Adapter (HKLM\...\{D9198056-A296-4583-A790-C0E73694CFE8}) (Version: - D-Link) Driver Pro v3.1 (HKLM\...\Driver Pro_is1) (Version: 3.1 - PC Utilities Software Limited) Elevated Installer (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden eReg (Version: 1.20.138.34 - Logitech, Inc.) Hidden FlAShCoaupoone (HKLM\...\{8B114619-78B7-1CFF-55EF-74266954F883}) (Version: - FlasHoCoiupon) <==== ATTENTION Garmin BaseCamp (HKLM\...\{DF1C5B60-29DE-463C-BF2C-708D95F3F752}) (Version: 3.3.2 - Garmin Ltd or its subsidiaries) Garmin City Navigator Europe NT 2011.10 (HKLM\...\{74D21920-3B72-494F-9042-8C26E1E99FDC}) (Version: 14.10.0.0 - Garmin Ltd or its subsidiaries) Garmin City Navigator Europe NT 2012.40 Update (HKLM\...\{B28311A2-EA16-4F85-80CE-1BF2B0912C8F}) (Version: 15.40.0.0 - Garmin Ltd or its subsidiaries) Garmin Communicator Plugin (HKLM\...\{032A13FF-D26D-4844-9597-7EF698627985}) (Version: 4.1.0 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM\...\{55ae01f2-f0a8-4342-a9cc-a0327cdaa811}) (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Garmin Express (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express Tray (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden Garmin MapInstall (HKLM\...\{5ED7CD44-1A33-4B36-BA09-0B55FE82AF95}) (Version: 4.0.3 - Garmin Ltd or its subsidiaries) Garmin USB Drivers (HKLM\...\{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries) Google Chrome (HKLM\...\Google Chrome) (Version: 29.0.1547.66 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4601.54 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.21.115 - Google Inc.) Hidden HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden iCloud (HKLM\...\{00A61104-74B5-4056-AD00-4397EF4FB141}) (Version: 3.1.0.40 - Apple Inc.) iLivid (HKLM\...\iLivid) (Version: 5.0.0.4002 - Bandoo Media Inc) <==== ATTENTION InfraRecorder (HKLM\...\InfraRecorder) (Version: - ) iTunes (HKLM\...\{616445AF-BBCF-41C1-A4D6-8CFF171C182D}) (Version: 11.1.4.62 - Apple Inc.) JMicron JMB36X Driver (HKLM\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.65.3 - JMicron Technology Corp.) K-Lite Codec Pack 7.0.0 (Standard) (HKLM\...\KLiteCodecPack_is1) (Version: 7.0.0 - ) Logitech SetPoint 6.50 (HKLM\...\sp6) (Version: 6.50.152 - Logitech) Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7248) - Logitech Inc..) Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.) Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.) MapsGalaxy Internet Explorer Toolbar (HKLM\...\MapsGalaxy_39bar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION Mein CEWE FOTOBUCH (HKLM\...\Mein CEWE FOTOBUCH) (Version: 5.0.4 - CEWE COLOR AG u Co. OHG) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Silverlight Packages (HKCU\...\Microsoft Silverlight Packages) (Version: - ) <==== ATTENTION Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Moveslink2 (HKCU\...\3aac353d25257eb5) (Version: 1.1.53.3987 - Suunto) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) MyFreeCodec (HKCU\...\MyFreeCodec) (Version: - ) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.7 - NVIDIA Corporation) NVIDIA ForceWare Network Access Manager (HKLM\...\InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7316 - NVIDIA Corporation) NVIDIA ForceWare Network Access Manager (Version: 1.00.7316 - NVIDIA Corporation) Hidden Optimizer Pro v3.2 (HKLM\...\Optimizer Pro_is1) (Version: - PC Utilities Software Limited) <==== ATTENTION PDF Reader Utility Pro (HKLM\...\{FC279721-37A6-4777-AFD8-7A56681EBA14}) (Version: 9.00.0.0 - PC Utilities Software Limited) PMB (HKLM\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation) PMB-Aktualisierungsprogramm (HKLM\...\{A0BB1E68-1DD0-4acd-AD82-EDA0E49F0615}) (Version: 5.6.02.06270 - Sony Corporation) PopularScreensavers Internet Explorer Toolbar (HKLM\...\PopularScreensavers_7ibar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6965 - Realtek Semiconductor Corp.) Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.0.1.11053_66 - Samsung Electronics Co., Ltd.) Samsung Kies (Version: 2.0.1.11053_66 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Samsung Kies3 (Version: 3.2.14055.3 - Samsung Electronics Co., Ltd.) Hidden Samsung Story Album Viewer (HKLM\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Samsung Story Album Viewer (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version: - Microsoft) Hidden Skins (Version: 2009.0225.1546.28221 - ATI) Hidden Skype™ 6.16 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2494150) (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUSR_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin) Windows Mobile-Gerätecenter (HKLM\...\{904CCF62-818D-4675-BC76-D37EB399F917}) (Version: 6.1.6965.0 - Microsoft Corporation) Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) ==================== Restore Points ========================= 16-06-2014 22:30:56 Windows Update 17-06-2014 07:03:54 Installed Samsung Kies3 21-06-2014 08:43:54 Windows Update 22-06-2014 10:06:56 Windows Update 22-06-2014 10:20:46 Windows Update 22-06-2014 10:23:02 Windows Update 22-06-2014 17:00:08 Windows-Sicherung 23-06-2014 23:11:10 Windows Update 24-06-2014 14:02:11 Windows Update 29-06-2014 08:36:51 Windows Update 29-06-2014 17:00:05 Windows-Sicherung 04-07-2014 14:37:45 Windows Update 07-07-2014 06:53:35 Windows-Sicherung 08-07-2014 08:15:26 Windows Update 09-07-2014 17:47:20 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ___AC C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {5BDC1AD7-2235-4B1E-8E03-8013E267CE69} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {5E4251C5-F243-4D1C-8507-E5857872A2DA} - System32\Tasks\{EA215581-2190-4A78-B18A-639C5DF050F3} => C:\Program Files\Microsoft Silverlight\5.1.30214.0\Silverlight.Configuration.exe [2014-02-13] (Microsoft Corporation) Task: {6BE5359E-C18D-44B6-BF5E-5311C4D7C6B9} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-06-09] () Task: {70E5BECC-5862-47A7-9E62-95BE7B528B3E} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2011-05-10] (Hewlett-Packard) Task: {71FFABAE-6DC3-4224-B17B-3D6508CB118F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-06-17] (Google Inc.) Task: {86571D95-050E-4C59-9BDD-8F7AA6C05277} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-06-17] (Google Inc.) Task: {9531E546-0CF6-44CE-A99E-D557D309DC35} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {9BE7B12D-CFD2-4BB1-A8A9-66360F64F31C} - System32\Tasks\{5821D0C2-CCBC-4F00-AAE7-AF627DD37A85} => C:\Program Files\Skype\\Phone\Skype.exe [2014-05-08] (Skype Technologies S.A.) Task: {BDBAC121-60AA-4006-8ABE-D68ED21BCA8E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DB8A963E-E553-419F-A92E-C34B93815917} - System32\Tasks\LaunchApp => C:\Program Files\MyPC Backup\MyPC Backup.exe <==== ATTENTION Task: {E695CCCF-EAC5-4BE9-B01D-ADE7F8AF39A3} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-12-02 16:29 - 2013-10-29 15:08 - 04027208 _____ () c:\Program Files\Optimizer Pro\OptProCrash.dll 2013-12-02 16:29 - 2013-12-02 16:29 - 00193176 _____ () c:\Program Files\Optimizer Pro\OptProCrashSvc.dll 2011-07-05 20:11 - 2008-06-26 19:09 - 00167936 _____ () C:\Program Files\D-Link\DWA-131 revA\WlanWpsSvc.exe 2012-09-10 14:48 - 2010-01-21 01:52 - 00167528 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe 2009-08-10 15:59 - 2009-08-10 15:59 - 00068128 ____C () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nv_common.dll 2009-08-10 15:59 - 2009-08-10 15:59 - 00436768 ____C () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\SpecialCase.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2009-07-14 01:42 - 2009-07-14 03:15 - 00064000 _____ () C:\Windows\system32\BWContextHandler.dll 2011-07-05 20:11 - 2009-08-06 16:15 - 00376832 _____ () C:\Program Files\D-Link\DWA-131 revA\WlanDll.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf 2013-02-14 16:46 - 2013-02-14 16:46 - 01044048 _____ () C:\Program Files\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll 2014-06-17 08:45 - 2013-09-02 22:35 - 00709584 ____C () C:\Program Files\Google\Chrome\Application\29.0.1547.66\libglesv2.dll 2014-06-17 08:45 - 2013-09-02 22:35 - 00099792 ____C () C:\Program Files\Google\Chrome\Application\29.0.1547.66\libegl.dll 2014-06-17 08:45 - 2013-09-02 22:35 - 04053456 ____C () C:\Program Files\Google\Chrome\Application\29.0.1547.66\pdf.dll 2014-06-17 08:45 - 2013-09-02 22:35 - 00410576 ____C () C:\Program Files\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll 2014-06-17 08:45 - 2013-09-02 22:35 - 01604560 ____C () C:\Program Files\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll 2014-06-17 08:45 - 2013-09-02 22:35 - 13599184 ____C () C:\Program Files\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:373E1720 ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/11/2014 11:33:29 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/11/2014 10:42:11 AM) (Source: Garmin Core Update Service) (EventID: 0) (User: ) Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen Error: (07/09/2014 00:04:49 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: prevhost.exe, Version: 6.1.7601.17562, Zeitstempel: 0x4d5dee89 Name des fehlerhaften Moduls: pdfprevhndlr.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x536b4629 Ausnahmecode: 0xc0000005 Fehleroffset: 0x5bdb9530 ID des fehlerhaften Prozesses: 0x102c Startzeit der fehlerhaften Anwendung: 0xprevhost.exe0 Pfad der fehlerhaften Anwendung: prevhost.exe1 Pfad des fehlerhaften Moduls: prevhost.exe2 Berichtskennung: prevhost.exe3 Error: (07/09/2014 00:04:36 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: b1c Startzeit: 01cf9b49e61528d0 Endzeit: 40 Anwendungspfad: C:\Windows\Explorer.EXE Berichts-ID: 638cde81-0750-11e4-af82-5cd998b1224c Error: (07/08/2014 11:07:37 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/07/2014 01:30:54 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm iexplore.exe, Version 11.0.9600.17126 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 10d0 Startzeit: 01cf99d672782fe0 Endzeit: 20 Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe Berichts-ID: 1992eb09-05ca-11e4-9e52-5cd998b1224c Error: (07/07/2014 10:47:26 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/02/2014 10:19:30 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (07/01/2014 04:00:38 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (06/29/2014 03:20:32 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". System errors: ============= Error: (07/11/2014 10:41:53 AM) (Source: Parvdm) (EventID: 2) (User: ) Description: Zeiger für Geräteobjekt lässt sich nicht für Anschlussobjekt ermitteln. Error: (07/10/2014 09:05:49 AM) (Source: Parvdm) (EventID: 2) (User: ) Description: Zeiger für Geräteobjekt lässt sich nicht für Anschlussobjekt ermitteln. Error: (07/09/2014 08:48:48 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Server" wurde mit folgendem Fehler beendet: %%14 Error: (07/09/2014 08:48:40 AM) (Source: Parvdm) (EventID: 2) (User: ) Description: Zeiger für Geräteobjekt lässt sich nicht für Anschlussobjekt ermitteln. Error: (07/08/2014 10:04:06 AM) (Source: Parvdm) (EventID: 2) (User: ) Description: Zeiger für Geräteobjekt lässt sich nicht für Anschlussobjekt ermitteln. Error: (07/07/2014 01:29:47 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (07/07/2014 01:29:47 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (07/07/2014 08:43:19 AM) (Source: Parvdm) (EventID: 2) (User: ) Description: Zeiger für Geräteobjekt lässt sich nicht für Anschlussobjekt ermitteln. Error: (07/04/2014 04:26:50 PM) (Source: Parvdm) (EventID: 2) (User: ) Description: Zeiger für Geräteobjekt lässt sich nicht für Anschlussobjekt ermitteln. Error: (07/03/2014 08:13:43 AM) (Source: Parvdm) (EventID: 2) (User: ) Description: Zeiger für Geräteobjekt lässt sich nicht für Anschlussobjekt ermitteln. Microsoft Office Sessions: ========================= Error: (07/11/2014 11:33:29 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\common files\logishrd\sp6_uninstall\tools\64\AddBrowsers.exe Error: (07/11/2014 10:42:11 AM) (Source: Garmin Core Update Service) (EventID: 0) (User: ) Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen Error: (07/09/2014 00:04:49 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: prevhost.exe6.1.7601.175624d5dee89pdfprevhndlr.dll_unloaded0.0.0.0536b4629c00000055bdb9530102c01cf9b5d1ffc3d50C:\Windows\system32\prevhost.exepdfprevhndlr.dll7622b650-0750-11e4-af82-5cd998b1224c Error: (07/09/2014 00:04:36 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Explorer.EXE6.1.7601.17567b1c01cf9b49e61528d040C:\Windows\Explorer.EXE638cde81-0750-11e4-af82-5cd998b1224c Error: (07/08/2014 11:07:37 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\common files\logishrd\sp6_uninstall\tools\64\AddBrowsers.exe Error: (07/07/2014 01:30:54 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.9600.1712610d001cf99d672782fe020C:\Program Files\Internet Explorer\iexplore.exe1992eb09-05ca-11e4-9e52-5cd998b1224c Error: (07/07/2014 10:47:26 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\common files\logishrd\sp6_uninstall\tools\64\AddBrowsers.exe Error: (07/02/2014 10:19:30 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\common files\logishrd\sp6_uninstall\tools\64\AddBrowsers.exe Error: (07/01/2014 04:00:38 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\common files\logishrd\sp6_uninstall\tools\64\AddBrowsers.exe Error: (06/29/2014 03:20:32 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\common files\logishrd\sp6_uninstall\tools\64\AddBrowsers.exe CodeIntegrity Errors: =================================== Date: 2014-06-04 18:13:05.143 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-04 18:13:05.143 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-04 18:13:00.976 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-04 18:13:00.943 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-04 18:12:47.188 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-06-04 18:12:47.169 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\RtkAPO.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 72% Total physical RAM: 2046.44 MB Available physical RAM: 566.95 MB Total Pagefile: 4092.88 MB Available Pagefile: 2260.53 MB Total Virtual: 2047.88 MB Available Virtual: 1891.87 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:297.99 GB) (Free:121.08 GB) NTFS Drive e: (SAMSUNG) (Fixed) (Total:931.28 GB) (Free:771.5 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 168E168D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 5C9C6FAB) Partition 1: (Not Active) - (Size=932 GB) - (Type=0C) ==================== End Of Log ============================ |