|
Log-Analyse und Auswertung: Malware & SSL-FehlerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
17.07.2014, 20:55 | #1 | |
| Malware & SSL-Fehler Hi, hab hier ein wenig in einem anderen Thema mitgelesen http://www.trojaner-board.de/156452-...ml#post1330168 hab die selben Probleme wenn ich JRT durchlaufen lasse hab ich folgende Mitteilung erhalten was entfernt wurde Zitat:
Komm nicht weiter was ich noch tun kann hoffe das reicht an beschreibung konnte in dem anderen Thema leider nicht posten auf grund der Forenregeln wenn nicht beschreib ichs gern auch näher. Danke schonmal |
17.07.2014, 20:59 | #2 |
/// the machine /// TB-Ausbilder | Malware & SSL-Fehler hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
17.07.2014, 21:05 | #3 |
| Malware & SSL-Fehler Einmal die FRST
__________________FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-07-2014 01 Ran by Pun1sher (administrator) on PUN1SHER-PC on 17-07-2014 22:01:47 Running from C:\Users\Pun1sher\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AdminService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Windows\SysWOW64\srvany.exe () C:\Windows\KMService.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe () C:\Program Files (x86)\Universal Updater\UpdaterService.exe () C:\ExpressGateUtil\VAWinService.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (ASUS) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (ASUS) C:\Windows\AsScrPro.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe () C:\ExpressGateUtil\VAWinAgent.exe (Windows (R) Win 7 DDK provider) C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe () C:\Program Files (x86)\Universal Updater\CrashMon.exe () C:\Program Files (x86)\Isis\isis.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2168424 2010-10-13] (Realtek Semiconductor) HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10228224 2010-11-03] (Intel Corporation) HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.) HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-05-03] (Alcor Micro Corp.) HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-25] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-25] (Atheros Commnucations) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] () HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-23] () HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-09] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [VAWinAgent] => C:\ExpressGateUtil\VAWinAgent.exe [45448 2011-04-07] () HKLM-x32\...\Run: [FLxHCIm] => C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe [43008 2011-04-08] (Windows (R) Win 7 DDK provider) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKLM-x32\...\Run: [CrashMon] => C:\Program Files (x86)\Universal Updater\CrashMon.exe [388096 2014-06-18] () HKLM-x32\...\Run: [Isis] => C:\Program Files (x86)\Isis\isis.exe [330544 2014-07-15] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [Spotify Web Helper] => C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-17] (Spotify Ltd) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [UpdateMyDrivers] => C:\Program Files (x86)\SmartTweak\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [FixMyRegistry] => C:\Program Files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [Kies3PDLR.exe] => C:\Program Files (x86)\Samsung\Kies3\FirmwareUpdate\Kies3PDLR.exe Run Kies3 HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\MountPoints2: {b2627957-9e35-11e3-a8e6-742f681e17a6} - J:\Startme.exe HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\MountPoints2: {f0f13b89-97dd-11e2-b193-806e6f6e6963} - H:\InstAll.exe AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation) AppInit_DLLs-x32: ,C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== ProxyServer: 10.19.3.1:8080 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF8EA8836E25BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Atheros\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: anonymoX - C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\Extensions\client@anonymox.net.xpi [2013-07-16] FF Extension: Adblock Plus - C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-28] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-03-24] ==================== Services (Whitelisted) ================= R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros) [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-25] (Atheros Commnucations) [File not signed] R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [897088 2010-11-03] (Intel Corporation) [File not signed] R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-11-03] (Intel Corporation) [File not signed] R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed] R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2013-04-17] () [File not signed] R2 mitsijm2012; C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [848184 2010-12-08] (Autodesk, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [606136 2014-06-18] () R2 VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [91464 2011-03-25] () ==================== Drivers (Whitelisted) ==================== R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-01] (DT Soft Ltd) R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [56320 2011-04-08] (Fresco Logic) R1 isis; C:\Windows\System32\drivers\isis.sys [47408 2014-07-15] (Windows (R) Win 7 DDK provider) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) S3 Rockusb; C:\Windows\System32\DRIVERS\rockusb.sys [66704 2013-09-09] (Fuzhou Rockchip Electronics Co,Ltd.) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-16] () R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-08-15] (VMware, Inc.) U3 JavaQuickStarterService; S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-17 22:01 - 2014-07-17 22:01 - 02086912 _____ (Farbar) C:\Users\Pun1sher\Desktop\FRST64.exe 2014-07-17 22:01 - 2014-07-17 22:01 - 00020801 _____ () C:\Users\Pun1sher\Desktop\FRST.txt 2014-07-17 22:01 - 2014-07-17 22:01 - 00000000 ____D () C:\FRST 2014-07-17 21:46 - 2014-07-17 21:46 - 00129820 _____ () C:\Users\Pun1sher\AppData\Local\ars.cache 2014-07-17 21:36 - 2014-07-17 21:36 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\HijackThis - CHIP-Installer.exe 2014-07-17 21:21 - 2014-07-17 21:21 - 02405664 _____ (Trend Micro Inc.) C:\Users\Pun1sher\Desktop\HousecallLauncher64.exe 2014-07-17 21:21 - 2014-07-17 21:21 - 00000036 _____ () C:\Users\Pun1sher\AppData\Local\housecall.guid.cache 2014-07-17 21:14 - 2014-07-17 21:14 - 00004876 _____ () C:\Users\Pun1sher\Desktop\JRT.txt 2014-07-17 21:07 - 2014-07-17 21:07 - 00000000 ____D () C:\Windows\ERUNT 2014-07-17 21:06 - 2014-07-17 21:06 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\Junkware Removal Tool - CHIP-Installer.exe 2014-07-17 20:57 - 2014-07-17 20:57 - 00002049 _____ () C:\Users\Pun1sher\Desktop\Entfernen des Avira EU-Cleaners.lnk 2014-07-17 20:57 - 2014-07-17 20:57 - 00001993 _____ () C:\Users\Pun1sher\Desktop\Avira EU-Cleaner.lnk 2014-07-17 20:55 - 2014-07-17 21:23 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Nico Mak Computing 2014-07-17 20:54 - 2014-07-17 20:54 - 04892480 _____ (WinZip International LLC ) C:\Users\Pun1sher\Desktop\wzmp_8.exe 2014-07-15 14:51 - 2014-07-15 14:51 - 00047408 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\isis.sys 2014-07-14 23:43 - 2014-07-15 15:04 - 00000000 ____D () C:\Program Files (x86)\Isis 2014-07-10 19:46 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-10 19:46 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-10 19:46 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-10 19:46 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-10 19:46 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-10 19:46 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-10 19:46 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-10 19:46 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-10 19:45 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-10 19:44 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-10 19:44 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-10 19:44 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-10 19:44 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-10 19:44 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-10 19:44 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-10 19:44 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-10 19:44 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-10 19:44 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-10 19:44 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-10 19:44 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-10 19:44 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-10 19:44 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-10 19:44 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-10 19:44 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-10 19:44 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-10 19:44 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-10 19:44 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-10 19:44 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-10 19:44 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-10 19:44 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-10 19:44 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-10 19:44 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-10 19:44 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-10 19:44 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-10 19:44 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-10 19:44 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-10 19:44 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-10 19:44 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-10 19:44 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-10 19:44 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-10 19:44 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-10 19:44 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-10 19:44 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-10 19:44 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-10 19:44 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-10 19:44 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-10 19:44 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-10 19:44 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-10 19:44 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-10 19:44 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-10 19:44 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-10 19:44 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-10 19:44 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-10 19:44 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-10 19:44 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-10 19:44 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-10 19:44 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-10 19:44 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-10 19:44 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-10 19:44 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-10 19:44 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-10 19:44 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-10 19:44 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-10 19:44 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-10 19:44 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-10 19:42 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-10 19:42 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-10 19:42 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-06 11:59 - 2014-07-06 11:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-07-06 11:57 - 2014-07-06 11:57 - 00000000 ____D () C:\Program Files\SAMSUNG 2014-07-06 11:53 - 2014-07-06 11:53 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-07-06 11:53 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll 2014-07-06 11:52 - 2014-07-16 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\SelfMV 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\samsung 2014-06-23 14:05 - 2014-06-23 14:05 - 00000000 ____D () C:\Users\Pun1sher\Desktop\TB.Mathematischer.Formeln.N 2014-06-18 10:13 - 2014-06-18 10:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified Files and Folders ======= 2014-07-17 22:01 - 2014-07-17 22:01 - 02086912 _____ (Farbar) C:\Users\Pun1sher\Desktop\FRST64.exe 2014-07-17 22:01 - 2014-07-17 22:01 - 00020801 _____ () C:\Users\Pun1sher\Desktop\FRST.txt 2014-07-17 22:01 - 2014-07-17 22:01 - 00000000 ____D () C:\FRST 2014-07-17 21:46 - 2014-07-17 21:46 - 00129820 _____ () C:\Users\Pun1sher\AppData\Local\ars.cache 2014-07-17 21:36 - 2014-07-17 21:36 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\HijackThis - CHIP-Installer.exe 2014-07-17 21:33 - 2013-03-28 21:39 - 01844149 _____ () C:\Windows\WindowsUpdate.log 2014-07-17 21:30 - 2013-04-02 03:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-17 21:25 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-17 21:25 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-17 21:23 - 2014-07-17 20:55 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Nico Mak Computing 2014-07-17 21:21 - 2014-07-17 21:21 - 02405664 _____ (Trend Micro Inc.) C:\Users\Pun1sher\Desktop\HousecallLauncher64.exe 2014-07-17 21:21 - 2014-07-17 21:21 - 00000036 _____ () C:\Users\Pun1sher\AppData\Local\housecall.guid.cache 2014-07-17 21:17 - 2013-03-30 18:35 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini 2014-07-17 21:16 - 2013-10-03 21:29 - 00000000 ____D () C:\ProgramData\VMware 2014-07-17 21:16 - 2013-04-10 00:27 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-07-17 21:16 - 2013-03-30 18:35 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-07-17 21:16 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-17 21:16 - 2009-07-14 06:51 - 00092214 _____ () C:\Windows\setupact.log 2014-07-17 21:14 - 2014-07-17 21:14 - 00004876 _____ () C:\Users\Pun1sher\Desktop\JRT.txt 2014-07-17 21:07 - 2014-07-17 21:07 - 00000000 ____D () C:\Windows\ERUNT 2014-07-17 21:06 - 2014-07-17 21:06 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\Junkware Removal Tool - CHIP-Installer.exe 2014-07-17 20:57 - 2014-07-17 20:57 - 00002049 _____ () C:\Users\Pun1sher\Desktop\Entfernen des Avira EU-Cleaners.lnk 2014-07-17 20:57 - 2014-07-17 20:57 - 00001993 _____ () C:\Users\Pun1sher\Desktop\Avira EU-Cleaner.lnk 2014-07-17 20:54 - 2014-07-17 20:54 - 04892480 _____ (WinZip International LLC ) C:\Users\Pun1sher\Desktop\wzmp_8.exe 2014-07-16 18:06 - 2011-04-12 09:43 - 00712872 _____ () C:\Windows\system32\perfh007.dat 2014-07-16 18:06 - 2011-04-12 09:43 - 00155802 _____ () C:\Windows\system32\perfc007.dat 2014-07-16 18:06 - 2009-07-14 07:13 - 01657770 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-16 18:04 - 2013-03-30 18:25 - 00000000 ____D () C:\Users\Pun1sher\Documents\Bluetooth Folder 2014-07-16 17:30 - 2010-11-21 05:47 - 00485850 _____ () C:\Windows\PFRO.log 2014-07-16 16:59 - 2013-03-30 19:26 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\CrashDumps 2014-07-16 16:58 - 2013-10-12 18:46 - 00000000 ____D () C:\Users\Pun1sher\Documents\BioWare 2014-07-16 16:56 - 2014-04-27 21:43 - 00000000 ____D () C:\Program Files\Sweet Home 3D 2014-07-16 16:56 - 2014-03-05 19:16 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Adventure Company 2014-07-16 16:33 - 2014-07-06 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-07-16 16:33 - 2013-10-28 14:10 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Samsung 2014-07-16 16:33 - 2013-10-28 14:09 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-07-16 16:33 - 2013-03-28 23:08 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-15 23:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-07-15 15:04 - 2014-07-14 23:43 - 00000000 ____D () C:\Program Files (x86)\Isis 2014-07-15 15:04 - 2014-04-29 20:26 - 00000000 ____D () C:\Program Files (x86)\Addon Enabler 2014-07-15 15:03 - 2013-03-28 21:39 - 00000000 ____D () C:\Users\Pun1sher 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files\iTunes 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files\iPod 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-07-15 15:02 - 2013-06-09 19:18 - 00000000 ____D () C:\Users\Franzi 2014-07-15 15:02 - 2013-03-28 23:33 - 00000000 ____D () C:\ProgramData\P4G 2014-07-15 15:02 - 2013-03-28 23:21 - 00000000 ___HD () C:\ExpressGateUtil 2014-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-07-15 14:51 - 2014-07-15 14:51 - 00047408 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\isis.sys 2014-07-12 10:43 - 2009-07-14 06:45 - 05168528 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-12 10:41 - 2014-05-06 23:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-12 10:41 - 2011-04-12 09:54 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-12 10:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-12 10:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-10 19:49 - 2013-04-17 16:12 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-10 19:48 - 2013-07-18 18:18 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 19:45 - 2013-03-30 19:11 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-09 13:31 - 2013-04-02 03:38 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-09 13:31 - 2013-04-02 03:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 13:31 - 2013-03-28 21:43 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-08 12:32 - 2014-04-26 12:48 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Bilder 2014-07-08 09:35 - 2013-03-30 22:46 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Filme 2014-07-06 21:49 - 2013-03-29 16:41 - 00000000 ____D () C:\Users\Pun1sher\Desktop\JD Download 2014-07-06 21:43 - 2013-10-28 14:11 - 00000099 _____ () C:\Users\Public\LMDebug.log 2014-07-06 15:45 - 2014-01-14 18:08 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Dokumente 2014-07-06 11:59 - 2014-07-06 11:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-07-06 11:57 - 2014-07-06 11:57 - 00000000 ____D () C:\Program Files\SAMSUNG 2014-07-06 11:57 - 2013-10-28 14:10 - 00000000 ____D () C:\ProgramData\Samsung 2014-07-06 11:53 - 2014-07-06 11:53 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-07-06 11:53 - 2013-03-28 23:08 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\Downloaded Installations 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\SelfMV 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\samsung 2014-07-03 12:19 - 2014-01-19 19:57 - 00000000 ____D () C:\Users\Pun1sher\Documents\Outlook-Dateien 2014-06-30 04:09 - 2014-07-10 19:46 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-10 19:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-27 10:37 - 2013-07-03 16:57 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Youtube 2014-06-23 14:05 - 2014-06-23 14:05 - 00000000 ____D () C:\Users\Pun1sher\Desktop\TB.Mathematischer.Formeln.N 2014-06-22 15:23 - 2013-03-29 16:43 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Spotify 2014-06-22 15:23 - 2013-03-29 16:43 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\Spotify 2014-06-22 15:06 - 2013-03-29 01:55 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\vlc 2014-06-20 22:14 - 2014-07-10 19:44 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-06-20 21:39 - 2014-07-10 19:44 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-06-19 03:39 - 2014-07-10 19:44 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-19 03:06 - 2014-07-10 19:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-19 03:06 - 2014-07-10 19:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-19 02:48 - 2014-07-10 19:44 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-19 02:42 - 2014-07-10 19:44 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-19 02:42 - 2014-07-10 19:44 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-19 02:41 - 2014-07-10 19:44 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-06-19 02:41 - 2014-07-10 19:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-19 02:32 - 2014-07-10 19:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-19 02:31 - 2014-07-10 19:44 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-19 02:26 - 2014-07-10 19:44 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-19 02:24 - 2014-07-10 19:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-19 02:24 - 2014-07-10 19:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-19 02:23 - 2014-07-10 19:44 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-19 02:16 - 2014-07-10 19:44 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-06-19 02:14 - 2014-07-10 19:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-19 02:13 - 2014-03-02 21:48 - 00000000 ____D () C:\Program Files (x86)\Universal Updater 2014-06-19 02:09 - 2014-07-10 19:44 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-19 01:59 - 2014-07-10 19:44 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-19 01:56 - 2014-07-10 19:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-06-19 01:53 - 2014-07-10 19:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-19 01:51 - 2014-07-10 19:44 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-19 01:50 - 2014-07-10 19:44 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-19 01:48 - 2014-07-10 19:44 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-19 01:39 - 2014-07-10 19:44 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-19 01:38 - 2014-07-10 19:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-06-19 01:37 - 2014-07-10 19:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-06-19 01:36 - 2014-07-10 19:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-06-19 01:35 - 2014-07-10 19:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-06-19 01:33 - 2014-07-10 19:44 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-19 01:32 - 2014-07-10 19:44 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-06-19 01:28 - 2014-07-10 19:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-06-19 01:28 - 2014-07-10 19:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-06-19 01:27 - 2014-07-10 19:44 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-19 01:27 - 2014-07-10 19:44 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-19 01:25 - 2014-07-10 19:44 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-06-19 01:23 - 2014-07-10 19:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-06-19 01:22 - 2014-07-10 19:44 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-06-19 01:12 - 2014-07-10 19:44 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-06-19 01:06 - 2014-07-10 19:44 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-06-19 01:01 - 2014-07-10 19:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-06-19 00:59 - 2014-07-10 19:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-06-19 00:58 - 2014-07-10 19:44 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-19 00:58 - 2014-07-10 19:44 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-06-19 00:52 - 2014-07-10 19:44 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-06-19 00:51 - 2014-07-10 19:44 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-19 00:49 - 2014-07-10 19:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-06-19 00:46 - 2014-07-10 19:44 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-06-19 00:45 - 2014-07-10 19:44 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-06-19 00:35 - 2014-07-10 19:44 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-06-19 00:34 - 2014-07-10 19:44 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-19 00:15 - 2014-07-10 19:44 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-19 00:13 - 2014-07-10 19:44 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-06-19 00:09 - 2014-07-10 19:44 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-06-19 00:07 - 2014-07-10 19:44 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-06-18 19:30 - 2013-03-29 16:12 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2014-06-18 13:20 - 2013-03-28 22:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-06-18 10:13 - 2014-06-18 10:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-18 04:18 - 2014-07-10 19:46 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-06-18 03:51 - 2014-07-10 19:46 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-06-18 03:10 - 2014-07-10 19:46 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys Some content of TEMP: ==================== C:\Users\Franzi\AppData\Local\Temp\avgnt.exe C:\Users\Pun1sher\AppData\Local\Temp\AcDeltree.exe C:\Users\Pun1sher\AppData\Local\Temp\AskSLib.dll C:\Users\Pun1sher\AppData\Local\Temp\avgnt.exe C:\Users\Pun1sher\AppData\Local\Temp\bitool.dll C:\Users\Pun1sher\AppData\Local\Temp\EADA092.exe C:\Users\Pun1sher\AppData\Local\Temp\Execute2App.exe C:\Users\Pun1sher\AppData\Local\Temp\FixMyRegistry.exe C:\Users\Pun1sher\AppData\Local\Temp\hd_streamer_install_new.exe C:\Users\Pun1sher\AppData\Local\Temp\icqsetup.exe C:\Users\Pun1sher\AppData\Local\Temp\msvcp90.dll C:\Users\Pun1sher\AppData\Local\Temp\msvcr90.dll C:\Users\Pun1sher\AppData\Local\Temp\ose00000.exe C:\Users\Pun1sher\AppData\Local\Temp\ose00001.exe C:\Users\Pun1sher\AppData\Local\Temp\setup.exe C:\Users\Pun1sher\AppData\Local\Temp\SpeedUpMyComputer.exe C:\Users\Pun1sher\AppData\Local\Temp\uninst1.exe C:\Users\Pun1sher\AppData\Local\Temp\Uninstall.exe C:\Users\Pun1sher\AppData\Local\Temp\UninstallEADM.dll C:\Users\Pun1sher\AppData\Local\Temp\vsdel.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-15 23:07 ==================== End Of Log ============================ --- --- --- --- --- --- und einmal die Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-07-2014 01 Ran by Pun1sher at 2014-07-17 22:02:12 Running from C:\Users\Pun1sher\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== abgx360 v1.0.6 (HKLM-x32\...\abgx360) (Version: - ) Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 1.1.377 - Adobe Systems Incorporated) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.00 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (HKLM-x32\...\{FF2A5498-4EFE-430F-A138-7EB365DBEBAD}) (Version: 11.6.1.629 - Adobe Systems, Inc) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{1F7424F8-F992-48BC-90EF-7C4DB0405E3F}) (Version: 1.7.17.25416 - Ihr Firmenname) Alcor Micro USB Card Reader (x32 Version: 1.7.17.25416 - Ihr Firmenname) Hidden Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.2 - Sereby Corporation) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS) ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.43 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0030 - ASUS) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus) ASUS_N3_Series (HKLM-x32\...\ASUS_N3_Series) (Version: 1.0.0001 - ASUS) Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS) Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul) (Version: 1.0.0.18 - Autodesk) Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul (Version: 1.0.0.18 - Autodesk) Hidden Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul Language Pack (Version: 1.0.0.18 - Autodesk) Hidden Autodesk Inventor Professional 2012 (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 Deutsch (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.0.16000.0000 - Autodesk) Autodesk Inventor Professional 2012 Language Pack - Deutsch (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk) Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.) Autodesk Vault 2012 (Client) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Autodesk Vault 2012 (Client) German Language Pack (Version: 16.0.56.200 - Autodesk, Inc.) Hidden AVNavigator 2013.I (HKCU\...\AVNavigator 2013.I) (Version: 1.14.0.005.1 - PIONEER CORPORATION) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.45 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Call of Duty Ghosts MULTI-2 1.0.1 (HKLM-x32\...\Call of Duty Ghosts MULTI-2 1.0.1) (Version: - ) Command & Conquer(TM) Generäle (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts) Command & Conquer(TM) Generäle (x32 Version: 0.50.0000 - Electronic Arts) Hidden Common Desktop Agent (Version: 1.62.0 - OEM) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft) DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation) DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation) Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited) ETDWare PS/2-x64 7.0.5.15_WHQL (HKLM\...\Elantech) (Version: 7.0.5.15 - ELAN Microelectronics Corp.) ExpressGateCloud (HKLM-x32\...\InstallShield_{36B0DC39-3282-40EB-8587-B875CE46C3A7}) (Version: 2.6.27.160 - VideACE Co.) ExpressGateCloud (x32 Version: 2.6.27.160 - VideACE Co.) Hidden Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Free Audio CD Burner version 2.0.23.422 (HKLM-x32\...\Free Audio CD Burner_is1) (Version: 2.0.23.422 - DVDVideoSoft Ltd.) Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com) Free YouTube Download version 3.2.3.610 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.3.610 - DVDVideoSoft Ltd.) Fresco Logic USB3.0 Host Controller (HKLM\...\{BE8CF365-1CFE-49D7-A4C2-A943526274C4}) (Version: 3.0.119.1 - Fresco Logic Inc.) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.0.0.0454 - Intel Corporation) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java(TM) 7 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217000FF}) (Version: 7.0.0 - Oracle) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Microsoft .NET Framework 1.1 German Language Pack (HKLM-x32\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 1.1 Security Update (KB2416447) (HKLM-x32\...\M2416447) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - ) Microsoft .NET Framework 1.1 SP1 + KB928366 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 SP1 + KB928366 (x32 Version: 1.1.4322 - Microsoft) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{79BF7CB8-1E09-489F-9547-DB3EE8EA3F16}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{86177DAE-38B1-49DD-912E-35CB703AB779}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version: - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MP3 to WAV RES (HKLM-x32\...\MP3 to WAV RES) (Version: - ) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA 3D Vision Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.82 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Optimus Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation) OpenProj (HKLM-x32\...\{13702021-43FB-480C-912F-D9B74A538288}) (Version: 1.4.0 - Serena Software Inc.) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6221 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.45 - Piriform) Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.02.74.00(06.11.2012) - Samsung Electronics Co., Ltd.) Samsung ML-2160 Series (HKLM-x32\...\Samsung ML-2160 Series) (Version: 1.10 (22.11.2012) - Samsung Electronics Co., Ltd.) Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.) Schnell-Deinstallations-Tool für Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden SonicMaster (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.00.0000 - Virage Logic, Corp.) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) tools-linux (x32 Version: 9.6.0.1295980 - VMware, Inc.) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden Überwachungstool für die Intel® Turbo-Boost-Technik (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.400.4 - Intel) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) USB2.0 UVC 2M WebCam (HKLM\...\USB2.0 UVC 2M WebCam) (Version: 5.8.55133.208 - Sonix) VBA (2627.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden VBA (2701.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN) VMware Player (HKLM-x32\...\VMware_Player) (Version: 6.0.0 - VMware, Inc) VMware Player (Version: 6.0.0 - VMware, Inc.) Hidden Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation) Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.0 - ASUS) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS) Yu-Gi-Oh! Power of Chaos KAIBA THE REVENGE (HKLM-x32\...\{485C9280-B899-4D46-86F3-B3E459636EE5}) (Version: 1.00.0000 - KONAMI) ==================== Restore Points ========================= 06-07-2014 09:51:18 Installed Samsung Kies3 06-07-2014 09:53:21 Installed Samsung Kies3 06-07-2014 19:01:35 Windows-Sicherung 08-07-2014 07:38:41 Windows Update 10-07-2014 17:43:09 Windows Update 10-07-2014 18:13:59 Windows Update 14-07-2014 08:36:31 Windows-Sicherung 15-07-2014 12:30:46 Windows Update 15-07-2014 12:56:57 Removed Samsung Kies3 15-07-2014 12:59:40 Wiederherstellungsvorgang 15-07-2014 13:14:28 Windows Update 16-07-2014 14:32:30 Removed Samsung Kies3 ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-03-24 21:26 - 00000913 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 lmlicenses.wip4.adobe.com 127.0.0.1 lm.licenses.adobe.com ==================== Scheduled Tasks (whitelisted) ============= Task: {17F1D77A-8C96-49D4-A7C2-242F4A2E2012} - System32\Tasks\{0F7DB7A6-2C5C-4262-AE6E-6B0CD61EEAAE} => C:\Users\Pun1sher\Desktop\wormsarm\Worms.Armageddon-ORIGIN\Worms Armageddon\Wa.exe Task: {181FD012-81A5-4289-AF4E-24F35767A011} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-01] (ASUS) Task: {22D00F9B-52E4-4254-BD49-D9B11E67C619} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2013-01-11] (ASUSTek Computer Inc.) Task: {23D272CF-B550-44F1-A7CA-527E0E321B25} - System32\Tasks\{EA6D2851-4DD1-4E15-9F71-D21484407B69} => C:\Users\Pun1sher\Desktop\BMW_Carsoft_6.5_SP1_Cracks\CarSoft 6.5\Setup.exe Task: {25CC6007-1CD2-4273-9D2E-6985FA096E85} - System32\Tasks\{1DFC906C-DB2C-4FDE-86E9-ACFBDFD3EA4F} => C:\Program Files (x86)\Microtek\ScanWizard 5\ScanWizard5.exe Task: {31A9A4EE-CB31-48E5-AB35-EA3933C9596E} - System32\Tasks\{D043C9C4-7838-42F4-9106-CF88D8F29A69} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {376B5C79-7AE3-4D2A-B9E2-B7E36530784A} - System32\Tasks\{88DB5928-7B62-49F9-A08C-E7446C6E1943} => D:\EXSL\SERVER\slkffs.exe Task: {3A074C7D-9546-4C4C-AFE5-201A588AB1EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {5119CEFD-9FF8-4E7B-84C2-99F1857A34A0} - System32\Tasks\{004B2FEB-D3C3-4AD4-9A4C-EE3B19C8A9DF} => C:\Users\Pun1sher\Desktop\wormsarm\Worms.Armageddon-ORIGIN\Worms Armageddon\Wa.exe Task: {53481977-2141-48CB-B6E4-3FEF0D158E95} - System32\Tasks\{E5A2DD27-BB24-401F-B840-207B24B0F9D9} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {5C8684BC-50D3-4258-BB44-4AF94C752C00} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {7569289C-EFED-4934-A3E5-5A9016BC36DF} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-12-17] (ASUSTek Computer Inc.) Task: {7ADF3156-F69D-4AE1-8687-082AFC623DB7} - System32\Tasks\{C2B018E4-9ACC-40F5-8A46-152B25590DA9} => E:\Hitman\Hitman Absolution Deluxe Professional Edition\HMA.exe Task: {7C1E5963-E16C-4F54-8002-BFA83C33CC0B} - System32\Tasks\{93E6E800-ED2E-4702-8829-2A66B74A0564} => C:\Program Files (x86)\Microtek\ScanWizard 5\ScanWizard5.exe Task: {7F0977BA-502A-40C0-9A6A-E931E2C886DB} - System32\Tasks\{E32FA199-A037-491D-97F1-B19F9372E052} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {8345D484-5CD1-4421-962F-CB3CBD4FC049} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {94D928C7-B1F5-4D24-8E6B-127769535B82} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS) Task: {A44F1DAB-6CBA-455D-8E8C-4CE25C960E6A} - System32\Tasks\{B88BB7D5-7F10-48DF-B6E8-471F7524554E} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {AE202B72-D27F-40FF-94D0-B5A3669751BC} - System32\Tasks\{0DE2E98B-E66A-464F-AAFF-D147CF702541} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {B93C66A2-05A9-4932-892D-8758AF4BF8C0} - System32\Tasks\{95588F81-2601-433A-B70C-86D840B78E8F} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {D607E2B1-7642-480C-8C30-31312182E293} - System32\Tasks\{FD690738-6AB6-44F4-86D2-79A2E0241EAE} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {D94802D5-45ED-4B1E-B52A-0CF868F3302B} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {DC0E306F-BF46-45DC-9F36-F49463DFDC31} - System32\Tasks\{B1215417-2BB1-4C95-81F8-CCC81EF2EA94} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {E901B31F-4118-426F-9770-2035F4465D96} - System32\Tasks\{8310E8AB-6569-4E5B-B48F-7D95AEC882BF} => D:\EXSL\SERVER\slkffs.exe Task: {F9F10200-A50B-4047-8955-25AAD0384EB8} - System32\Tasks\{45FBF7C1-30CC-4FF4-B4C0-B054FC54BAEF} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-28 14:10 - 2011-04-25 13:24 - 00034304 _____ () C:\Windows\System32\ssj1mlm.dll 2013-04-10 01:01 - 2013-11-11 17:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-04-17 20:34 - 2013-04-17 20:33 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe 2013-04-17 20:34 - 2013-04-17 20:33 - 00077824 _____ () C:\Windows\KMService.exe 2014-06-18 15:51 - 2014-06-18 15:51 - 00606136 _____ () C:\Program Files (x86)\Universal Updater\UpdaterService.exe 2011-03-25 18:55 - 2011-03-25 18:55 - 00091464 _____ () C:\ExpressGateUtil\VAWinService.exe 2010-07-14 17:11 - 2010-07-14 17:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll 2010-04-02 20:21 - 2008-10-01 00:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2013-03-30 18:33 - 2007-11-30 12:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2013-03-29 00:58 - 2011-01-27 09:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-02-20 23:23 - 2012-02-20 23:23 - 00456704 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe 2012-02-20 23:23 - 2012-02-20 23:23 - 00051200 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2010-09-23 17:53 - 2010-09-23 17:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 2011-04-07 22:26 - 2011-04-07 22:26 - 00045448 _____ () C:\ExpressGateUtil\VAWinAgent.exe 2014-06-18 15:50 - 2014-06-18 15:50 - 00388096 _____ () C:\Program Files (x86)\Universal Updater\CrashMon.exe 2014-07-15 14:51 - 2014-07-15 14:51 - 00330544 _____ () C:\Program Files (x86)\Isis\isis.exe 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00157000 _____ () C:\ExpressGateUtil\libexpat.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00061768 _____ () C:\ExpressGateUtil\netProfileDatabase.DLL 2013-08-27 12:42 - 2013-08-27 12:42 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll 2012-09-23 21:43 - 2012-09-23 21:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu 2014-04-04 10:25 - 2014-04-04 10:25 - 00102400 _____ () C:\Program Files (x86)\Isis\nfapi.dll 2014-06-05 06:41 - 2014-06-05 06:41 - 00331776 _____ () C:\Program Files (x86)\Isis\ProtocolFilters.dll 2014-06-18 10:13 - 2014-06-18 10:13 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-07-09 13:31 - 2014-07-09 13:31 - 17029808 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: Spotify => "C:\Users\Pun1sher\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" ==================== Faulty Device Manager Devices ============= Name: VMware Virtual Ethernet Adapter for VMnet1 Description: VMware Virtual Ethernet Adapter for VMnet1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/17/2014 09:18:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (07/17/2014 09:17:38 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/17/2014 09:17:38 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/17/2014 09:17:38 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/17/2014 09:17:38 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/17/2014 09:17:38 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/17/2014 09:17:38 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/17/2014 09:17:28 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/17/2014 09:17:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/17/2014 09:17:28 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/17/2014 09:15:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Microsoft Office Sessions: ========================= Error: (07/17/2014 09:18:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2014-02-20 20:04:54.215 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:54.174 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:13.031 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:13.000 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:03:30.131 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:03:30.038 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:59:02.831 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:59:02.800 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:58:21.530 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:58:21.495 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 28% Total physical RAM: 12198.78 MB Available physical RAM: 8683.11 MB Total Pagefile: 24395.74 MB Available Pagefile: 21015.72 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:293.03 GB) (Free:141.41 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Programme) (Fixed) (Total:380.6 GB) (Free:377.02 GB) NTFS Drive e: (Spiele) (Fixed) (Total:349.32 GB) (Free:315.79 GB) NTFS Drive f: (Daten) (Fixed) (Total:349.31 GB) (Free:249.71 GB) NTFS Drive g: (Sicherung) (Fixed) (Total:25 GB) (Free:0 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 2F851246) Partition 1: (Not Active) - (Size=25 GB) - (Type=07 NTFS) Partition 2: (Active) - (Size=293 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=381 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 699 GB) (Disk ID: 707B3822) Partition 1: (Not Active) - (Size=699 GB) - (Type=OF Extended) ==================== End Of Log ============================ diese isis datei die sich da am 14.07 erstellt haben sollt oder geändert wo auch im anderen Thema die rede davon war kann da gar nicht entstanden sein zumindest nicht mit meinem einverständnis da der pc da nur für musik und internetsuche genutzt wurde Geändert von CarpeNoctem (17.07.2014 um 21:19 Uhr) |
18.07.2014, 18:33 | #4 | |
/// the machine /// TB-Ausbilder | Malware & SSL-FehlerZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
18.07.2014, 19:14 | #5 |
| Malware & SSL-Fehler Jop mach ich Sonntag des war ma ne schulversion wo nicht komplett nutzbar war für ein Projekt nutz ich eh nimma, soll ich dann nochma die zwei Protokolle hochladen? Danke Scho ma für die Antwort |
19.07.2014, 20:18 | #6 |
/// the machine /// TB-Ausbilder | Malware & SSL-Fehler Ja, Haken setzen bei Addition und dann nochmal mit FRST scannen und beide Logs posten.
__________________ --> Malware & SSL-Fehler |
20.07.2014, 12:19 | #7 |
| Malware & SSL-Fehler FRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-07-2014 Ran by Pun1sher (administrator) on PUN1SHER-PC on 20-07-2014 12:55:51 Running from C:\Users\Pun1sher\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AdminService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Windows\SysWOW64\srvany.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe () C:\Windows\KMService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe () C:\Program Files (x86)\Universal Updater\UpdaterService.exe () C:\ExpressGateUtil\VAWinService.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUS) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (ASUS) C:\Windows\AsScrPro.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe () C:\ExpressGateUtil\VAWinAgent.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe () C:\Program Files (x86)\Universal Updater\CrashMon.exe () C:\Program Files (x86)\Isis\isis.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2168424 2010-10-13] (Realtek Semiconductor) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.) HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-05-03] (Alcor Micro Corp.) HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-25] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-25] (Atheros Commnucations) HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] () HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-23] () HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-09] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [VAWinAgent] => C:\ExpressGateUtil\VAWinAgent.exe [45448 2011-04-07] () HKLM-x32\...\Run: [FLxHCIm] => C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe [43008 2011-04-08] (Windows (R) Win 7 DDK provider) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKLM-x32\...\Run: [CrashMon] => C:\Program Files (x86)\Universal Updater\CrashMon.exe [388096 2014-06-18] () HKLM-x32\...\Run: [Isis] => C:\Program Files (x86)\Isis\isis.exe [330544 2014-07-15] () Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [Spotify Web Helper] => C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-17] (Spotify Ltd) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [UpdateMyDrivers] => C:\Program Files (x86)\SmartTweak\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [FixMyRegistry] => C:\Program Files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [Kies3PDLR.exe] => C:\Program Files (x86)\Samsung\Kies3\FirmwareUpdate\Kies3PDLR.exe Run Kies3 HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\MountPoints2: {b2627957-9e35-11e3-a8e6-742f681e17a6} - J:\Startme.exe HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\MountPoints2: {f0f13b89-97dd-11e2-b193-806e6f6e6963} - H:\InstAll.exe AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation) AppInit_DLLs-x32: ,C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== ProxyServer: 10.19.3.1:8080 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF8EA8836E25BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Atheros\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) FireFox: ======== FF ProfilePath: C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: anonymoX - C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\Extensions\client@anonymox.net.xpi [2013-07-16] FF Extension: Adblock Plus - C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-28] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-03-24] ==================== Services (Whitelisted) ================= R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros) [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-25] (Atheros Commnucations) [File not signed] R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [897088 2010-11-03] (Intel Corporation) [File not signed] R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-11-03] (Intel Corporation) [File not signed] R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed] R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2013-04-17] () [File not signed] R2 mitsijm2012; C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [848184 2010-12-08] (Autodesk, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [606136 2014-06-18] () R2 VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [91464 2011-03-25] () ==================== Drivers (Whitelisted) ==================== R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-01] (DT Soft Ltd) R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [56320 2011-04-08] (Fresco Logic) R1 isis; C:\Windows\System32\drivers\isis.sys [47408 2014-07-15] (Windows (R) Win 7 DDK provider) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) S3 Rockusb; C:\Windows\System32\DRIVERS\rockusb.sys [66704 2013-09-09] (Fuzhou Rockchip Electronics Co,Ltd.) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-16] () R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-08-15] (VMware, Inc.) U3 JavaQuickStarterService; S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-20 12:54 - 2014-07-20 12:56 - 00020182 _____ () C:\Users\Pun1sher\Desktop\FRST.txt 2014-07-20 12:54 - 2014-07-20 12:54 - 00000000 ____D () C:\Users\Pun1sher\Desktop\FRST-OlderVersion 2014-07-17 22:01 - 2014-07-20 12:55 - 00000000 ____D () C:\FRST 2014-07-17 22:01 - 2014-07-20 12:54 - 02089984 _____ (Farbar) C:\Users\Pun1sher\Desktop\FRST64.exe 2014-07-17 21:46 - 2014-07-17 21:46 - 00129820 _____ () C:\Users\Pun1sher\AppData\Local\ars.cache 2014-07-17 21:36 - 2014-07-17 21:36 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\HijackThis - CHIP-Installer.exe 2014-07-17 21:21 - 2014-07-17 21:21 - 02405664 _____ (Trend Micro Inc.) C:\Users\Pun1sher\Desktop\HousecallLauncher64.exe 2014-07-17 21:21 - 2014-07-17 21:21 - 00000036 _____ () C:\Users\Pun1sher\AppData\Local\housecall.guid.cache 2014-07-17 21:14 - 2014-07-17 21:14 - 00004876 _____ () C:\Users\Pun1sher\Desktop\JRT.txt 2014-07-17 21:07 - 2014-07-17 21:07 - 00000000 ____D () C:\Windows\ERUNT 2014-07-17 21:06 - 2014-07-17 21:06 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\Junkware Removal Tool - CHIP-Installer.exe 2014-07-17 20:55 - 2014-07-17 21:23 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Nico Mak Computing 2014-07-15 14:51 - 2014-07-15 14:51 - 00047408 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\isis.sys 2014-07-14 23:43 - 2014-07-15 15:04 - 00000000 ____D () C:\Program Files (x86)\Isis 2014-07-10 19:46 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-10 19:46 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-10 19:46 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-10 19:46 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-10 19:46 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-10 19:46 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-10 19:46 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-10 19:46 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-10 19:45 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-10 19:44 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-10 19:44 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-10 19:44 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-10 19:44 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-10 19:44 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-10 19:44 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-10 19:44 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-10 19:44 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-10 19:44 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-10 19:44 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-10 19:44 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-10 19:44 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-10 19:44 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-10 19:44 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-10 19:44 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-10 19:44 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-10 19:44 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-10 19:44 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-10 19:44 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-10 19:44 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-10 19:44 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-10 19:44 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-10 19:44 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-10 19:44 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-10 19:44 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-10 19:44 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-10 19:44 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-10 19:44 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-10 19:44 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-10 19:44 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-10 19:44 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-10 19:44 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-10 19:44 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-10 19:44 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-10 19:44 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-10 19:44 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-10 19:44 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-10 19:44 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-10 19:44 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-10 19:44 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-10 19:44 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-10 19:44 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-10 19:44 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-10 19:44 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-10 19:44 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-10 19:44 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-10 19:44 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-10 19:44 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-10 19:44 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-10 19:44 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-10 19:44 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-10 19:44 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-10 19:44 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-10 19:44 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-10 19:44 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-10 19:44 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-10 19:42 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-10 19:42 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-10 19:42 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-06 11:59 - 2014-07-06 11:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-07-06 11:57 - 2014-07-06 11:57 - 00000000 ____D () C:\Program Files\SAMSUNG 2014-07-06 11:53 - 2014-07-06 11:53 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-07-06 11:53 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll 2014-07-06 11:52 - 2014-07-16 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\SelfMV 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\samsung 2014-06-23 14:05 - 2014-06-23 14:05 - 00000000 ____D () C:\Users\Pun1sher\Desktop\TB.Mathematischer.Formeln.N ==================== One Month Modified Files and Folders ======= 2014-07-20 12:56 - 2014-07-20 12:54 - 00020182 _____ () C:\Users\Pun1sher\Desktop\FRST.txt 2014-07-20 12:55 - 2014-07-17 22:01 - 00000000 ____D () C:\FRST 2014-07-20 12:54 - 2014-07-20 12:54 - 00000000 ____D () C:\Users\Pun1sher\Desktop\FRST-OlderVersion 2014-07-20 12:54 - 2014-07-17 22:01 - 02089984 _____ (Farbar) C:\Users\Pun1sher\Desktop\FRST64.exe 2014-07-20 12:52 - 2013-03-28 23:07 - 00000000 ____D () C:\ProgramData\Adobe 2014-07-20 12:51 - 2013-03-28 23:07 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-07-20 12:51 - 2013-03-28 22:53 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Adobe 2014-07-20 12:48 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-20 12:48 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-20 12:47 - 2013-03-28 21:39 - 01888356 _____ () C:\Windows\WindowsUpdate.log 2014-07-20 12:40 - 2013-10-03 21:29 - 00000000 ____D () C:\ProgramData\VMware 2014-07-20 12:40 - 2013-03-30 18:35 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-07-20 12:40 - 2013-03-30 18:35 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini 2014-07-20 12:39 - 2013-04-10 00:27 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-07-20 12:39 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-20 12:39 - 2009-07-14 06:51 - 00092550 _____ () C:\Windows\setupact.log 2014-07-17 23:07 - 2013-03-30 18:25 - 00000000 ____D () C:\Users\Pun1sher\Documents\Bluetooth Folder 2014-07-17 22:51 - 2013-03-29 16:12 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2014-07-17 22:30 - 2013-04-02 03:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-17 21:46 - 2014-07-17 21:46 - 00129820 _____ () C:\Users\Pun1sher\AppData\Local\ars.cache 2014-07-17 21:36 - 2014-07-17 21:36 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\HijackThis - CHIP-Installer.exe 2014-07-17 21:23 - 2014-07-17 20:55 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Nico Mak Computing 2014-07-17 21:21 - 2014-07-17 21:21 - 02405664 _____ (Trend Micro Inc.) C:\Users\Pun1sher\Desktop\HousecallLauncher64.exe 2014-07-17 21:21 - 2014-07-17 21:21 - 00000036 _____ () C:\Users\Pun1sher\AppData\Local\housecall.guid.cache 2014-07-17 21:14 - 2014-07-17 21:14 - 00004876 _____ () C:\Users\Pun1sher\Desktop\JRT.txt 2014-07-17 21:07 - 2014-07-17 21:07 - 00000000 ____D () C:\Windows\ERUNT 2014-07-17 21:06 - 2014-07-17 21:06 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\Junkware Removal Tool - CHIP-Installer.exe 2014-07-16 18:06 - 2011-04-12 09:43 - 00712872 _____ () C:\Windows\system32\perfh007.dat 2014-07-16 18:06 - 2011-04-12 09:43 - 00155802 _____ () C:\Windows\system32\perfc007.dat 2014-07-16 18:06 - 2009-07-14 07:13 - 01657770 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-16 17:30 - 2010-11-21 05:47 - 00485850 _____ () C:\Windows\PFRO.log 2014-07-16 16:59 - 2013-03-30 19:26 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\CrashDumps 2014-07-16 16:58 - 2013-10-12 18:46 - 00000000 ____D () C:\Users\Pun1sher\Documents\BioWare 2014-07-16 16:56 - 2014-04-27 21:43 - 00000000 ____D () C:\Program Files\Sweet Home 3D 2014-07-16 16:56 - 2014-03-05 19:16 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Adventure Company 2014-07-16 16:33 - 2014-07-06 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-07-16 16:33 - 2013-10-28 14:10 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Samsung 2014-07-16 16:33 - 2013-10-28 14:09 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-07-16 16:33 - 2013-03-28 23:08 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-15 23:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-07-15 15:04 - 2014-07-14 23:43 - 00000000 ____D () C:\Program Files (x86)\Isis 2014-07-15 15:04 - 2014-04-29 20:26 - 00000000 ____D () C:\Program Files (x86)\Addon Enabler 2014-07-15 15:03 - 2013-03-28 21:39 - 00000000 ____D () C:\Users\Pun1sher 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files\iTunes 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files\iPod 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-07-15 15:02 - 2013-06-09 19:18 - 00000000 ____D () C:\Users\Franzi 2014-07-15 15:02 - 2013-03-28 23:33 - 00000000 ____D () C:\ProgramData\P4G 2014-07-15 15:02 - 2013-03-28 23:21 - 00000000 ___HD () C:\ExpressGateUtil 2014-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-07-15 14:51 - 2014-07-15 14:51 - 00047408 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\isis.sys 2014-07-12 10:43 - 2009-07-14 06:45 - 05168528 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-12 10:41 - 2014-05-06 23:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-12 10:41 - 2011-04-12 09:54 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-12 10:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-12 10:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-10 19:49 - 2013-04-17 16:12 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-10 19:48 - 2013-07-18 18:18 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 19:45 - 2013-03-30 19:11 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-09 13:31 - 2013-04-02 03:38 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-09 13:31 - 2013-04-02 03:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 13:31 - 2013-03-28 21:43 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-08 12:32 - 2014-04-26 12:48 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Bilder 2014-07-08 09:35 - 2013-03-30 22:46 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Filme 2014-07-06 21:49 - 2013-03-29 16:41 - 00000000 ____D () C:\Users\Pun1sher\Desktop\JD Download 2014-07-06 21:43 - 2013-10-28 14:11 - 00000099 _____ () C:\Users\Public\LMDebug.log 2014-07-06 15:45 - 2014-01-14 18:08 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Dokumente 2014-07-06 11:59 - 2014-07-06 11:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-07-06 11:57 - 2014-07-06 11:57 - 00000000 ____D () C:\Program Files\SAMSUNG 2014-07-06 11:57 - 2013-10-28 14:10 - 00000000 ____D () C:\ProgramData\Samsung 2014-07-06 11:53 - 2014-07-06 11:53 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-07-06 11:53 - 2013-03-28 23:08 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\Downloaded Installations 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\SelfMV 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\samsung 2014-07-03 12:19 - 2014-01-19 19:57 - 00000000 ____D () C:\Users\Pun1sher\Documents\Outlook-Dateien 2014-06-30 04:09 - 2014-07-10 19:46 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-10 19:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-27 10:37 - 2013-07-03 16:57 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Youtube 2014-06-23 14:05 - 2014-06-23 14:05 - 00000000 ____D () C:\Users\Pun1sher\Desktop\TB.Mathematischer.Formeln.N 2014-06-22 15:23 - 2013-03-29 16:43 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Spotify 2014-06-22 15:23 - 2013-03-29 16:43 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\Spotify 2014-06-22 15:06 - 2013-03-29 01:55 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\vlc 2014-06-20 22:14 - 2014-07-10 19:44 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-06-20 21:39 - 2014-07-10 19:44 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll Some content of TEMP: ==================== C:\Users\Franzi\AppData\Local\Temp\avgnt.exe C:\Users\Pun1sher\AppData\Local\Temp\AcDeltree.exe C:\Users\Pun1sher\AppData\Local\Temp\AskSLib.dll C:\Users\Pun1sher\AppData\Local\Temp\avgnt.exe C:\Users\Pun1sher\AppData\Local\Temp\bitool.dll C:\Users\Pun1sher\AppData\Local\Temp\EADA092.exe C:\Users\Pun1sher\AppData\Local\Temp\Execute2App.exe C:\Users\Pun1sher\AppData\Local\Temp\FixMyRegistry.exe C:\Users\Pun1sher\AppData\Local\Temp\hd_streamer_install_new.exe C:\Users\Pun1sher\AppData\Local\Temp\icqsetup.exe C:\Users\Pun1sher\AppData\Local\Temp\msvcp90.dll C:\Users\Pun1sher\AppData\Local\Temp\msvcr90.dll C:\Users\Pun1sher\AppData\Local\Temp\ose00000.exe C:\Users\Pun1sher\AppData\Local\Temp\ose00001.exe C:\Users\Pun1sher\AppData\Local\Temp\setup.exe C:\Users\Pun1sher\AppData\Local\Temp\uninst1.exe C:\Users\Pun1sher\AppData\Local\Temp\Uninstall.exe C:\Users\Pun1sher\AppData\Local\Temp\UninstallEADM.dll C:\Users\Pun1sher\AppData\Local\Temp\vsdel.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-15 23:07 ==================== End Of Log ============================ Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-07-2014 Ran by Pun1sher at 2014-07-20 12:56:12 Running from C:\Users\Pun1sher\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== abgx360 v1.0.6 (HKLM-x32\...\abgx360) (Version: - ) Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 1.1.377 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (HKLM-x32\...\{FF2A5498-4EFE-430F-A138-7EB365DBEBAD}) (Version: 11.6.1.629 - Adobe Systems, Inc) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{1F7424F8-F992-48BC-90EF-7C4DB0405E3F}) (Version: 1.7.17.25416 - Ihr Firmenname) Alcor Micro USB Card Reader (x32 Version: 1.7.17.25416 - Ihr Firmenname) Hidden Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.2 - Sereby Corporation) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS) ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.43 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0030 - ASUS) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus) ASUS_N3_Series (HKLM-x32\...\ASUS_N3_Series) (Version: 1.0.0001 - ASUS) Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS) Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul) (Version: 1.0.0.18 - Autodesk) Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul (Version: 1.0.0.18 - Autodesk) Hidden Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul Language Pack (Version: 1.0.0.18 - Autodesk) Hidden Autodesk Inventor Professional 2012 (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 Deutsch (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.0.16000.0000 - Autodesk) Autodesk Inventor Professional 2012 Language Pack - Deutsch (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk) Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.) Autodesk Vault 2012 (Client) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Autodesk Vault 2012 (Client) German Language Pack (Version: 16.0.56.200 - Autodesk, Inc.) Hidden AVNavigator 2013.I (HKCU\...\AVNavigator 2013.I) (Version: 1.14.0.005.1 - PIONEER CORPORATION) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.45 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Command & Conquer(TM) Generäle (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts) Command & Conquer(TM) Generäle (x32 Version: 0.50.0000 - Electronic Arts) Hidden Common Desktop Agent (Version: 1.62.0 - OEM) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft) DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation) DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation) Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited) ETDWare PS/2-x64 7.0.5.15_WHQL (HKLM\...\Elantech) (Version: 7.0.5.15 - ELAN Microelectronics Corp.) ExpressGateCloud (HKLM-x32\...\InstallShield_{36B0DC39-3282-40EB-8587-B875CE46C3A7}) (Version: 2.6.27.160 - VideACE Co.) ExpressGateCloud (x32 Version: 2.6.27.160 - VideACE Co.) Hidden Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Free Audio CD Burner version 2.0.23.422 (HKLM-x32\...\Free Audio CD Burner_is1) (Version: 2.0.23.422 - DVDVideoSoft Ltd.) Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com) Free YouTube Download version 3.2.3.610 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.3.610 - DVDVideoSoft Ltd.) Fresco Logic USB3.0 Host Controller (HKLM\...\{BE8CF365-1CFE-49D7-A4C2-A943526274C4}) (Version: 3.0.119.1 - Fresco Logic Inc.) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.0.0.0454 - Intel Corporation) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java(TM) 7 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217000FF}) (Version: 7.0.0 - Oracle) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Microsoft .NET Framework 1.1 German Language Pack (HKLM-x32\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 1.1 Security Update (KB2416447) (HKLM-x32\...\M2416447) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - ) Microsoft .NET Framework 1.1 SP1 + KB928366 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 SP1 + KB928366 (x32 Version: 1.1.4322 - Microsoft) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{79BF7CB8-1E09-489F-9547-DB3EE8EA3F16}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{86177DAE-38B1-49DD-912E-35CB703AB779}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version: - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MP3 to WAV RES (HKLM-x32\...\MP3 to WAV RES) (Version: - ) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA 3D Vision Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.82 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Optimus Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation) OpenProj (HKLM-x32\...\{13702021-43FB-480C-912F-D9B74A538288}) (Version: 1.4.0 - Serena Software Inc.) PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6221 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.45 - Piriform) Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.02.74.00(06.11.2012) - Samsung Electronics Co., Ltd.) Samsung ML-2160 Series (HKLM-x32\...\Samsung ML-2160 Series) (Version: 1.10 (22.11.2012) - Samsung Electronics Co., Ltd.) Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.) Schnell-Deinstallations-Tool für Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden SonicMaster (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.00.0000 - Virage Logic, Corp.) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) tools-linux (x32 Version: 9.6.0.1295980 - VMware, Inc.) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden Überwachungstool für die Intel® Turbo-Boost-Technik (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.400.4 - Intel) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) USB2.0 UVC 2M WebCam (HKLM\...\USB2.0 UVC 2M WebCam) (Version: 5.8.55133.208 - Sonix) VBA (2627.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden VBA (2701.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN) VMware Player (HKLM-x32\...\VMware_Player) (Version: 6.0.0 - VMware, Inc) VMware Player (Version: 6.0.0 - VMware, Inc.) Hidden Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation) Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.0 - ASUS) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS) ==================== Restore Points ========================= 06-07-2014 19:01:35 Windows-Sicherung 08-07-2014 07:38:41 Windows Update 10-07-2014 17:43:09 Windows Update 10-07-2014 18:13:59 Windows Update 14-07-2014 08:36:31 Windows-Sicherung 15-07-2014 12:30:46 Windows Update 15-07-2014 12:56:57 Removed Samsung Kies3 15-07-2014 12:59:40 Wiederherstellungsvorgang 15-07-2014 13:14:28 Windows Update 16-07-2014 14:32:30 Removed Samsung Kies3 20-07-2014 10:46:10 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-03-24 21:26 - 00000913 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {17F1D77A-8C96-49D4-A7C2-242F4A2E2012} - System32\Tasks\{0F7DB7A6-2C5C-4262-AE6E-6B0CD61EEAAE} => C:\Users\Pun1sher\Desktop\wormsarm\Worms.Armageddon-ORIGIN\Worms Armageddon\Wa.exe Task: {181FD012-81A5-4289-AF4E-24F35767A011} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-01] (ASUS) Task: {22D00F9B-52E4-4254-BD49-D9B11E67C619} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2013-01-11] (ASUSTek Computer Inc.) Task: {23D272CF-B550-44F1-A7CA-527E0E321B25} - System32\Tasks\{EA6D2851-4DD1-4E15-9F71-D21484407B69} => C:\Users\Pun1sher\Desktop\BMW_Carsoft_6.5_SP1_Cracks\CarSoft 6.5\Setup.exe Task: {25CC6007-1CD2-4273-9D2E-6985FA096E85} - System32\Tasks\{1DFC906C-DB2C-4FDE-86E9-ACFBDFD3EA4F} => C:\Program Files (x86)\Microtek\ScanWizard 5\ScanWizard5.exe Task: {31A9A4EE-CB31-48E5-AB35-EA3933C9596E} - System32\Tasks\{D043C9C4-7838-42F4-9106-CF88D8F29A69} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {376B5C79-7AE3-4D2A-B9E2-B7E36530784A} - System32\Tasks\{88DB5928-7B62-49F9-A08C-E7446C6E1943} => D:\EXSL\SERVER\slkffs.exe Task: {3A074C7D-9546-4C4C-AFE5-201A588AB1EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {5119CEFD-9FF8-4E7B-84C2-99F1857A34A0} - System32\Tasks\{004B2FEB-D3C3-4AD4-9A4C-EE3B19C8A9DF} => C:\Users\Pun1sher\Desktop\wormsarm\Worms.Armageddon-ORIGIN\Worms Armageddon\Wa.exe Task: {53481977-2141-48CB-B6E4-3FEF0D158E95} - System32\Tasks\{E5A2DD27-BB24-401F-B840-207B24B0F9D9} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {5C8684BC-50D3-4258-BB44-4AF94C752C00} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {7569289C-EFED-4934-A3E5-5A9016BC36DF} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-12-17] (ASUSTek Computer Inc.) Task: {7ADF3156-F69D-4AE1-8687-082AFC623DB7} - System32\Tasks\{C2B018E4-9ACC-40F5-8A46-152B25590DA9} => E:\Hitman\Hitman Absolution Deluxe Professional Edition\HMA.exe Task: {7C1E5963-E16C-4F54-8002-BFA83C33CC0B} - System32\Tasks\{93E6E800-ED2E-4702-8829-2A66B74A0564} => C:\Program Files (x86)\Microtek\ScanWizard 5\ScanWizard5.exe Task: {7F0977BA-502A-40C0-9A6A-E931E2C886DB} - System32\Tasks\{E32FA199-A037-491D-97F1-B19F9372E052} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {8345D484-5CD1-4421-962F-CB3CBD4FC049} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {94D928C7-B1F5-4D24-8E6B-127769535B82} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS) Task: {A44F1DAB-6CBA-455D-8E8C-4CE25C960E6A} - System32\Tasks\{B88BB7D5-7F10-48DF-B6E8-471F7524554E} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {AE202B72-D27F-40FF-94D0-B5A3669751BC} - System32\Tasks\{0DE2E98B-E66A-464F-AAFF-D147CF702541} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {B93C66A2-05A9-4932-892D-8758AF4BF8C0} - System32\Tasks\{95588F81-2601-433A-B70C-86D840B78E8F} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {D607E2B1-7642-480C-8C30-31312182E293} - System32\Tasks\{FD690738-6AB6-44F4-86D2-79A2E0241EAE} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {D94802D5-45ED-4B1E-B52A-0CF868F3302B} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {DC0E306F-BF46-45DC-9F36-F49463DFDC31} - System32\Tasks\{B1215417-2BB1-4C95-81F8-CCC81EF2EA94} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {E901B31F-4118-426F-9770-2035F4465D96} - System32\Tasks\{8310E8AB-6569-4E5B-B48F-7D95AEC882BF} => D:\EXSL\SERVER\slkffs.exe Task: {F9F10200-A50B-4047-8955-25AAD0384EB8} - System32\Tasks\{45FBF7C1-30CC-4FF4-B4C0-B054FC54BAEF} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-28 14:10 - 2011-04-25 13:24 - 00034304 _____ () C:\Windows\System32\ssj1mlm.dll 2013-04-10 01:01 - 2013-11-11 17:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-04-17 20:34 - 2013-04-17 20:33 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe 2013-04-17 20:34 - 2013-04-17 20:33 - 00077824 _____ () C:\Windows\KMService.exe 2014-06-18 15:51 - 2014-06-18 15:51 - 00606136 _____ () C:\Program Files (x86)\Universal Updater\UpdaterService.exe 2011-03-25 18:55 - 2011-03-25 18:55 - 00091464 _____ () C:\ExpressGateUtil\VAWinService.exe 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-07-14 17:11 - 2010-07-14 17:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll 2010-04-02 20:21 - 2008-10-01 00:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2013-03-30 18:33 - 2007-11-30 12:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe 2013-03-29 00:58 - 2011-01-27 09:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-02-20 23:23 - 2012-02-20 23:23 - 00456704 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe 2012-02-20 23:23 - 2012-02-20 23:23 - 00051200 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2010-09-23 17:53 - 2010-09-23 17:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 2011-04-07 22:26 - 2011-04-07 22:26 - 00045448 _____ () C:\ExpressGateUtil\VAWinAgent.exe 2014-06-18 15:50 - 2014-06-18 15:50 - 00388096 _____ () C:\Program Files (x86)\Universal Updater\CrashMon.exe 2014-07-15 14:51 - 2014-07-15 14:51 - 00330544 _____ () C:\Program Files (x86)\Isis\isis.exe 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00157000 _____ () C:\ExpressGateUtil\libexpat.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00061768 _____ () C:\ExpressGateUtil\netProfileDatabase.DLL 2013-08-27 12:42 - 2013-08-27 12:42 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll 2012-09-23 21:43 - 2012-09-23 21:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu 2014-04-04 10:25 - 2014-04-04 10:25 - 00102400 _____ () C:\Program Files (x86)\Isis\nfapi.dll 2014-06-05 06:41 - 2014-06-05 06:41 - 00331776 _____ () C:\Program Files (x86)\Isis\ProtocolFilters.dll 2014-06-18 10:13 - 2014-06-18 10:13 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-07-09 13:31 - 2014-07-09 13:31 - 17029808 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: Spotify => "C:\Users\Pun1sher\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" ==================== Faulty Device Manager Devices ============= Name: VMware Virtual Ethernet Adapter for VMnet1 Description: VMware Virtual Ethernet Adapter for VMnet1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/20/2014 00:41:33 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/17/2014 11:08:08 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/17/2014 11:05:44 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (07/17/2014 09:18:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (07/20/2014 00:40:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/20/2014 00:40:56 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/20/2014 00:40:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/20/2014 00:40:56 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/20/2014 00:40:56 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/20/2014 00:40:56 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/20/2014 00:40:45 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/20/2014 00:40:45 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/20/2014 00:40:45 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/17/2014 11:11:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Microsoft Office Sessions: ========================= Error: (07/20/2014 00:41:33 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/17/2014 11:08:08 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/17/2014 11:05:44 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (07/17/2014 09:18:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2014-02-20 20:04:54.215 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:54.174 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:13.031 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:13.000 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:03:30.131 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:03:30.038 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:59:02.831 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:59:02.800 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:58:21.530 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:58:21.495 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 23% Total physical RAM: 12198.78 MB Available physical RAM: 9275.34 MB Total Pagefile: 24395.74 MB Available Pagefile: 21654.35 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:293.03 GB) (Free:143.55 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Programme) (Fixed) (Total:380.6 GB) (Free:378.37 GB) NTFS Drive e: (Spiele) (Fixed) (Total:349.32 GB) (Free:346.57 GB) NTFS Drive f: (Daten) (Fixed) (Total:349.31 GB) (Free:249.71 GB) NTFS Drive g: (Sicherung) (Fixed) (Total:25 GB) (Free:0 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 2F851246) Partition 1: (Not Active) - (Size=25 GB) - (Type=07 NTFS) Partition 2: (Active) - (Size=293 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=381 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 699 GB) (Disk ID: 707B3822) Partition 1: (Not Active) - (Size=699 GB) - (Type=OF Extended) ==================== End Of Log ============================ |
20.07.2014, 17:33 | #8 |
/// the machine /// TB-Ausbilder | Malware & SSL-Fehler hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.07.2014, 18:24 | #9 |
| Malware & SSL-Fehler Einma die Combofix txt Code:
ATTFilter ComboFix 14-07-19.01 - Pun1sher 20.07.2014 18:57:02.1.8 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.12199.9776 [GMT 2:00] ausgeführt von:: c:\users\Pun1sher\Desktop\ComboFix.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\2433f433 c:\programdata\Roaming c:\users\Pun1sher\AppData\Local\Microsoft\Windows\Temporary Internet Files\{1D20491F-4384-4141-A35A-967B33F8C757}.xps c:\users\Pun1sher\AppData\Local\Microsoft\Windows\Temporary Internet Files\{91EED75F-58E1-419F-8554-6A14FF5DE947}.xps c:\users\Pun1sher\AppData\Local\Microsoft\Windows\Temporary Internet Files\{9A81A24D-D328-4E5C-BEFF-13D00BA53854}.xps c:\users\Pun1sher\AppData\Local\Microsoft\Windows\Temporary Internet Files\{9A8900A1-6130-4663-8402-C0366A617E73}.xps c:\users\Pun1sher\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C4C0079F-3ADE-4B6D-AFBC-DB930268E06C}.xps c:\users\Pun1sher\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C92DE596-F343-4D3B-9805-87819371D53B}.xps c:\users\Pun1sher\AppData\Roaming\2433f433 c:\windows\Downloaded Program Files\IDropPTB.dll c:\windows\IsUn0407.exe c:\windows\msvcr71.dll D:\install.exe . . ((((((((((((((((((((((( Dateien erstellt von 2014-06-20 bis 2014-07-20 )))))))))))))))))))))))))))))) . . 2014-07-20 17:04 . 2014-07-20 17:04 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-07-20 17:04 . 2014-07-20 17:04 -------- d-----w- c:\users\Franzi\AppData\Local\temp 2014-07-20 10:46 . 2014-07-14 02:12 10924376 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2C10DEE7-67DB-4906-9A13-1EF4F9919E06}\mpengine.dll 2014-07-17 20:01 . 2014-07-20 10:56 -------- d-----w- C:\FRST 2014-07-17 19:07 . 2014-07-17 19:07 -------- d-----w- c:\windows\ERUNT 2014-07-17 18:55 . 2014-07-17 19:23 -------- d-----w- c:\users\Pun1sher\AppData\Roaming\Nico Mak Computing 2014-07-15 12:51 . 2014-07-15 12:51 47408 ----a-w- c:\windows\system32\drivers\isis.sys 2014-07-14 21:43 . 2014-07-15 13:04 -------- d-----w- c:\program files (x86)\Isis 2014-07-12 08:53 . 2014-07-12 08:53 893552 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll 2014-07-12 08:53 . 2014-07-12 08:53 42168 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll 2014-07-10 17:45 . 2014-05-30 08:08 340992 ----a-w- c:\windows\system32\schannel.dll 2014-07-10 17:44 . 2014-06-19 00:53 48640 ----a-w- c:\program files\Internet Explorer\DiagnosticsHub_is.dll 2014-07-10 17:42 . 2014-06-05 14:45 1460736 ----a-w- c:\windows\system32\lsasrv.dll 2014-07-10 17:42 . 2014-06-05 14:26 22016 ----a-w- c:\windows\SysWow64\secur32.dll 2014-07-10 17:42 . 2014-06-05 14:25 96768 ----a-w- c:\windows\SysWow64\sspicli.dll 2014-07-06 09:57 . 2014-07-06 09:57 -------- d-----w- c:\program files\SAMSUNG 2014-07-06 09:53 . 2014-05-07 15:42 144664 ----a-w- c:\windows\SysWow64\secman.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-07-20 16:51 . 2013-03-30 16:35 45056 ----a-w- c:\windows\system32\acovcnt.exe 2014-07-10 17:45 . 2013-03-30 17:11 96441528 ----a-w- c:\windows\system32\MRT.exe 2014-07-09 11:31 . 2013-04-02 01:38 699056 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-07-09 11:31 . 2013-03-28 19:43 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-06-13 15:59 . 2014-06-13 15:59 893552 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll 2014-06-13 15:59 . 2014-06-13 15:59 42168 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll 2014-06-13 15:59 . 2014-06-13 15:59 1236816 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2014-05-08 09:32 . 2014-06-13 11:39 1112064 ----a-w- c:\windows\system32\rdpcorets.dll 2014-04-27 19:17 . 2014-04-27 19:17 29696 ----a-w- c:\windows\SysWow64\sfx32.dll 2014-04-27 19:17 . 2014-04-27 19:17 120320 ----a-w- c:\windows\SysWow64\czip.ocx 2014-04-25 02:34 . 2014-06-13 11:39 801280 ----a-w- c:\windows\system32\usp10.dll 2014-04-25 02:06 . 2014-06-13 11:39 626688 ----a-w- c:\windows\SysWow64\usp10.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640] "Spotify Web Helper"="c:\users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-05-17 1176632] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-23 1601536] "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2013-01-11 328504] "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2012-10-17 205184] "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016] "SonicMasterTray"="c:\program files (x86)\ASUS\SonicMaster\SonicMasterTray.exe" [2010-07-09 984400] "VAWinAgent"="c:\expressgateutil\VAWinAgent.exe" [2011-04-07 45448] "FLxHCIm"="c:\program files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe" [2011-04-08 43008] "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-12 43848] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904] "PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2014-02-06 189480] "Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" [2012-09-23 3477640] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-01-17 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-05-26 152392] "CrashMon"="c:\program files (x86)\Universal Updater\CrashMon.exe" [2014-06-18 388096] "Isis"="c:\program files (x86)\Isis\isis.exe" [2014-07-15 330544] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) "AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll . R2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [x] R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x] R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x] R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [x] R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x] R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x] R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x] R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x] R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x] R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys;c:\windows\SYSNATIVE\DRIVERS\btmaux.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 Rockusb;Driver for Rockusb Device;c:\windows\system32\DRIVERS\rockusb.sys;c:\windows\SYSNATIVE\DRIVERS\rockusb.sys [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x] S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x] S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x] S0 vsock;vSockets Driver;c:\windows\system32\drivers\vsock.sys;c:\windows\SYSNATIVE\drivers\vsock.sys [x] S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x] S1 isis;isis;c:\windows\system32\drivers\isis.sys;c:\windows\SYSNATIVE\drivers\isis.sys [x] S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x] S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x] S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Atheros\Ath_CoexAgent.exe;c:\program files (x86)\Atheros\Ath_CoexAgent.exe [x] S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Atheros\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Atheros\Bluetooth Suite\adminservice.exe [x] S2 KMService;KMService;c:\windows\system32\srvany.exe;c:\windows\SYSNATIVE\srvany.exe [x] S2 mitsijm2012;Autodesk Moldflow Inventor Tool Suite Integration 2012 Job-Manager;c:\program files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe;c:\program files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x] S2 TurboBoost;Intel(R) Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x] S2 UniversalUpdater;Universal Updater Service;c:\program files (x86)\Universal Updater\UpdaterService.exe;c:\program files (x86)\Universal Updater\UpdaterService.exe [x] S2 VideAceWindowsService;VideAceWindowsService;c:\expressgateutil\VAWinService.exe;c:\expressgateutil\VAWinService.exe [x] S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x] S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x] S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\DRIVERS\FLxHCIc.sys;c:\windows\SYSNATIVE\DRIVERS\FLxHCIc.sys [x] S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver;c:\windows\system32\DRIVERS\FLxHCIh.sys;c:\windows\SYSNATIVE\DRIVERS\FLxHCIh.sys [x] S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] . . Inhalt des "geplante Tasks" Ordners . 2014-07-20 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-02 11:31] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-10-13 2168424] "BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2010-11-03 10228224] "snp2uvc"="c:\windows\vsnp2uvc.exe" [2010-01-21 909824] "AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-05-03 324096] "IntelTBRunOnce"="wscript.exe" [2013-10-12 168960] "AtherosBtStack"="c:\program files (x86)\Atheros\Bluetooth Suite\BtvStack.exe" [2010-11-25 613536] "AthBtTray"="c:\program files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe" [2010-11-25 379040] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-14 172144] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-14 399984] "Persistence"="c:\windows\system32\igfxpers.exe" [2012-12-14 441968] "CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-02-20 456704] "Nvtmru"="c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-11-14 1028384] "ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2013-12-10 1100248] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 2279712] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\windows\System32\nvinitx.dll . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uInternet Settings,ProxyServer = 10.19.3.1:8080 IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 LSP: %windir%\system32\vsocklib.dll FF - ProfilePath - c:\users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\ . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Wow6432Node-HKCU-Run-EA Core - c:\program files (x86)\Electronic Arts\EADM\Core.exe Wow6432Node-HKCU-Run-UpdateMyDrivers - c:\program files (x86)\SmartTweak\UpdateMyDrivers\UpdateMyDrivers.exe Wow6432Node-HKCU-Run-FixMyRegistry - c:\program files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe Wow6432Node-HKCU-Run-Kies3PDLR.exe - c:\program files (x86)\Samsung\Kies3\FirmwareUpdate\Kies3PDLR.exe Wow6432Node-HKLM-Run-<NO NAME> - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions] @Denied: (2) (LocalSystem) "{E6062A33-016E-4BDA-A6F1-890D989F8656}"=hex:51,66,7a,6c,4c,1d,38,12,5d,29,15, e2,5c,4f,b4,0e,d9,e7,ca,4d,9d,c1,c2,42 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_14_0_0_145_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.14" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_14_0_0_145.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-07-20 19:06:49 ComboFix-quarantined-files.txt 2014-07-20 17:06 . Vor Suchlauf: 15 Verzeichnis(se), 154.054.475.776 Bytes frei Nach Suchlauf: 23 Verzeichnis(se), 155.210.215.424 Bytes frei . - - End Of File - - 7019088EBC1DE0D959C259A4C794EE69 |
20.07.2014, 21:13 | #10 |
/// the machine /// TB-Ausbilder | Malware & SSL-Fehler Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.07.2014, 12:22 | #11 |
| Malware & SSL-Fehler MBAM Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 21.07.2014 Suchlauf-Zeit: 11:36:36 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.07.20.07 Rootkit Datenbank: v2014.07.17.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Pun1sher Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 355941 Verstrichene Zeit: 8 Min, 5 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 4 RiskWare.Tool.CK, C:\Windows\KMService.exe, 2056, Löschen bei Neustart, [3b8c8b1682f93600b26a30ab5da4e11f] PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis.exe, 6304, Löschen bei Neustart, [ffc88f12abd0e2541c0eb29b837d3dc3] PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\CrashMon.exe, 6276, Löschen bei Neustart, [dbec4d54c8b3082e6365d1167d85b64a] PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\UpdaterService.exe, 2428, Löschen bei Neustart, [dbec4d54c8b3082e6365d1167d85b64a] Module: 4 PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\ProtocolFilters.dll, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\libeay32.dll, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nfapi.dll, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\ssleay32.dll, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], Registrierungsschlüssel: 7 PUP.Optional.HDStreamer.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{E6062A33-016E-4BDA-A6F1-890D989F8656}, In Quarantäne, [11b6b1f005762f0739a557ff9e64f808], PUP.Optional.HDStreamer.A, HKLM\SOFTWARE\CLASSES\HD Streamer.ScriptHostObject, In Quarantäne, [11b6b1f005762f0739a557ff9e64f808], PUP.Optional.HDStreamer.A, HKLM\SOFTWARE\CLASSES\HD Streamer.ScriptHostObject.1, In Quarantäne, [11b6b1f005762f0739a557ff9e64f808], PUP.Optional.HDStreamer.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HD Streamer.ScriptHostObject, In Quarantäne, [11b6b1f005762f0739a557ff9e64f808], PUP.Optional.HDStreamer.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HD Streamer.ScriptHostObject.1, In Quarantäne, [11b6b1f005762f0739a557ff9e64f808], PUP.Optional.UniversalUpdater.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UniversalUpdater, In Quarantäne, [dbec4d54c8b3082e6365d1167d85b64a], PUP.Optional.HDStreamer.A, HKLM\SOFTWARE\HD Streamer, In Quarantäne, [6463d0d19be0261011f1f1d26b97af51], Registrierungswerte: 3 PUP.Optional.Isis.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Isis, C:\Program Files (x86)\Isis\isis.exe, In Quarantäne, [ffc88f12abd0e2541c0eb29b837d3dc3] PUP.Optional.UniversalUpdater.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|CrashMon, "C:\Program Files (x86)\Universal Updater\CrashMon.exe" "UniversalUpdater", In Quarantäne, [dbec4d54c8b3082e6365d1167d85b64a] PUP.Optional.UniversalUpdater.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UNIVERSALUPDATER|ImagePath, C:\Program Files (x86)\Universal Updater\UpdaterService.exe, In Quarantäne, [6b5c1b86592261d515b4c81f25ddff01] Registrierungsdaten: 0 (No malicious items detected) Ordner: 6 PUP.Optional.Isis.A, C:\Program Files (x86)\Isis, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater, Löschen bei Neustart, [dbec4d54c8b3082e6365d1167d85b64a], PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\CrashReports, In Quarantäne, [dbec4d54c8b3082e6365d1167d85b64a], Dateien: 252 RiskWare.Tool.CK, C:\Windows\KMService.exe, Löschen bei Neustart, [3b8c8b1682f93600b26a30ab5da4e11f], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis.exe, Löschen bei Neustart, [ffc88f12abd0e2541c0eb29b837d3dc3], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\ProtocolFilters.dll, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\libeay32.dll, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nfapi.dll, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\ssleay32.dll, Löschen bei Neustart, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-lh6.googleusercontent.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.googleadservices.com-4f24b1abc791275acc2f132a7819def5b5f98272#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.googleadservices.com-4f24b1abc791275acc2f132a7819def5b5f98272#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.googletagservices.com-0e711510534ebcd80c6f69d9ae3eaff174183044#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.googletagservices.com-0e711510534ebcd80c6f69d9ae3eaff174183044#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.gstatic.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.gstatic.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.paypal.com-084be8769682236828d8e9dc55901e53e8eb8432#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.paypal.com-084be8769682236828d8e9dc55901e53e8eb8432#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.paypalobjects.com-b3d7b0f2643eaaffc2203305dc43b14976ca7106#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.paypalobjects.com-b3d7b0f2643eaaffc2203305dc43b14976ca7106#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.sonnenklar.tv-89ccaf07074a6f587fbe682d05bf401f14b33b89#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.sonnenklar.tv-89ccaf07074a6f587fbe682d05bf401f14b33b89#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-media.ab-in-den-urlaub-deals.de-135b2eee17326540e7091180f47040c949774fcf#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-media.ab-in-den-urlaub-deals.de-135b2eee17326540e7091180f47040c949774fcf#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-notification.adblockplus.org-156acaf3838f6d445fdf089a2c6dd684c4bac7fa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-notification.adblockplus.org-156acaf3838f6d445fdf089a2c6dd684c4bac7fa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-oauth.googleusercontent.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-oauth.googleusercontent.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-paypal.d1.sc.omtrdc.net-8e53b5a0110ccb713b8a555335cf332c4616a18e#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-paypal.d1.sc.omtrdc.net-8e53b5a0110ccb713b8a555335cf332c4616a18e#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-pijoto.net-d29ff667093c996d6c3b7dc3b312dc734cac3495#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-script.ioam.de-91099ee65393c59716d9f6ebf755f95cfdf8ffda#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-seal.verisign.com-392840a1834917191fba0b1dce0291ae12ed070b#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-seal.verisign.com-392840a1834917191fba0b1dce0291ae12ed070b#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-secureinclude.ebaystatic.com-574dd05457d8db0fc7162d1ed206bf866d661b18#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-secureinclude.ebaystatic.com-574dd05457d8db0fc7162d1ed206bf866d661b18#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-secureir.ebaystatic.com-1628636dbf170a39d7236a6d284d69350ef3e048#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-secureir.ebaystatic.com-1628636dbf170a39d7236a6d284d69350ef3e048#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-securemetrics.apple.com-af41894e423bd1531618b2015110e1f809efed82#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-securemetrics.apple.com-af41894e423bd1531618b2015110e1f809efed82#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-securepics.ebaystatic.com-b405e41fbfe2ef101c28d72f87fb4785304496a0#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-securepics.ebaystatic.com-b405e41fbfe2ef101c28d72f87fb4785304496a0#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-securethumbs.ebay.com-7f691760228f15951ab323cc1d4496f0f68626ff#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-securethumbs.ebay.com-7f691760228f15951ab323cc1d4496f0f68626ff#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-services.addons.mozilla.org-65735c6ceb13966da0fe40af3ace7676bc95574f#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-ajax.googleapis.com-7734080dbccc76de5621384a3b1dd1df4370a377#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-careers.leoni.com-b214ab8e8d7632b9f0d60759e543a38b9630a579#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-d2cnb4m0nke2lh.cloudfront.net-c71b2485ece312837c05d8a1fdc5f9df2b317692#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-profile-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fonts.googleapis.com-7734080dbccc76de5621384a3b1dd1df4370a377#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-halc.iadvize.com-1e2dec1e845cafaca28b349f91eaa53a771b412a#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-km.support.apple.com.edgekey.net-8e6ec7be578a68524296a81e4991a26518a97505#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-profile-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-sphotos-b-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-sphotos-b-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-sphotos-c-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-sphotos-c-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-sphotos-e-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-sphotos-e-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-sphotos-h-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbcdn-sphotos-h-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbstatic-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fbstatic-a.akamaihd.net-b69c10941b4625553588c0612b745e9d2880b5fa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fhr.data.mozilla.com-0401e29b19c9158976954e7d43821c1ce9257d1d#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fhr.data.mozilla.com-0401e29b19c9158976954e7d43821c1ce9257d1d#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-fonts.googleapis.com-7734080dbccc76de5621384a3b1dd1df4370a377#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-foxi180_c.tlscdn.com-b208bab43317e7305278227924938544329276fe#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-foxi180_c.tlscdn.com-b208bab43317e7305278227924938544329276fe#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-foxi180_f.tlscdn.com-b208bab43317e7305278227924938544329276fe#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-foxi180_f.tlscdn.com-b208bab43317e7305278227924938544329276fe#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-gg.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-gg.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-halc.iadvize.com-1e2dec1e845cafaca28b349f91eaa53a771b412a#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.ab-in-den-urlaub.de-7db37df99644b4f7678d9115723983c902c54652#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.ab-in-den-urlaub.de-7db37df99644b4f7678d9115723983c902c54652#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.afterbuy.de-f81a64ca2e1f1e50ca4f4a60db0702a323ff67c8#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.afterbuy.de-f81a64ca2e1f1e50ca4f4a60db0702a323ff67c8#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.apple.com-2191cb76d235bc638904f43b0e70b913a43924c6#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.apple.com-2191cb76d235bc638904f43b0e70b913a43924c6#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.facebook.com-47fa19de09412f882526baa183ef357e0963f554#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.facebook.com-47fa19de09412f882526baa183ef357e0963f554#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.google.com-91020602f374207bce26df31b33ad8cb68371bdd#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.google.com-91020602f374207bce26df31b33ad8cb68371bdd#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.google.de-11c071b63fc191cd5283322042743d021814cd41#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.google.de-11c071b63fc191cd5283322042743d021814cd41#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.google.de-757d71c65fe60e4b3a806e77eef04026cd36cf36#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-accounts.google.com-3b1b2b56c8fcda6d66d14ca2dd8b3f98adca18f0#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-accounts.google.com-3b1b2b56c8fcda6d66d14ca2dd8b3f98adca18f0#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-addons.mozilla.org-13f033f430ba4c7918b472f9846a0a96a83508dd#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-addons.mozilla.org-13f033f430ba4c7918b472f9846a0a96a83508dd#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-ajax.googleapis.com-7734080dbccc76de5621384a3b1dd1df4370a377#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-maps.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-maps.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-maps.googleapis.com-7734080dbccc76de5621384a3b1dd1df4370a377#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-maps.googleapis.com-7734080dbccc76de5621384a3b1dd1df4370a377#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-maps.gstatic.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-maps.gstatic.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-master.anonymox.net-7e4e3e6c0d7eef45a90013515f4bba9497d1e93d#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-stags.bluekai.com-e9484e73befe7f54b6c1507c8c3fdc30378aa777#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-stags.bluekai.com-e9484e73befe7f54b6c1507c8c3fdc30378aa777#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-stat.dealtime.com-828ab10b5690eb19701924793def5fcfd4ef179b#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-stat.dealtime.com-828ab10b5690eb19701924793def5fcfd4ef179b#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-static.afterbuy.de-f81a64ca2e1f1e50ca4f4a60db0702a323ff67c8#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-static.afterbuy.de-f81a64ca2e1f1e50ca4f4a60db0702a323ff67c8#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-stats.g.doubleclick.net-0e711510534ebcd80c6f69d9ae3eaff174183044#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-stats.g.doubleclick.net-0e711510534ebcd80c6f69d9ae3eaff174183044#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-careers.leoni.com-b214ab8e8d7632b9f0d60759e543a38b9630a579#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-cdn.api.twitter.com-738df156054424c27efee9e8d8db54cabd5eaf71#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-cdn.api.twitter.com-738df156054424c27efee9e8d8db54cabd5eaf71#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-checkout.payments.ebay.de-8ffbd0ebb9a7d5752c234fc9b40c7d7bde3189b0#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-checkout.payments.ebay.de-8ffbd0ebb9a7d5752c234fc9b40c7d7bde3189b0#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-checkoutweb.ebay.de-8b864c279419b18777ed9343f208565dbe9e193c#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-checkoutweb.ebay.de-8b864c279419b18777ed9343f208565dbe9e193c#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-clients1.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-clients1.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-convusmp.datropy.com-467ab1d02b5fc2005e4a7f7caa539e1b0dd0936c#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-convusmp.datropy.com-467ab1d02b5fc2005e4a7f7caa539e1b0dd0936c#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-csi.gstatic.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-csi.gstatic.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-s.apollocdn.com-ea95760e97c140fe2b4c908e644ef57bd4acfdea#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-s.apollocdn.com-ea95760e97c140fe2b4c908e644ef57bd4acfdea#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-s.youtube.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-s.youtube.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-s.ytimg.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-s.ytimg.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-safebrowsing-cache.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-safebrowsing-cache.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-km.support.apple.com.edgekey.net-8e6ec7be578a68524296a81e4991a26518a97505#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-lh3.googleusercontent.com-92521017d056cf7cd55b081a9ab8e9d40b26e3ea#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-lh3.googleusercontent.com-92521017d056cf7cd55b081a9ab8e9d40b26e3ea#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-lh4.googleusercontent.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-lh4.googleusercontent.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-lh6.googleusercontent.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.youtube.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.youtube.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.youtube.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-yt3.ggpht.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-yt3.ggpht.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\test.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\test.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-i.imagessl.com-c04f7dda1ddbcae004c5ea451d843fcc2bfea8fd#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-i.imagessl.com-c04f7dda1ddbcae004c5ea451d843fcc2bfea8fd#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-i1.ytimg.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-i1.ytimg.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-i1.ytimg.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-i1.ytimg.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-intext.nav-links.com-2ececc9702c9967b1be1161d605769ef5f229dcf#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-intext.nav-links.com-2ececc9702c9967b1be1161d605769ef5f229dcf#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-i_hdstreamerjs_info.tlscdn.com-b208bab43317e7305278227924938544329276fe#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-i_hdstreamerjs_info.tlscdn.com-b208bab43317e7305278227924938544329276fe#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-karriere.deutschebahn.com-ca10e04d391cb2be7670306caaea0ead5bfb38b5#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-karriere.deutschebahn.com-ca10e04d391cb2be7670306caaea0ead5bfb38b5#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-master.anonymox.net-7e4e3e6c0d7eef45a90013515f4bba9497d1e93d#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-pijoto.net-d29ff667093c996d6c3b7dc3b312dc734cac3495#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-r13---sn-h0j7sn7z.googlevideo.com-11c8c77d30d3cb31603c6267dd8f2ade47b78e37#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-s-static.ak.facebook.com-1e1e8dcd1bd18bc98d24f02d5bd7b356130edd0a#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-safebrowsing-cache.google.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-script.ioam.de-91099ee65393c59716d9f6ebf755f95cfdf8ffda#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-services.addons.mozilla.org-65735c6ceb13966da0fe40af3ace7676bc95574f#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-ssl.gstatic.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-t.paypal.com-084be8769682236828d8e9dc55901e53e8eb8432#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.1-2-fly.com-5d104abb840d58721ae0b2d6a5145d163c7c98b1#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.google.de-757d71c65fe60e4b3a806e77eef04026cd36cf36#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.sparkasse-mainfranken.de-74ed615f5636be85d1cc3fe5dc286115b64f72f0#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.youtube.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-safebrowsing-cache.google.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-safebrowsing.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-safebrowsing.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-safebrowsing.google.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-safebrowsing.google.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-scontent-a.xx.fbcdn.net-47fa19de09412f882526baa183ef357e0963f554#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-scontent-a.xx.fbcdn.net-47fa19de09412f882526baa183ef357e0963f554#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-scontent-b.xx.fbcdn.net-47fa19de09412f882526baa183ef357e0963f554#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-scontent-b.xx.fbcdn.net-47fa19de09412f882526baa183ef357e0963f554#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-pixel.mathtag.com-a6fddb263cf56d92d6716b6c306627e34ece8bf1#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-pixel.mathtag.com-a6fddb263cf56d92d6716b6c306627e34ece8bf1#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-plus.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-plus.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-portal.sparkasse-mainfranken.de-783421051fa1396d569c61142c0cd2d1fbaff111#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-portal.sparkasse-mainfranken.de-783421051fa1396d569c61142c0cd2d1fbaff111#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-pubads.g.doubleclick.net-0e711510534ebcd80c6f69d9ae3eaff174183044#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-pubads.g.doubleclick.net-0e711510534ebcd80c6f69d9ae3eaff174183044#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-analytics.twitter.com-fb77d158dc1724ac550804ec186c48c402210eb0#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-analytics.twitter.com-fb77d158dc1724ac550804ec186c48c402210eb0#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-api.jollywallet.com-385ab5b59e88edb43f817eee17af9d2411ba0aff#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-api.jollywallet.com-385ab5b59e88edb43f817eee17af9d2411ba0aff#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-apis.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-apis.google.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-apis.google.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-apis.google.com-b575860c391db81e2ff3da6c7cc22cf7381fb2a3#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-aus3.mozilla.org-f5e289911d7931a92d7b7c9fcf483296c5c10140#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-aus3.mozilla.org-f5e289911d7931a92d7b7c9fcf483296c5c10140#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-d2cnb4m0nke2lh.cloudfront.net-c71b2485ece312837c05d8a1fdc5f9df2b317692#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-discussions.apple.com-c94da3da887c82f41d321dad001fdcc265dd4fbc#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-discussions.apple.com-c94da3da887c82f41d321dad001fdcc265dd4fbc#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-easylist-downloads.adblockplus.org-156acaf3838f6d445fdf089a2c6dd684c4bac7fa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-easylist-downloads.adblockplus.org-156acaf3838f6d445fdf089a2c6dd684c4bac7fa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-endall41-m.apollocdn.com-ea95760e97c140fe2b4c908e644ef57bd4acfdea#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-endall41-m.apollocdn.com-ea95760e97c140fe2b4c908e644ef57bd4acfdea#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-farm01.afterbuy.de-f81a64ca2e1f1e50ca4f4a60db0702a323ff67c8#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-farm01.afterbuy.de-f81a64ca2e1f1e50ca4f4a60db0702a323ff67c8#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.sparkasse-mainfranken.de-74ed615f5636be85d1cc3fe5dc286115b64f72f0#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.sparkasse.de-f35cfe1e8a40255d90d4a9b562c7d86ff7d96865#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.sparkasse.de-f35cfe1e8a40255d90d4a9b562c7d86ff7d96865#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.superfish.com-379922b07aba0722dffe21bac8045a54dc01c757#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.superfish.com-379922b07aba0722dffe21bac8045a54dc01c757#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.youtube-nocookie.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.youtube-nocookie.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-t.paypal.com-084be8769682236828d8e9dc55901e53e8eb8432#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-themes.googleusercontent.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-themes.googleusercontent.com-5951dff04694c4e6c53e296ea6fd5d2de3e22e34#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-twitter.com-813fd89d264cc9a5bb650d0b2d2bb0d63259bcaa#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-twitter.com-813fd89d264cc9a5bb650d0b2d2bb0d63259bcaa#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-versioncheck-bg.addons.mozilla.org-65735c6ceb13966da0fe40af3ace7676bc95574f#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-versioncheck-bg.addons.mozilla.org-65735c6ceb13966da0fe40af3ace7676bc95574f#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-www.1-2-fly.com-5d104abb840d58721ae0b2d6a5145d163c7c98b1#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-snippets-stats.mozilla.org-bfd9124fde9253905a5b1bb7b24aca000f2144cf#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-snippets-stats.mozilla.org-bfd9124fde9253905a5b1bb7b24aca000f2144cf#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-sofe.ebay.de-e9bcb487cbaa6137ce37b85b6eac8ec88e59b3f5#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-sofe.ebay.de-e9bcb487cbaa6137ce37b85b6eac8ec88e59b3f5#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-srv.main.ebayrtm.com-20b49a6d83d6c8b2e8c0e36fcd3ea4e6971ab89f#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-srv.main.ebayrtm.com-20b49a6d83d6c8b2e8c0e36fcd3ea4e6971ab89f#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-ssl.apple.com-89a30f3a8bb2508668047791e151d5afdd94465f#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-ssl.apple.com-89a30f3a8bb2508668047791e151d5afdd94465f#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-ssl.google-analytics.com-d8d34863b6bb5dc69aaf80cbb7eacc9d3ae90d00#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-ssl.google-analytics.com-d8d34863b6bb5dc69aaf80cbb7eacc9d3ae90d00#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-ssl.gstatic.com-2f4b78896e051d566b64659ead213ca1a42ae242#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-r13---sn-h0j7sn7z.googlevideo.com-11c8c77d30d3cb31603c6267dd8f2ade47b78e37#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-r14---sn-h0j7sn76.googlevideo.com-11c8c77d30d3cb31603c6267dd8f2ade47b78e37#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-r14---sn-h0j7sn76.googlevideo.com-11c8c77d30d3cb31603c6267dd8f2ade47b78e37#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-r14---sn-h0j7sne7.googlevideo.com-11c8c77d30d3cb31603c6267dd8f2ade47b78e37#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-r14---sn-h0j7sne7.googlevideo.com-11c8c77d30d3cb31603c6267dd8f2ade47b78e37#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-reco.ebay.com-6f379916863929da817c0f3dea69a3605768ba02#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-reco.ebay.com-6f379916863929da817c0f3dea69a3605768ba02#child.pvk, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\isis\SSL\Isis CA-s-static.ak.facebook.com-1e1e8dcd1bd18bc98d24f02d5bd7b356130edd0a#child.cer, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss\certutil.exe, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss\mozcrt19.dll, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss\nspr4.dll, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss\nss3.dll, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss\plc4.dll, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss\plds4.dll, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss\smime3.dll, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.Isis.A, C:\Program Files (x86)\Isis\nss\softokn3.dll, In Quarantäne, [8d3a633ee3981323ea8c01c07d85c838], PUP.Optional.BProtector.A, C:\Users\Franzi\AppData\Roaming\Mozilla\Firefox\Profiles\3k6k1nr1.default\bprotector_extensions.sqlite, In Quarantäne, [bf08633e6d0e7bbbdf6113cd5fa32cd4], PUP.Optional.BProtector.A, C:\Users\Franzi\AppData\Roaming\Mozilla\Firefox\Profiles\3k6k1nr1.default\bprotector_prefs.js, In Quarantäne, [1cab8120bac19f978bb6c0202dd5619f], PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\settings.json, In Quarantäne, [dbec4d54c8b3082e6365d1167d85b64a], PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\CrashMon.exe, Löschen bei Neustart, [dbec4d54c8b3082e6365d1167d85b64a], PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\CrashMon.log, In Quarantäne, [dbec4d54c8b3082e6365d1167d85b64a], PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\UpdaterService.exe, Löschen bei Neustart, [dbec4d54c8b3082e6365d1167d85b64a], PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\UpdaterService.log, Löschen bei Neustart, [dbec4d54c8b3082e6365d1167d85b64a], PUP.Optional.UniversalUpdater.A, C:\Program Files (x86)\Universal Updater\CrashReports\UpdaterService1.4.1.15.dmp, In Quarantäne, [dbec4d54c8b3082e6365d1167d85b64a], Trojan.Agent.TPL, C:\Users\Pun1sher\AppData\Local\2433f433, In Quarantäne, [c700f7aa2358c2744971ad47ca391fe1], PUP.Optional.Delta.A, C:\Users\Franzi\AppData\Roaming\Mozilla\Firefox\Profiles\3k6k1nr1.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=121562&babsrc=NT_ss&mntrId=00B57E2F6814D2E1");), Ersetzt,[fccba100e992f2446ce2ffdb16ee857b] Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.216 - Bericht erstellt am 21/07/2014 um 12:51:32 # Aktualisiert 17/07/2014 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) # Benutzername : Pun1sher - PUN1SHER-PC # Gestartet von : C:\Users\Pun1sher\Desktop\adwcleaner_3.216.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Program Files (x86)\Addon Enabler Ordner Gelöscht : C:\Users\Pun1sher\AppData\Local\Temp\OCS Ordner Gelöscht : C:\Users\Pun1sher\AppData\Roaming\Nico Mak Computing Datei Gelöscht : C:\Windows\System32\drivers\isis.sys ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\HD Streamer.BackgroundHostObject Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\HD Streamer.BackgroundHostObject.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\HD Streamer.Navbar Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\HD Streamer.Navbar.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\HD Streamer.Tool Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\HD Streamer.Tool.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\5b68cdcb66dea42 Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Schlüssel Gelöscht : HKCU\Software\OCS ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17207 -\\ Mozilla Firefox v30.0 (de) [ Datei : C:\Users\Franzi\AppData\Roaming\Mozilla\Firefox\Profiles\3k6k1nr1.default\prefs.js ] Zeile gelöscht : user_pref("browser.search.order.1", "Delta Search"); Zeile gelöscht : user_pref("browser.search.selectedEngine", "Delta Search"); [ Datei : C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\prefs.js ] ************************* AdwCleaner[R0].txt - [2702 octets] - [21/07/2014 12:27:14] AdwCleaner[S0].txt - [2443 octets] - [21/07/2014 12:51:32] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2503 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Ultimate x64 Ran by Pun1sher on 21.07.2014 at 12:55:04,40 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Pun1sher\AppData\Roaming\mozilla\firefox\profiles\wpp6wr98.default-1369682694779\minidumps [1 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 21.07.2014 at 13:01:16,73 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-07-2014 Ran by Pun1sher (administrator) on PUN1SHER-PC on 21-07-2014 13:05:03 Running from C:\Users\Pun1sher\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AdminService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe () C:\ExpressGateUtil\VAWinService.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (ASUS) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (ASUS) C:\Windows\AsScrPro.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe () C:\ExpressGateUtil\VAWinAgent.exe (Windows (R) Win 7 DDK provider) C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrobat_sl.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2168424 2010-10-13] (Realtek Semiconductor) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.) HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-05-03] (Alcor Micro Corp.) HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-25] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-25] (Atheros Commnucations) HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] () HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-23] () HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-09] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [VAWinAgent] => C:\ExpressGateUtil\VAWinAgent.exe [45448 2011-04-07] () HKLM-x32\...\Run: [FLxHCIm] => C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe [43008 2011-04-08] (Windows (R) Win 7 DDK provider) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [Spotify Web Helper] => C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-17] (Spotify Ltd) AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== ProxyServer: 10.19.3.1:8080 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF8EA8836E25BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Atheros\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: anonymoX - C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\Extensions\client@anonymox.net.xpi [2013-07-16] FF Extension: Adblock Plus - C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-28] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-03-24] ==================== Services (Whitelisted) ================= R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros) [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-25] (Atheros Commnucations) [File not signed] R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [897088 2010-11-03] (Intel Corporation) [File not signed] R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-11-03] (Intel Corporation) [File not signed] R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed] S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2013-04-17] () [File not signed] S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 mitsijm2012; C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [848184 2010-12-08] (Autodesk, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [91464 2011-03-25] () ==================== Drivers (Whitelisted) ==================== R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-01] (DT Soft Ltd) R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [56320 2011-04-08] (Fresco Logic) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) S3 Rockusb; C:\Windows\System32\DRIVERS\rockusb.sys [66704 2013-09-09] (Fuzhou Rockchip Electronics Co,Ltd.) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-16] () R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-08-15] (VMware, Inc.) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 isis; system32\drivers\isis.sys [X] U3 JavaQuickStarterService; S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-21 13:05 - 2014-07-21 13:06 - 00019005 _____ () C:\Users\Pun1sher\Desktop\FRST.txt 2014-07-21 13:03 - 2014-07-21 13:03 - 00000000 ___RD () C:\Users\Pun1sher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2014-07-21 13:01 - 2014-07-21 13:01 - 00000772 _____ () C:\Users\Pun1sher\Desktop\JRT.txt 2014-07-21 12:54 - 2014-07-21 12:54 - 00002595 _____ () C:\Users\Pun1sher\Desktop\AdwCleaner[S0].txt 2014-07-21 12:27 - 2014-07-21 12:51 - 00000000 ____D () C:\AdwCleaner 2014-07-21 12:18 - 2014-07-21 12:18 - 00051328 _____ () C:\Users\Pun1sher\Desktop\mbam.txt 2014-07-21 11:35 - 2014-07-21 13:04 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 11:34 - 2014-07-21 11:34 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-21 11:34 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-21 11:34 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-21 11:34 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-21 11:29 - 2014-07-21 11:29 - 01016261 _____ (Thisisu) C:\Users\Pun1sher\Desktop\JRT.exe 2014-07-21 11:28 - 2014-07-21 11:28 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Pun1sher\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 11:28 - 2014-07-21 11:28 - 01354223 _____ () C:\Users\Pun1sher\Desktop\adwcleaner_3.216.exe 2014-07-21 11:26 - 2014-07-21 11:26 - 00000772 _____ () C:\Users\Pun1sher\Desktop\JRT1.txt 2014-07-20 19:13 - 2014-07-20 19:06 - 00022954 _____ () C:\Users\Pun1sher\Desktop\ComboFix1.txt 2014-07-20 19:06 - 2014-07-20 19:06 - 00022954 _____ () C:\ComboFix.txt 2014-07-20 18:54 - 2014-07-20 19:06 - 00000000 ____D () C:\Qoobox 2014-07-20 18:54 - 2014-07-20 19:05 - 00000000 ____D () C:\Windows\erdnt 2014-07-20 18:54 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-20 18:54 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-20 18:54 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-20 18:52 - 2014-07-20 18:53 - 05222180 ____R (Swearware) C:\Users\Pun1sher\Desktop\ComboFix.exe 2014-07-20 12:56 - 2014-07-20 13:03 - 00047067 _____ () C:\Users\Pun1sher\Desktop\Addition1.txt 2014-07-20 12:54 - 2014-07-20 13:16 - 00041986 _____ () C:\Users\Pun1sher\Desktop\FRST1.txt 2014-07-20 12:54 - 2014-07-20 12:54 - 00000000 ____D () C:\Users\Pun1sher\Desktop\FRST-OlderVersion 2014-07-17 22:01 - 2014-07-21 13:05 - 00000000 ____D () C:\FRST 2014-07-17 22:01 - 2014-07-20 12:54 - 02089984 _____ (Farbar) C:\Users\Pun1sher\Desktop\FRST64.exe 2014-07-17 21:46 - 2014-07-17 21:46 - 00129820 _____ () C:\Users\Pun1sher\AppData\Local\ars.cache 2014-07-17 21:36 - 2014-07-17 21:36 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\HijackThis - CHIP-Installer.exe 2014-07-17 21:21 - 2014-07-17 21:21 - 00000036 _____ () C:\Users\Pun1sher\AppData\Local\housecall.guid.cache 2014-07-17 21:07 - 2014-07-17 21:07 - 00000000 ____D () C:\Windows\ERUNT 2014-07-10 19:46 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-10 19:46 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-10 19:46 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-10 19:46 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-10 19:46 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-10 19:46 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-10 19:46 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-10 19:46 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-10 19:45 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-10 19:44 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-10 19:44 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-10 19:44 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-10 19:44 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-10 19:44 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-10 19:44 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-10 19:44 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-10 19:44 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-10 19:44 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-10 19:44 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-10 19:44 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-10 19:44 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-10 19:44 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-10 19:44 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-10 19:44 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-10 19:44 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-10 19:44 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-10 19:44 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-10 19:44 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-10 19:44 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-10 19:44 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-10 19:44 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-10 19:44 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-10 19:44 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-10 19:44 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-10 19:44 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-10 19:44 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-10 19:44 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-10 19:44 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-10 19:44 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-10 19:44 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-10 19:44 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-10 19:44 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-10 19:44 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-10 19:44 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-10 19:44 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-10 19:44 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-10 19:44 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-10 19:44 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-10 19:44 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-10 19:44 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-10 19:44 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-10 19:44 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-10 19:44 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-10 19:44 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-10 19:44 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-10 19:44 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-10 19:44 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-10 19:44 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-10 19:44 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-10 19:44 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-10 19:44 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-10 19:44 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-10 19:44 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-10 19:44 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-10 19:44 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-10 19:42 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-10 19:42 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-10 19:42 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-06 11:59 - 2014-07-06 11:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-07-06 11:57 - 2014-07-06 11:57 - 00000000 ____D () C:\Program Files\SAMSUNG 2014-07-06 11:53 - 2014-07-06 11:53 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-07-06 11:53 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll 2014-07-06 11:52 - 2014-07-16 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\SelfMV 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\samsung 2014-06-23 14:05 - 2014-06-23 14:05 - 00000000 ____D () C:\Users\Pun1sher\Desktop\TB.Mathematischer.Formeln.N ==================== One Month Modified Files and Folders ======= 2014-07-21 13:06 - 2014-07-21 13:05 - 00019005 _____ () C:\Users\Pun1sher\Desktop\FRST.txt 2014-07-21 13:05 - 2014-07-17 22:01 - 00000000 ____D () C:\FRST 2014-07-21 13:04 - 2014-07-21 11:35 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 13:03 - 2014-07-21 13:03 - 00000000 ___RD () C:\Users\Pun1sher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2014-07-21 13:03 - 2013-10-03 21:29 - 00000000 ____D () C:\ProgramData\VMware 2014-07-21 13:03 - 2013-04-10 00:27 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-07-21 13:03 - 2013-03-30 18:35 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-07-21 13:03 - 2013-03-30 18:35 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini 2014-07-21 13:03 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-21 13:03 - 2009-07-14 06:51 - 00093894 _____ () C:\Windows\setupact.log 2014-07-21 13:02 - 2013-03-28 21:39 - 01955739 _____ () C:\Windows\WindowsUpdate.log 2014-07-21 13:01 - 2014-07-21 13:01 - 00000772 _____ () C:\Users\Pun1sher\Desktop\JRT.txt 2014-07-21 13:00 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-21 13:00 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-21 12:54 - 2014-07-21 12:54 - 00002595 _____ () C:\Users\Pun1sher\Desktop\AdwCleaner[S0].txt 2014-07-21 12:52 - 2010-11-21 05:47 - 00577920 _____ () C:\Windows\PFRO.log 2014-07-21 12:51 - 2014-07-21 12:27 - 00000000 ____D () C:\AdwCleaner 2014-07-21 12:30 - 2013-04-02 03:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-21 12:18 - 2014-07-21 12:18 - 00051328 _____ () C:\Users\Pun1sher\Desktop\mbam.txt 2014-07-21 12:09 - 2013-03-28 23:19 - 00002260 _____ () C:\Windows\system32\AutoRunFilter.ini 2014-07-21 12:09 - 2013-03-28 23:19 - 00001848 _____ () C:\Windows\system32\ServiceFilter.ini 2014-07-21 12:08 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-07-21 11:34 - 2014-07-21 11:34 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-21 11:29 - 2014-07-21 11:29 - 01016261 _____ (Thisisu) C:\Users\Pun1sher\Desktop\JRT.exe 2014-07-21 11:28 - 2014-07-21 11:28 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Pun1sher\Desktop\mbam-setup-2.0.2.1012.exe 2014-07-21 11:28 - 2014-07-21 11:28 - 01354223 _____ () C:\Users\Pun1sher\Desktop\adwcleaner_3.216.exe 2014-07-21 11:26 - 2014-07-21 11:26 - 00000772 _____ () C:\Users\Pun1sher\Desktop\JRT1.txt 2014-07-21 11:21 - 2013-03-30 19:26 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\CrashDumps 2014-07-21 11:13 - 2013-03-30 18:25 - 00000000 ____D () C:\Users\Pun1sher\Documents\Bluetooth Folder 2014-07-20 19:06 - 2014-07-20 19:13 - 00022954 _____ () C:\Users\Pun1sher\Desktop\ComboFix1.txt 2014-07-20 19:06 - 2014-07-20 19:06 - 00022954 _____ () C:\ComboFix.txt 2014-07-20 19:06 - 2014-07-20 18:54 - 00000000 ____D () C:\Qoobox 2014-07-20 19:06 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-07-20 19:05 - 2014-07-20 18:54 - 00000000 ____D () C:\Windows\erdnt 2014-07-20 19:04 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-07-20 18:53 - 2014-07-20 18:52 - 05222180 ____R (Swearware) C:\Users\Pun1sher\Desktop\ComboFix.exe 2014-07-20 13:16 - 2014-07-20 12:54 - 00041986 _____ () C:\Users\Pun1sher\Desktop\FRST1.txt 2014-07-20 13:03 - 2014-07-20 12:56 - 00047067 _____ () C:\Users\Pun1sher\Desktop\Addition1.txt 2014-07-20 12:54 - 2014-07-20 12:54 - 00000000 ____D () C:\Users\Pun1sher\Desktop\FRST-OlderVersion 2014-07-20 12:54 - 2014-07-17 22:01 - 02089984 _____ (Farbar) C:\Users\Pun1sher\Desktop\FRST64.exe 2014-07-20 12:52 - 2013-03-28 23:07 - 00000000 ____D () C:\ProgramData\Adobe 2014-07-20 12:51 - 2013-03-28 23:07 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-07-20 12:51 - 2013-03-28 22:53 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Adobe 2014-07-17 22:51 - 2013-03-29 16:12 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2014-07-17 21:46 - 2014-07-17 21:46 - 00129820 _____ () C:\Users\Pun1sher\AppData\Local\ars.cache 2014-07-17 21:36 - 2014-07-17 21:36 - 00961360 _____ (Chip Digital GmbH) C:\Users\Pun1sher\Desktop\HijackThis - CHIP-Installer.exe 2014-07-17 21:21 - 2014-07-17 21:21 - 00000036 _____ () C:\Users\Pun1sher\AppData\Local\housecall.guid.cache 2014-07-17 21:07 - 2014-07-17 21:07 - 00000000 ____D () C:\Windows\ERUNT 2014-07-16 18:06 - 2011-04-12 09:43 - 00712872 _____ () C:\Windows\system32\perfh007.dat 2014-07-16 18:06 - 2011-04-12 09:43 - 00155802 _____ () C:\Windows\system32\perfc007.dat 2014-07-16 18:06 - 2009-07-14 07:13 - 01657770 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-16 16:58 - 2013-10-12 18:46 - 00000000 ____D () C:\Users\Pun1sher\Documents\BioWare 2014-07-16 16:56 - 2014-04-27 21:43 - 00000000 ____D () C:\Program Files\Sweet Home 3D 2014-07-16 16:56 - 2014-03-05 19:16 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Adventure Company 2014-07-16 16:33 - 2014-07-06 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-07-16 16:33 - 2013-10-28 14:10 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Samsung 2014-07-16 16:33 - 2013-10-28 14:09 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-07-16 16:33 - 2013-03-28 23:08 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-15 23:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-07-15 15:03 - 2013-03-28 21:39 - 00000000 ____D () C:\Users\Pun1sher 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files\iTunes 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files\iPod 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-07-15 15:02 - 2013-06-09 19:18 - 00000000 ____D () C:\Users\Franzi 2014-07-15 15:02 - 2013-03-28 23:33 - 00000000 ____D () C:\ProgramData\P4G 2014-07-15 15:02 - 2013-03-28 23:21 - 00000000 ____D () C:\ExpressGateUtil 2014-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-07-12 10:43 - 2009-07-14 06:45 - 05168528 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-12 10:41 - 2014-05-06 23:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-12 10:41 - 2011-04-12 09:54 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-12 10:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-12 10:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-10 19:49 - 2013-04-17 16:12 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-10 19:48 - 2013-07-18 18:18 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 19:45 - 2013-03-30 19:11 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-09 13:31 - 2013-04-02 03:38 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-09 13:31 - 2013-04-02 03:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 13:31 - 2013-03-28 21:43 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-08 12:32 - 2014-04-26 12:48 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Bilder 2014-07-08 09:35 - 2013-03-30 22:46 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Filme 2014-07-06 21:49 - 2013-03-29 16:41 - 00000000 ____D () C:\Users\Pun1sher\Desktop\JD Download 2014-07-06 21:43 - 2013-10-28 14:11 - 00000099 _____ () C:\Users\Public\LMDebug.log 2014-07-06 15:45 - 2014-01-14 18:08 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Dokumente 2014-07-06 11:59 - 2014-07-06 11:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-07-06 11:57 - 2014-07-06 11:57 - 00000000 ____D () C:\Program Files\SAMSUNG 2014-07-06 11:57 - 2013-10-28 14:10 - 00000000 ____D () C:\ProgramData\Samsung 2014-07-06 11:53 - 2014-07-06 11:53 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-07-06 11:53 - 2013-03-28 23:08 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\Downloaded Installations 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\SelfMV 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\samsung 2014-07-03 12:19 - 2014-01-19 19:57 - 00000000 ____D () C:\Users\Pun1sher\Documents\Outlook-Dateien 2014-06-30 04:09 - 2014-07-10 19:46 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-10 19:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-27 10:37 - 2013-07-03 16:57 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Youtube 2014-06-23 14:05 - 2014-06-23 14:05 - 00000000 ____D () C:\Users\Pun1sher\Desktop\TB.Mathematischer.Formeln.N 2014-06-22 15:23 - 2013-03-29 16:43 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Spotify 2014-06-22 15:23 - 2013-03-29 16:43 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\Spotify 2014-06-22 15:06 - 2013-03-29 01:55 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\vlc Some content of TEMP: ==================== C:\Users\Pun1sher\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-15 23:07 ==================== End Of Log ============================ --- --- --- |
21.07.2014, 12:24 | #12 |
| Malware & SSL-Fehler Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-07-2014 Ran by Pun1sher at 2014-07-21 13:06:33 Running from C:\Users\Pun1sher\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== abgx360 v1.0.6 (HKLM-x32\...\abgx360) (Version: - ) Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 1.1.377 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (HKLM-x32\...\{FF2A5498-4EFE-430F-A138-7EB365DBEBAD}) (Version: 11.6.1.629 - Adobe Systems, Inc) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{1F7424F8-F992-48BC-90EF-7C4DB0405E3F}) (Version: 1.7.17.25416 - Ihr Firmenname) Alcor Micro USB Card Reader (x32 Version: 1.7.17.25416 - Ihr Firmenname) Hidden Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.2 - Sereby Corporation) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS) ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.43 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0030 - ASUS) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus) ASUS_N3_Series (HKLM-x32\...\ASUS_N3_Series) (Version: 1.0.0001 - ASUS) Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS) Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul) (Version: 1.0.0.18 - Autodesk) Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul (Version: 1.0.0.18 - Autodesk) Hidden Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul Language Pack (Version: 1.0.0.18 - Autodesk) Hidden Autodesk Inventor Professional 2012 (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 Deutsch (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.0.16000.0000 - Autodesk) Autodesk Inventor Professional 2012 Language Pack - Deutsch (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk) Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.) Autodesk Vault 2012 (Client) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Autodesk Vault 2012 (Client) German Language Pack (Version: 16.0.56.200 - Autodesk, Inc.) Hidden AVNavigator 2013.I (HKCU\...\AVNavigator 2013.I) (Version: 1.14.0.005.1 - PIONEER CORPORATION) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.45 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Command & Conquer(TM) Generäle (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts) Command & Conquer(TM) Generäle (x32 Version: 0.50.0000 - Electronic Arts) Hidden Common Desktop Agent (Version: 1.62.0 - OEM) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft) DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation) DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation) Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited) ETDWare PS/2-x64 7.0.5.15_WHQL (HKLM\...\Elantech) (Version: 7.0.5.15 - ELAN Microelectronics Corp.) ExpressGateCloud (HKLM-x32\...\InstallShield_{36B0DC39-3282-40EB-8587-B875CE46C3A7}) (Version: 2.6.27.160 - VideACE Co.) ExpressGateCloud (x32 Version: 2.6.27.160 - VideACE Co.) Hidden Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Free Audio CD Burner version 2.0.23.422 (HKLM-x32\...\Free Audio CD Burner_is1) (Version: 2.0.23.422 - DVDVideoSoft Ltd.) Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com) Free YouTube Download version 3.2.3.610 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.3.610 - DVDVideoSoft Ltd.) Fresco Logic USB3.0 Host Controller (HKLM\...\{BE8CF365-1CFE-49D7-A4C2-A943526274C4}) (Version: 3.0.119.1 - Fresco Logic Inc.) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.0.0.0454 - Intel Corporation) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java(TM) 7 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217000FF}) (Version: 7.0.0 - Oracle) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 1.1 German Language Pack (HKLM-x32\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 1.1 Security Update (KB2416447) (HKLM-x32\...\M2416447) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - ) Microsoft .NET Framework 1.1 SP1 + KB928366 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 SP1 + KB928366 (x32 Version: 1.1.4322 - Microsoft) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{79BF7CB8-1E09-489F-9547-DB3EE8EA3F16}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{86177DAE-38B1-49DD-912E-35CB703AB779}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version: - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MP3 to WAV RES (HKLM-x32\...\MP3 to WAV RES) (Version: - ) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA 3D Vision Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.82 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Optimus Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation) OpenProj (HKLM-x32\...\{13702021-43FB-480C-912F-D9B74A538288}) (Version: 1.4.0 - Serena Software Inc.) PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6221 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.45 - Piriform) Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.02.74.00(06.11.2012) - Samsung Electronics Co., Ltd.) Samsung ML-2160 Series (HKLM-x32\...\Samsung ML-2160 Series) (Version: 1.10 (22.11.2012) - Samsung Electronics Co., Ltd.) Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.) Schnell-Deinstallations-Tool für Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden SonicMaster (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.00.0000 - Virage Logic, Corp.) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) tools-linux (x32 Version: 9.6.0.1295980 - VMware, Inc.) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden Überwachungstool für die Intel® Turbo-Boost-Technik (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.400.4 - Intel) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) USB2.0 UVC 2M WebCam (HKLM\...\USB2.0 UVC 2M WebCam) (Version: 5.8.55133.208 - Sonix) VBA (2627.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden VBA (2701.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN) VMware Player (HKLM-x32\...\VMware_Player) (Version: 6.0.0 - VMware, Inc) VMware Player (Version: 6.0.0 - VMware, Inc.) Hidden Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation) Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.0 - ASUS) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS) ==================== Restore Points ========================= 06-07-2014 19:01:35 Windows-Sicherung 08-07-2014 07:38:41 Windows Update 10-07-2014 17:43:09 Windows Update 10-07-2014 18:13:59 Windows Update 14-07-2014 08:36:31 Windows-Sicherung 15-07-2014 12:30:46 Windows Update 15-07-2014 12:56:57 Removed Samsung Kies3 15-07-2014 12:59:40 Wiederherstellungsvorgang 15-07-2014 13:14:28 Windows Update 16-07-2014 14:32:30 Removed Samsung Kies3 20-07-2014 10:46:10 Windows Update 20-07-2014 10:53:16 Yu-Gi-Oh! Power of Chaos KAIBA THE REVENGE wird entfernt 20-07-2014 17:00:13 Windows-Sicherung ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-07-20 19:04 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {17F1D77A-8C96-49D4-A7C2-242F4A2E2012} - System32\Tasks\{0F7DB7A6-2C5C-4262-AE6E-6B0CD61EEAAE} => C:\Users\Pun1sher\Desktop\wormsarm\Worms.Armageddon-ORIGIN\Worms Armageddon\Wa.exe Task: {181FD012-81A5-4289-AF4E-24F35767A011} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-01] (ASUS) Task: {22D00F9B-52E4-4254-BD49-D9B11E67C619} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2013-01-11] (ASUSTek Computer Inc.) Task: {23D272CF-B550-44F1-A7CA-527E0E321B25} - System32\Tasks\{EA6D2851-4DD1-4E15-9F71-D21484407B69} => C:\Users\Pun1sher\Desktop\BMW_Carsoft_6.5_SP1_Cracks\CarSoft 6.5\Setup.exe Task: {25CC6007-1CD2-4273-9D2E-6985FA096E85} - System32\Tasks\{1DFC906C-DB2C-4FDE-86E9-ACFBDFD3EA4F} => C:\Program Files (x86)\Microtek\ScanWizard 5\ScanWizard5.exe Task: {31A9A4EE-CB31-48E5-AB35-EA3933C9596E} - System32\Tasks\{D043C9C4-7838-42F4-9106-CF88D8F29A69} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {376B5C79-7AE3-4D2A-B9E2-B7E36530784A} - System32\Tasks\{88DB5928-7B62-49F9-A08C-E7446C6E1943} => D:\EXSL\SERVER\slkffs.exe Task: {3A074C7D-9546-4C4C-AFE5-201A588AB1EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {5119CEFD-9FF8-4E7B-84C2-99F1857A34A0} - System32\Tasks\{004B2FEB-D3C3-4AD4-9A4C-EE3B19C8A9DF} => C:\Users\Pun1sher\Desktop\wormsarm\Worms.Armageddon-ORIGIN\Worms Armageddon\Wa.exe Task: {53481977-2141-48CB-B6E4-3FEF0D158E95} - System32\Tasks\{E5A2DD27-BB24-401F-B840-207B24B0F9D9} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {5C8684BC-50D3-4258-BB44-4AF94C752C00} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {7569289C-EFED-4934-A3E5-5A9016BC36DF} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-12-17] (ASUSTek Computer Inc.) Task: {7ADF3156-F69D-4AE1-8687-082AFC623DB7} - System32\Tasks\{C2B018E4-9ACC-40F5-8A46-152B25590DA9} => E:\Hitman\Hitman Absolution Deluxe Professional Edition\HMA.exe Task: {7C1E5963-E16C-4F54-8002-BFA83C33CC0B} - System32\Tasks\{93E6E800-ED2E-4702-8829-2A66B74A0564} => C:\Program Files (x86)\Microtek\ScanWizard 5\ScanWizard5.exe Task: {7F0977BA-502A-40C0-9A6A-E931E2C886DB} - System32\Tasks\{E32FA199-A037-491D-97F1-B19F9372E052} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {8345D484-5CD1-4421-962F-CB3CBD4FC049} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {94D928C7-B1F5-4D24-8E6B-127769535B82} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS) Task: {A44F1DAB-6CBA-455D-8E8C-4CE25C960E6A} - System32\Tasks\{B88BB7D5-7F10-48DF-B6E8-471F7524554E} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {AE202B72-D27F-40FF-94D0-B5A3669751BC} - System32\Tasks\{0DE2E98B-E66A-464F-AAFF-D147CF702541} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {B93C66A2-05A9-4932-892D-8758AF4BF8C0} - System32\Tasks\{95588F81-2601-433A-B70C-86D840B78E8F} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {D607E2B1-7642-480C-8C30-31312182E293} - System32\Tasks\{FD690738-6AB6-44F4-86D2-79A2E0241EAE} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {D94802D5-45ED-4B1E-B52A-0CF868F3302B} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {DC0E306F-BF46-45DC-9F36-F49463DFDC31} - System32\Tasks\{B1215417-2BB1-4C95-81F8-CCC81EF2EA94} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {E901B31F-4118-426F-9770-2035F4465D96} - System32\Tasks\{8310E8AB-6569-4E5B-B48F-7D95AEC882BF} => D:\EXSL\SERVER\slkffs.exe Task: {F9F10200-A50B-4047-8955-25AAD0384EB8} - System32\Tasks\{45FBF7C1-30CC-4FF4-B4C0-B054FC54BAEF} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-28 14:10 - 2011-04-25 13:24 - 00034304 _____ () C:\Windows\System32\ssj1mlm.dll 2013-04-10 01:01 - 2013-11-11 17:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00091464 _____ () C:\ExpressGateUtil\VAWinService.exe 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-07-14 17:11 - 2010-07-14 17:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll 2010-04-02 20:21 - 2008-10-01 00:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2013-03-30 18:33 - 2007-11-30 12:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe 2013-03-29 00:58 - 2011-01-27 09:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-02-20 23:23 - 2012-02-20 23:23 - 00456704 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe 2012-02-20 23:23 - 2012-02-20 23:23 - 00051200 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2010-09-23 17:53 - 2010-09-23 17:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 2011-04-07 22:26 - 2011-04-07 22:26 - 00045448 _____ () C:\ExpressGateUtil\VAWinAgent.exe 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00157000 _____ () C:\ExpressGateUtil\libexpat.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00061768 _____ () C:\ExpressGateUtil\netProfileDatabase.DLL 2013-08-27 12:42 - 2013-08-27 12:42 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll 2014-06-18 10:13 - 2014-06-18 10:13 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2012-09-23 21:43 - 2012-09-23 21:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: Spotify => "C:\Users\Pun1sher\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" ==================== Faulty Device Manager Devices ============= Name: isis Description: isis Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: isis Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: VMware Virtual Ethernet Adapter for VMnet1 Description: VMware Virtual Ethernet Adapter for VMnet1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/21/2014 01:04:53 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/21/2014 01:02:11 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] System errors: ============= Error: (07/21/2014 01:04:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/21/2014 01:04:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/21/2014 01:04:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/21/2014 01:04:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/21/2014 01:04:42 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/21/2014 01:04:42 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/21/2014 01:04:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/21/2014 01:04:32 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/21/2014 01:04:32 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/21/2014 01:03:29 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: isis Microsoft Office Sessions: ========================= Error: (07/21/2014 01:04:53 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/21/2014 01:02:11 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] CodeIntegrity Errors: =================================== Date: 2014-07-20 19:03:06.883 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-07-20 19:03:06.836 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:54.215 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:54.174 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:13.031 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:13.000 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:03:30.131 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:03:30.038 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:59:02.831 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:59:02.800 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 19% Total physical RAM: 12198.78 MB Available physical RAM: 9837.05 MB Total Pagefile: 24395.74 MB Available Pagefile: 21965.68 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:293.03 GB) (Free:144.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Programme) (Fixed) (Total:380.6 GB) (Free:378.37 GB) NTFS Drive e: (Spiele) (Fixed) (Total:349.32 GB) (Free:346.57 GB) NTFS Drive f: (Daten) (Fixed) (Total:349.31 GB) (Free:249.71 GB) NTFS Drive g: (Sicherung) (Fixed) (Total:25 GB) (Free:0 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 2F851246) Partition 1: (Not Active) - (Size=25 GB) - (Type=07 NTFS) Partition 2: (Active) - (Size=293 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=381 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 699 GB) (Disk ID: 707B3822) Partition 1: (Not Active) - (Size=699 GB) - (Type=OF Extended) ==================== End Of Log ============================ Musste leider zweimal Posten war zu lang.. Scheint jetzt wieder alles zu funktionieren vielen Dank scho ma , aber interessant wäre noch woher des gekommen sein kann falls des ersichtlich ist nicht das des gleich wieder einfang? Und soll ich des Malwarebytes drauflassen oder wieder löschen wenn Antivir wieder drauf mach? |
21.07.2014, 14:03 | #13 |
/// the machine /// TB-Ausbilder | Malware & SSL-FehlerESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.07.2014, 17:47 | #14 |
| Malware & SSL-Fehler ESET log Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=79a60f772b3ab74295684c5490838259 # engine=19274 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-07-21 03:22:04 # local_time=2014-07-21 05:22:04 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='Avira Desktop' # compatibility_mode=1810 16777213 100 99 13017 1656923 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 80057 157585974 0 0 # scanned=246568 # found=9 # cleaned=0 # scan_time=7531 sh=1C947E66F38FEB8C4D8E2F325D3311B9CDB4847A ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Backup\C\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\prefs_21_07_2014_12_51_33.js" sh=972DB9071C719922142BE77CF935C208B66F8DE2 ft=1 fh=c50a95d882970223 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Pun1sher\AppData\Local\Temp\OCS\ocs_v71b.exe.vir" sh=4C2D613741615DE9FE21C604C2701011D6B61957 ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\prefs.js" sh=113ADA6F10D616A3B216999070806DF206448665 ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\prefs.js.BAK" sh=249ADF9740F0A002149855A15D93F70698E8A30F ft=1 fh=870f20eae3692438 vn="Win32/Packed.Autoit.C.Gen evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Pun1sher\Desktop\Programme\CRC-Killer.exe" sh=E7707FD010E0AF4C5F2711A4C8341D7109A22C36 ft=1 fh=50681189d3d76d06 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Pun1sher\Desktop\Programme\Anti Malware usw\HijackThis - CHIP-Installer.exe" sh=4766545B5D8FD6E26A16A0441308BED5AA220610 ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen evtl. unerwünschte Anwendung" ac=I fn="G:\PUN1SHER-PC\Backup Set 2013-06-02 190000\Backup Files 2013-06-02 190000\Backup files 1.zip" sh=69297673BC81D67FB25A56A8845FEE2CA43C5E1C ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen evtl. unerwünschte Anwendung" ac=I fn="G:\PUN1SHER-PC\Backup Set 2013-06-02 190000\Backup Files 2013-06-02 190000\Backup files 16.zip" sh=801747C00C238B58B6E87E89E06CF36658F165D1 ft=0 fh=0000000000000000 vn="JS/SecurityDisabler.A.Gen evtl. unerwünschte Anwendung" ac=I fn="G:\PUN1SHER-PC\Backup Set 2013-06-02 190000\Backup Files 2013-06-09 192623\Backup files 1.zip" Code:
ATTFilter Results of screen317's Security Check version 0.99.85 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` TuneUp Utilities Language Pack (de-DE) Java(TM) 7 Java version out of Date! Adobe Flash Player 14.0.0.145 Mozilla Firefox (30.0) ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-07-2014 Ran by Pun1sher (administrator) on PUN1SHER-PC on 21-07-2014 18:34:32 Running from C:\Users\Pun1sher\Desktop Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AdminService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe () C:\ExpressGateUtil\VAWinService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUS) C:\Windows\AsScrPro.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ASUS) C:\Program Files\P4G\BatteryLife.exe () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe (Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Atheros Communications) C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe () C:\ExpressGateUtil\VAWinAgent.exe (Windows (R) Win 7 DDK provider) C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Windows\System32\prevhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2168424 2010-10-13] (Realtek Semiconductor) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.) HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [324096 2010-05-03] (Alcor Micro Corp.) HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe [613536 2010-11-25] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe [379040 2010-11-25] (Atheros Commnucations) HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] () HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-23] () HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328504 2013-01-11] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184 2012-10-17] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-09] (Virage Logic Corporation / Sonic Focus) HKLM-x32\...\Run: [VAWinAgent] => C:\ExpressGateUtil\VAWinAgent.exe [45448 2011-04-07] () HKLM-x32\...\Run: [FLxHCIm] => C:\Program Files\Fresco Logic Inc\Fresco Logic USB3.0 Host Controller\host\FLxHCIm.exe [43008 2011-04-08] (Windows (R) Win 7 DDK provider) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-1795932825-3143353406-2963670982-1000\...\Run: [Spotify Web Helper] => C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-17] (Spotify Ltd) AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-11-14] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-11-14] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== ProxyServer: 10.19.3.1:8080 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF8EA8836E25BCE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Atheros\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Adblock Plus - C:\Users\Pun1sher\AppData\Roaming\Mozilla\Firefox\Profiles\wpp6wr98.default-1369682694779\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-28] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-03-24] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe [151552 2010-05-24] (Atheros) [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe [52896 2010-11-25] (Atheros Commnucations) [File not signed] R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [897088 2010-11-03] (Intel Corporation) [File not signed] R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-11-03] (Intel Corporation) [File not signed] R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed] S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2013-04-17] () [File not signed] S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 mitsijm2012; C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [848184 2010-12-08] (Autodesk, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) R2 VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [91464 2011-03-25] () ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-01] (DT Soft Ltd) R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [56320 2011-04-08] (Fresco Logic) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) S3 Rockusb; C:\Windows\System32\DRIVERS\rockusb.sys [66704 2013-09-09] (Fuzhou Rockchip Electronics Co,Ltd.) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-16] () R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-08-15] (VMware, Inc.) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 isis; system32\drivers\isis.sys [X] U3 JavaQuickStarterService; S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-21 18:34 - 2014-07-21 18:34 - 00020155 _____ () C:\Users\Pun1sher\Desktop\FRST.txt 2014-07-21 18:34 - 2014-07-20 12:54 - 02089984 _____ (Farbar) C:\Users\Pun1sher\Desktop\FRST64.exe 2014-07-21 18:32 - 2014-07-21 18:32 - 00000831 _____ () C:\Users\Pun1sher\Desktop\checkup.txt 2014-07-21 18:28 - 2014-07-21 18:29 - 00854390 _____ () C:\Users\Pun1sher\Desktop\SecurityCheck.exe 2014-07-21 15:14 - 2014-07-21 15:14 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-21 15:12 - 2014-07-21 15:12 - 02347384 _____ (ESET) C:\Users\Pun1sher\Desktop\esetsmartinstaller_deu.exe 2014-07-21 13:36 - 2014-07-21 13:36 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Avira 2014-07-21 13:35 - 2014-07-21 13:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-07-21 13:34 - 2014-07-21 13:34 - 00000000 ____D () C:\ProgramData\Avira 2014-07-21 13:34 - 2014-07-21 13:34 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-07-21 13:34 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-07-21 13:34 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-21 13:34 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-07-21 13:28 - 2014-07-21 13:31 - 00000000 ____D () C:\ProgramData\Package Cache 2014-07-21 13:28 - 2014-07-21 13:30 - 00000000 ____D () C:\OETemp 2014-07-21 12:27 - 2014-07-21 12:51 - 00000000 ____D () C:\AdwCleaner 2014-07-21 11:35 - 2014-07-21 15:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-21 11:34 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-21 11:34 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-21 11:34 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-20 19:06 - 2014-07-20 19:06 - 00022954 _____ () C:\ComboFix.txt 2014-07-20 18:54 - 2014-07-20 19:06 - 00000000 ____D () C:\Qoobox 2014-07-20 18:54 - 2014-07-20 19:05 - 00000000 ____D () C:\Windows\erdnt 2014-07-20 18:54 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-20 18:54 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-20 18:54 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-20 18:54 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-17 22:01 - 2014-07-21 18:34 - 00000000 ____D () C:\FRST 2014-07-17 21:46 - 2014-07-17 21:46 - 00129820 _____ () C:\Users\Pun1sher\AppData\Local\ars.cache 2014-07-17 21:21 - 2014-07-17 21:21 - 00000036 _____ () C:\Users\Pun1sher\AppData\Local\housecall.guid.cache 2014-07-17 21:07 - 2014-07-17 21:07 - 00000000 ____D () C:\Windows\ERUNT 2014-07-10 19:46 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-10 19:46 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-10 19:46 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-10 19:46 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-10 19:46 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-10 19:46 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-10 19:46 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-10 19:46 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-10 19:45 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-10 19:45 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-10 19:45 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-10 19:44 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-10 19:44 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-10 19:44 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-10 19:44 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-10 19:44 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-07-10 19:44 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-10 19:44 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-10 19:44 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-10 19:44 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-07-10 19:44 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-07-10 19:44 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-10 19:44 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-10 19:44 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-07-10 19:44 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-07-10 19:44 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-07-10 19:44 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-07-10 19:44 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-10 19:44 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-07-10 19:44 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-10 19:44 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-07-10 19:44 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-10 19:44 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-10 19:44 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-10 19:44 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-10 19:44 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-10 19:44 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-10 19:44 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-10 19:44 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-10 19:44 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-07-10 19:44 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-07-10 19:44 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-10 19:44 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-10 19:44 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-10 19:44 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-10 19:44 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-10 19:44 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-07-10 19:44 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-07-10 19:44 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-07-10 19:44 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-07-10 19:44 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-10 19:44 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-10 19:44 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-10 19:44 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-10 19:44 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-10 19:44 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-10 19:44 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-10 19:44 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-10 19:44 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-10 19:44 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-07-10 19:44 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-10 19:44 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-10 19:44 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-10 19:44 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-07-10 19:44 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-10 19:44 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-10 19:44 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-07-10 19:42 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-10 19:42 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-07-10 19:42 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-06 11:59 - 2014-07-06 11:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-07-06 11:57 - 2014-07-06 11:57 - 00000000 ____D () C:\Program Files\SAMSUNG 2014-07-06 11:53 - 2014-07-06 11:53 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-07-06 11:53 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll 2014-07-06 11:52 - 2014-07-16 16:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\SelfMV 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\samsung ==================== One Month Modified Files and Folders ======= 2014-07-21 18:34 - 2014-07-21 18:34 - 00020155 _____ () C:\Users\Pun1sher\Desktop\FRST.txt 2014-07-21 18:34 - 2014-07-17 22:01 - 00000000 ____D () C:\FRST 2014-07-21 18:32 - 2014-07-21 18:32 - 00000831 _____ () C:\Users\Pun1sher\Desktop\checkup.txt 2014-07-21 18:30 - 2013-04-02 03:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-21 18:29 - 2014-07-21 18:28 - 00854390 _____ () C:\Users\Pun1sher\Desktop\SecurityCheck.exe 2014-07-21 18:22 - 2013-03-30 18:35 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini 2014-07-21 17:53 - 2011-04-12 09:43 - 00712872 _____ () C:\Windows\system32\perfh007.dat 2014-07-21 17:53 - 2011-04-12 09:43 - 00155802 _____ () C:\Windows\system32\perfc007.dat 2014-07-21 17:53 - 2009-07-14 07:13 - 01657770 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-21 17:52 - 2013-03-28 21:39 - 01991453 _____ () C:\Windows\WindowsUpdate.log 2014-07-21 15:14 - 2014-07-21 15:14 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-07-21 15:14 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-21 15:14 - 2009-07-14 06:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-21 15:12 - 2014-07-21 15:12 - 02347384 _____ (ESET) C:\Users\Pun1sher\Desktop\esetsmartinstaller_deu.exe 2014-07-21 15:08 - 2014-07-21 11:35 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-21 15:07 - 2013-10-03 21:29 - 00000000 ____D () C:\ProgramData\VMware 2014-07-21 15:07 - 2013-03-30 18:35 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-07-21 15:07 - 2009-07-14 06:51 - 00094230 _____ () C:\Windows\setupact.log 2014-07-21 15:06 - 2013-04-10 00:27 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-07-21 15:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-21 14:59 - 2013-03-29 16:41 - 00000000 ____D () C:\Users\Pun1sher\Desktop\JD Download 2014-07-21 14:00 - 2013-03-29 16:12 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2014-07-21 13:45 - 2010-11-21 05:47 - 00735904 _____ () C:\Windows\PFRO.log 2014-07-21 13:36 - 2014-07-21 13:36 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Avira 2014-07-21 13:35 - 2014-07-21 13:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-07-21 13:34 - 2014-07-21 13:34 - 00000000 ____D () C:\ProgramData\Avira 2014-07-21 13:34 - 2014-07-21 13:34 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-07-21 13:31 - 2014-07-21 13:28 - 00000000 ____D () C:\ProgramData\Package Cache 2014-07-21 13:30 - 2014-07-21 13:28 - 00000000 ____D () C:\OETemp 2014-07-21 13:28 - 2014-01-14 18:08 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Dokumente 2014-07-21 13:25 - 2013-10-09 01:09 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Programme 2014-07-21 12:51 - 2014-07-21 12:27 - 00000000 ____D () C:\AdwCleaner 2014-07-21 12:09 - 2013-03-28 23:19 - 00002260 _____ () C:\Windows\system32\AutoRunFilter.ini 2014-07-21 12:09 - 2013-03-28 23:19 - 00001848 _____ () C:\Windows\system32\ServiceFilter.ini 2014-07-21 12:08 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-21 11:34 - 2014-07-21 11:34 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-21 11:21 - 2013-03-30 19:26 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\CrashDumps 2014-07-21 11:13 - 2013-03-30 18:25 - 00000000 ____D () C:\Users\Pun1sher\Documents\Bluetooth Folder 2014-07-20 19:06 - 2014-07-20 19:06 - 00022954 _____ () C:\ComboFix.txt 2014-07-20 19:06 - 2014-07-20 18:54 - 00000000 ____D () C:\Qoobox 2014-07-20 19:06 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-07-20 19:05 - 2014-07-20 18:54 - 00000000 ____D () C:\Windows\erdnt 2014-07-20 19:04 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-07-20 12:54 - 2014-07-21 18:34 - 02089984 _____ (Farbar) C:\Users\Pun1sher\Desktop\FRST64.exe 2014-07-20 12:52 - 2013-03-28 23:07 - 00000000 ____D () C:\ProgramData\Adobe 2014-07-20 12:51 - 2013-03-28 23:07 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-07-20 12:51 - 2013-03-28 22:53 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Adobe 2014-07-17 21:46 - 2014-07-17 21:46 - 00129820 _____ () C:\Users\Pun1sher\AppData\Local\ars.cache 2014-07-17 21:21 - 2014-07-17 21:21 - 00000036 _____ () C:\Users\Pun1sher\AppData\Local\housecall.guid.cache 2014-07-17 21:07 - 2014-07-17 21:07 - 00000000 ____D () C:\Windows\ERUNT 2014-07-16 16:58 - 2013-10-12 18:46 - 00000000 ____D () C:\Users\Pun1sher\Documents\BioWare 2014-07-16 16:56 - 2014-04-27 21:43 - 00000000 ____D () C:\Program Files\Sweet Home 3D 2014-07-16 16:56 - 2014-03-05 19:16 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Adventure Company 2014-07-16 16:33 - 2014-07-06 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-07-16 16:33 - 2013-10-28 14:10 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Samsung 2014-07-16 16:33 - 2013-10-28 14:09 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-07-16 16:33 - 2013-03-28 23:08 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-15 23:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-07-15 15:03 - 2013-03-28 21:39 - 00000000 ____D () C:\Users\Pun1sher 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files\iTunes 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files\iPod 2014-07-15 15:02 - 2014-06-13 16:52 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-07-15 15:02 - 2013-06-09 19:18 - 00000000 ____D () C:\Users\Franzi 2014-07-15 15:02 - 2013-03-28 23:33 - 00000000 ____D () C:\ProgramData\P4G 2014-07-15 15:02 - 2013-03-28 23:21 - 00000000 ____D () C:\ExpressGateUtil 2014-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-15 15:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-07-12 10:43 - 2009-07-14 06:45 - 05168528 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-12 10:41 - 2014-05-06 23:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-12 10:41 - 2011-04-12 09:54 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-12 10:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-12 10:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-10 19:49 - 2013-04-17 16:12 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-07-10 19:48 - 2013-07-18 18:18 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 19:45 - 2013-03-30 19:11 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-09 13:31 - 2013-04-02 03:38 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-09 13:31 - 2013-04-02 03:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 13:31 - 2013-03-28 21:43 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-08 12:32 - 2014-04-26 12:48 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Bilder 2014-07-08 09:35 - 2013-03-30 22:46 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Filme 2014-07-06 21:43 - 2013-10-28 14:11 - 00000099 _____ () C:\Users\Public\LMDebug.log 2014-07-06 11:59 - 2014-07-06 11:59 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-07-06 11:57 - 2014-07-06 11:57 - 00000000 ____D () C:\Program Files\SAMSUNG 2014-07-06 11:57 - 2013-10-28 14:10 - 00000000 ____D () C:\ProgramData\Samsung 2014-07-06 11:53 - 2014-07-06 11:53 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-07-06 11:53 - 2013-03-28 23:08 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\Downloaded Installations 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\SelfMV 2014-07-06 11:52 - 2014-07-06 11:52 - 00000000 ____D () C:\Users\Pun1sher\Documents\samsung 2014-07-03 12:19 - 2014-01-19 19:57 - 00000000 ____D () C:\Users\Pun1sher\Documents\Outlook-Dateien 2014-07-02 13:06 - 2014-07-21 13:34 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-07-02 13:06 - 2014-07-21 13:34 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-02 13:06 - 2014-07-21 13:34 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-06-30 04:09 - 2014-07-10 19:46 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-10 19:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-27 10:37 - 2013-07-03 16:57 - 00000000 ____D () C:\Users\Pun1sher\Desktop\Youtube 2014-06-22 15:23 - 2013-03-29 16:43 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\Spotify 2014-06-22 15:23 - 2013-03-29 16:43 - 00000000 ____D () C:\Users\Pun1sher\AppData\Local\Spotify 2014-06-22 15:06 - 2013-03-29 01:55 - 00000000 ____D () C:\Users\Pun1sher\AppData\Roaming\vlc Some content of TEMP: ==================== C:\Users\Pun1sher\AppData\Local\Temp\avgnt.exe C:\Users\Pun1sher\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-15 23:07 ==================== End Of Log ============================ --- --- --- --- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-07-2014 Ran by Pun1sher at 2014-07-21 18:35:13 Running from C:\Users\Pun1sher\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== abgx360 v1.0.6 (HKLM-x32\...\abgx360) (Version: - ) Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 1.1.377 - Adobe Systems Incorporated) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.00 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.) Adobe AIR (x32 Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (HKLM-x32\...\{FF2A5498-4EFE-430F-A138-7EB365DBEBAD}) (Version: 11.6.1.629 - Adobe Systems, Inc) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{1F7424F8-F992-48BC-90EF-7C4DB0405E3F}) (Version: 1.7.17.25416 - Ihr Firmenname) Alcor Micro USB Card Reader (x32 Version: 1.7.17.25416 - Ihr Firmenname) Hidden Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.2 - Sereby Corporation) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS) ASUS Live Update (HKLM-x32\...\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}) (Version: 2.5.9 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.43 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0030 - ASUS) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.21 - asus) ASUS_N3_Series (HKLM-x32\...\ASUS_N3_Series) (Version: 1.0.0001 - ASUS) Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS) Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul) (Version: 1.0.0.18 - Autodesk) Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul (Version: 1.0.0.18 - Autodesk) Hidden Autodesk Inventor Fusion for Inventor 2012 Zusatzmodul Language Pack (Version: 1.0.0.18 - Autodesk) Hidden Autodesk Inventor Professional 2012 (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 Deutsch (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.0.16000.0000 - Autodesk) Autodesk Inventor Professional 2012 Language Pack - Deutsch (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk) Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.) Autodesk Vault 2012 (Client) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Autodesk Vault 2012 (Client) German Language Pack (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira) AVNavigator 2013.I (HKCU\...\AVNavigator 2013.I) (Version: 1.14.0.005.1 - PIONEER CORPORATION) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.45 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Command & Conquer(TM) Generäle (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts) Command & Conquer(TM) Generäle (x32 Version: 0.50.0000 - Electronic Arts) Hidden Common Desktop Agent (Version: 1.62.0 - OEM) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft) DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation) DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation) Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) ETDWare PS/2-x64 7.0.5.15_WHQL (HKLM\...\Elantech) (Version: 7.0.5.15 - ELAN Microelectronics Corp.) ExpressGateCloud (HKLM-x32\...\InstallShield_{36B0DC39-3282-40EB-8587-B875CE46C3A7}) (Version: 2.6.27.160 - VideACE Co.) ExpressGateCloud (x32 Version: 2.6.27.160 - VideACE Co.) Hidden Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Free Audio CD Burner version 2.0.23.422 (HKLM-x32\...\Free Audio CD Burner_is1) (Version: 2.0.23.422 - DVDVideoSoft Ltd.) Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com) Free YouTube Download version 3.2.3.610 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.3.610 - DVDVideoSoft Ltd.) Fresco Logic USB3.0 Host Controller (HKLM\...\{BE8CF365-1CFE-49D7-A4C2-A943526274C4}) (Version: 3.0.119.1 - Fresco Logic Inc.) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.0.0.0454 - Intel Corporation) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java(TM) 7 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217000FF}) (Version: 7.0.0 - Oracle) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 1.1 German Language Pack (HKLM-x32\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 1.1 Security Update (KB2416447) (HKLM-x32\...\M2416447) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - ) Microsoft .NET Framework 1.1 SP1 + KB928366 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 SP1 + KB928366 (x32 Version: 1.1.4322 - Microsoft) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server Native Client (HKLM\...\{79BF7CB8-1E09-489F-9547-DB3EE8EA3F16}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{86177DAE-38B1-49DD-912E-35CB703AB779}) (Version: 9.00.4035.00 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version: - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (x32 Version: 2.0.50727 - Microsoft Corporation) Hidden Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MP3 to WAV RES (HKLM-x32\...\MP3 to WAV RES) (Version: - ) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA 3D Vision Treiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.82 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Optimus Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation) OpenProj (HKLM-x32\...\{13702021-43FB-480C-912F-D9B74A538288}) (Version: 1.4.0 - Serena Software Inc.) PDF24 Creator 6.3.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6221 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.45 - Piriform) Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.02.74.00(06.11.2012) - Samsung Electronics Co., Ltd.) Samsung ML-2160 Series (HKLM-x32\...\Samsung ML-2160 Series) (Version: 1.10 (22.11.2012) - Samsung Electronics Co., Ltd.) Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.) Schnell-Deinstallations-Tool für Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden SonicMaster (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.00.0000 - Virage Logic, Corp.) Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB) tools-linux (x32 Version: 9.6.0.1295980 - VMware, Inc.) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3020.2 - TuneUp Software) Hidden Überwachungstool für die Intel® Turbo-Boost-Technik (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.400.4 - Intel) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft) Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft) Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft) Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft) USB2.0 UVC 2M WebCam (HKLM\...\USB2.0 UVC 2M WebCam) (Version: 5.8.55133.208 - Sonix) VBA (2627.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden VBA (2701.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN) VMware Player (HKLM-x32\...\VMware_Player) (Version: 6.0.0 - VMware, Inc) VMware Player (Version: 6.0.0 - VMware, Inc.) Hidden Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation) Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.0 - ASUS) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS) ==================== Restore Points ========================= 06-07-2014 19:01:35 Windows-Sicherung 08-07-2014 07:38:41 Windows Update 10-07-2014 17:43:09 Windows Update 10-07-2014 18:13:59 Windows Update 14-07-2014 08:36:31 Windows-Sicherung 15-07-2014 12:30:46 Windows Update 15-07-2014 12:56:57 Removed Samsung Kies3 15-07-2014 12:59:40 Wiederherstellungsvorgang 15-07-2014 13:14:28 Windows Update 16-07-2014 14:32:30 Removed Samsung Kies3 20-07-2014 10:46:10 Windows Update 20-07-2014 10:53:16 Yu-Gi-Oh! Power of Chaos KAIBA THE REVENGE wird entfernt 20-07-2014 17:00:13 Windows-Sicherung ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-07-20 19:04 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {17F1D77A-8C96-49D4-A7C2-242F4A2E2012} - System32\Tasks\{0F7DB7A6-2C5C-4262-AE6E-6B0CD61EEAAE} => C:\Users\Pun1sher\Desktop\wormsarm\Worms.Armageddon-ORIGIN\Worms Armageddon\Wa.exe Task: {181FD012-81A5-4289-AF4E-24F35767A011} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-01] (ASUS) Task: {22D00F9B-52E4-4254-BD49-D9B11E67C619} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2013-01-11] (ASUSTek Computer Inc.) Task: {23D272CF-B550-44F1-A7CA-527E0E321B25} - System32\Tasks\{EA6D2851-4DD1-4E15-9F71-D21484407B69} => C:\Users\Pun1sher\Desktop\BMW_Carsoft_6.5_SP1_Cracks\CarSoft 6.5\Setup.exe Task: {25CC6007-1CD2-4273-9D2E-6985FA096E85} - System32\Tasks\{1DFC906C-DB2C-4FDE-86E9-ACFBDFD3EA4F} => C:\Program Files (x86)\Microtek\ScanWizard 5\ScanWizard5.exe Task: {31A9A4EE-CB31-48E5-AB35-EA3933C9596E} - System32\Tasks\{D043C9C4-7838-42F4-9106-CF88D8F29A69} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {376B5C79-7AE3-4D2A-B9E2-B7E36530784A} - System32\Tasks\{88DB5928-7B62-49F9-A08C-E7446C6E1943} => D:\EXSL\SERVER\slkffs.exe Task: {3A074C7D-9546-4C4C-AFE5-201A588AB1EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {5119CEFD-9FF8-4E7B-84C2-99F1857A34A0} - System32\Tasks\{004B2FEB-D3C3-4AD4-9A4C-EE3B19C8A9DF} => C:\Users\Pun1sher\Desktop\wormsarm\Worms.Armageddon-ORIGIN\Worms Armageddon\Wa.exe Task: {53481977-2141-48CB-B6E4-3FEF0D158E95} - System32\Tasks\{E5A2DD27-BB24-401F-B840-207B24B0F9D9} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {5C8684BC-50D3-4258-BB44-4AF94C752C00} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {7569289C-EFED-4934-A3E5-5A9016BC36DF} - System32\Tasks\AIRecoveryRemind => C:\Program Files (x86)\ASUS\AI Recovery\AIRecoveryRemind.exe [2010-12-17] (ASUSTek Computer Inc.) Task: {7ADF3156-F69D-4AE1-8687-082AFC623DB7} - System32\Tasks\{C2B018E4-9ACC-40F5-8A46-152B25590DA9} => E:\Hitman\Hitman Absolution Deluxe Professional Edition\HMA.exe Task: {7C1E5963-E16C-4F54-8002-BFA83C33CC0B} - System32\Tasks\{93E6E800-ED2E-4702-8829-2A66B74A0564} => C:\Program Files (x86)\Microtek\ScanWizard 5\ScanWizard5.exe Task: {7F0977BA-502A-40C0-9A6A-E931E2C886DB} - System32\Tasks\{E32FA199-A037-491D-97F1-B19F9372E052} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {8345D484-5CD1-4421-962F-CB3CBD4FC049} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {94D928C7-B1F5-4D24-8E6B-127769535B82} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS) Task: {A44F1DAB-6CBA-455D-8E8C-4CE25C960E6A} - System32\Tasks\{B88BB7D5-7F10-48DF-B6E8-471F7524554E} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {AE202B72-D27F-40FF-94D0-B5A3669751BC} - System32\Tasks\{0DE2E98B-E66A-464F-AAFF-D147CF702541} => E:\Bioshock\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe Task: {B93C66A2-05A9-4932-892D-8758AF4BF8C0} - System32\Tasks\{95588F81-2601-433A-B70C-86D840B78E8F} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {D607E2B1-7642-480C-8C30-31312182E293} - System32\Tasks\{FD690738-6AB6-44F4-86D2-79A2E0241EAE} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {D94802D5-45ED-4B1E-B52A-0CF868F3302B} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {DC0E306F-BF46-45DC-9F36-F49463DFDC31} - System32\Tasks\{B1215417-2BB1-4C95-81F8-CCC81EF2EA94} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: {E901B31F-4118-426F-9770-2035F4465D96} - System32\Tasks\{8310E8AB-6569-4E5B-B48F-7D95AEC882BF} => D:\EXSL\SERVER\slkffs.exe Task: {F9F10200-A50B-4047-8955-25AAD0384EB8} - System32\Tasks\{45FBF7C1-30CC-4FF4-B4C0-B054FC54BAEF} => C:\Users\Pun1sher\Desktop\Download\auflager\AUFL_2.EXE Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2013-10-28 14:10 - 2011-04-25 13:24 - 00034304 _____ () C:\Windows\System32\ssj1mlm.dll 2013-04-10 01:01 - 2013-11-11 17:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00091464 _____ () C:\ExpressGateUtil\VAWinService.exe 2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-07-14 17:11 - 2010-07-14 17:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll 2013-03-30 18:33 - 2007-11-30 12:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe 2010-04-02 20:21 - 2008-10-01 00:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2013-03-29 00:58 - 2011-01-27 09:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-02-20 23:23 - 2012-02-20 23:23 - 00456704 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe 2012-02-20 23:23 - 2012-02-20 23:23 - 00051200 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2010-09-23 17:53 - 2010-09-23 17:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 2011-04-07 22:26 - 2011-04-07 22:26 - 00045448 _____ () C:\ExpressGateUtil\VAWinAgent.exe 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00157000 _____ () C:\ExpressGateUtil\libexpat.dll 2011-03-25 18:55 - 2011-03-25 18:55 - 00061768 _____ () C:\ExpressGateUtil\netProfileDatabase.DLL 2013-08-27 12:42 - 2013-08-27 12:42 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll 2012-09-23 21:43 - 2012-09-23 21:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu 2014-06-18 10:13 - 2014-06-18 10:13 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: Spotify => "C:\Users\Pun1sher\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Pun1sher\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" ==================== Faulty Device Manager Devices ============= Name: isis Description: isis Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: isis Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: VMware Virtual Ethernet Adapter for VMnet1 Description: VMware Virtual Ethernet Adapter for VMnet1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/21/2014 06:28:22 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/21/2014 03:14:57 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/21/2014 03:14:30 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/21/2014 03:14:30 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/21/2014 03:12:25 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (07/21/2014 03:08:27 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/21/2014 01:47:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/21/2014 01:44:37 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (07/21/2014 01:29:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe, Version: 1.1.17.31000, Zeitstempel: 0x53ba89c2 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86 Ausnahmecode: 0xe0434352 Fehleroffset: 0x0000c42d ID des fehlerhaften Prozesses: 0x938 Startzeit der fehlerhaften Anwendung: 0xAvira.OE.ServiceHost.exe0 Pfad der fehlerhaften Anwendung: Avira.OE.ServiceHost.exe1 Pfad des fehlerhaften Moduls: Avira.OE.ServiceHost.exe2 Berichtskennung: Avira.OE.ServiceHost.exe3 Error: (07/21/2014 01:29:42 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: Avira.OE.ServiceHost.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet. Ausnahmeinformationen: System.ComponentModel.Composition.CompositionException Stapel: bei System.ComponentModel.Composition.Hosting.CompositionServices.GetExportedValueFromComposedPart(System.ComponentModel.Composition.Hosting.ImportEngine, System.ComponentModel.Composition.Primitives.ComposablePart, System.ComponentModel.Composition.Primitives.ExportDefinition) bei System.ComponentModel.Composition.Hosting.CatalogExportProvider.GetExportedValue(CatalogPart, System.ComponentModel.Composition.Primitives.ExportDefinition, Boolean) bei System.ComponentModel.Composition.Hosting.CatalogExportProvider+CatalogExport.GetExportedValueCore() bei System.ComponentModel.Composition.Primitives.Export.get_Value() bei System.ComponentModel.Composition.ExportServices.GetCastedExportedValue[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.ComponentModel.Composition.Primitives.Export) bei System.ComponentModel.Composition.Hosting.ExportProvider.GetExportedValuesCore[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String) bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object) bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() bei System.Threading.ThreadPoolWorkQueue.Dispatch() bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback() System errors: ============= Error: (07/21/2014 05:53:38 PM) (Source: BTHUSB) (EventID: 17) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (07/21/2014 05:52:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/21/2014 05:52:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/21/2014 05:52:50 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: 0x80630801 Error: (07/21/2014 05:52:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/21/2014 05:52:49 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/21/2014 05:52:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/21/2014 05:52:48 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (07/21/2014 05:52:48 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (07/21/2014 05:52:48 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Microsoft Office Sessions: ========================= Error: (07/21/2014 06:28:22 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (07/21/2014 03:14:57 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Pun1sher\Desktop\esetsmartinstaller_deu.exe Error: (07/21/2014 03:14:30 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Pun1sher\Desktop\esetsmartinstaller_deu.exe Error: (07/21/2014 03:14:30 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Pun1sher\Desktop\esetsmartinstaller_deu.exe Error: (07/21/2014 03:12:25 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Pun1sher\Desktop\esetsmartinstaller_deu.exe Error: (07/21/2014 03:08:27 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/21/2014 01:47:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/21/2014 01:44:37 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (07/21/2014 01:29:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Avira.OE.ServiceHost.exe1.1.17.3100053ba89c2KERNELBASE.dll6.1.7601.1840953159a86e04343520000c42d93801cfa4d70c676605C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exeC:\Windows\syswow64\KERNELBASE.dll4e882408-10ca-11e4-963b-742f681e17a6 Error: (07/21/2014 01:29:42 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: Avira.OE.ServiceHost.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet. Ausnahmeinformationen: System.ComponentModel.Composition.CompositionException Stapel: bei System.ComponentModel.Composition.Hosting.CompositionServices.GetExportedValueFromComposedPart(System.ComponentModel.Composition.Hosting.ImportEngine, System.ComponentModel.Composition.Primitives.ComposablePart, System.ComponentModel.Composition.Primitives.ExportDefinition) bei System.ComponentModel.Composition.Hosting.CatalogExportProvider.GetExportedValue(CatalogPart, System.ComponentModel.Composition.Primitives.ExportDefinition, Boolean) bei System.ComponentModel.Composition.Hosting.CatalogExportProvider+CatalogExport.GetExportedValueCore() bei System.ComponentModel.Composition.Primitives.Export.get_Value() bei System.ComponentModel.Composition.ExportServices.GetCastedExportedValue[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.ComponentModel.Composition.Primitives.Export) bei System.ComponentModel.Composition.Hosting.ExportProvider.GetExportedValuesCore[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String) bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object) bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() bei System.Threading.ThreadPoolWorkQueue.Dispatch() bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback() CodeIntegrity Errors: =================================== Date: 2014-07-20 19:03:06.883 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-07-20 19:03:06.836 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:54.215 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:54.174 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:13.031 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:04:13.000 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:03:30.131 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 20:03:30.038 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:59:02.831 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-02-20 19:59:02.800 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Moborobo\MoboroboAssDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 22% Total physical RAM: 12198.78 MB Available physical RAM: 9498.99 MB Total Pagefile: 24395.74 MB Available Pagefile: 21333.55 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:293.03 GB) (Free:138.56 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Programme) (Fixed) (Total:380.6 GB) (Free:378.37 GB) NTFS Drive e: (Spiele) (Fixed) (Total:349.32 GB) (Free:346.57 GB) NTFS Drive f: (Daten) (Fixed) (Total:349.31 GB) (Free:249.71 GB) NTFS Drive g: (Sicherung) (Fixed) (Total:25 GB) (Free:0 GB) NTFS Drive l: () (Removable) (Total:14.84 GB) (Free:11.46 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 2F851246) Partition 1: (Not Active) - (Size=25 GB) - (Type=07 NTFS) Partition 2: (Active) - (Size=293 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=381 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 699 GB) (Disk ID: 707B3822) Partition 1: (Not Active) - (Size=699 GB) - (Type=OF Extended) ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 15 GB) (Disk ID: C3072E18) Partition 1: (Active) - (Size=15 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
22.07.2014, 10:57 | #15 |
/// the machine /// TB-Ausbilder | Malware & SSL-Fehler Java updaten. backup auf G löschen. Revo Uninstaller - Download - Filepony damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.mozilla.org/de/kb/fi...einfach-loesen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyServer: 10.19.3.1:8080 S1 isis; system32\drivers\isis.sys [X] Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |