![]() |
|
Plagegeister aller Art und deren Bekämpfung: Malware auf dem PCWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() ![]() | ![]() Malware auf dem PC Hallo! Ich habe wohl Malware auf dem PC. Das Programm Malwarebytes startet nicht mehr. Ich habe auch alles nach der Anleitung hier probiert aber es startet nicht. Wenn ich das Programm OTH starte und benutze stürzt der Rechner immer ab. Danke Hier die Logs von FRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-09-2014 Ran by Holger (administrator) on HOLGER-PC on 06-09-2014 12:34:55 Running from C:\Users\Holger\Downloads Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe (Nero AG) C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe (pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe (pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe (Samsung) C:\Program Files\Samsung\Kies\Kies.exe (Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Overwolf LTD) C:\Program Files\Overwolf\Overwolf.exe (LOL Replay) C:\Program Files\LOLReplay\LOLRecorder.exe () C:\Windows\System32\C2MP\TrayMenu.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe (Overwolf LTD) C:\Program Files\Common Files\Overwolf\0.79.21.0\OverwolfHelper.exe () C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Nero AG) C:\Program Files\Nero\Update\NASvc.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-08-30] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.) HKLM\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG) HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1942424 2014-08-22] (APN) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [] => [X] HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478752 2012-12-18] (Adobe Systems Inc.) HKLM\...\Run: [RadioRage Home Page Guard 32 bit] => "C:\PROGRA~1\RADIOR~1\bar\1.bin\AppIntegrator.exe" HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.) HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.) HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-08-31] (Microsoft Corporation) HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung) HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung) HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG) HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [MKLOL] => C:\Program Files\MKJogo\MKLOL\Bin\MKIM.exe [1089736 2014-08-28] () HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk ShortcutTarget: LOLRecorder.lnk -> C:\Program Files\LOLReplay\LOLRecorder.exe (LOL Replay) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TrayMenu.lnk ShortcutTarget: TrayMenu.lnk -> C:\Windows\System32\C2MP\TrayMenu.exe () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: http=127.0.0.1:49220;https=127.0.0.1:49220 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0ACB0707D5C8CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.) BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-10-21] FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-02-09] Chrome: ======= CHR HomePage: Default -> 0DB0B33B2EB990B56FE21065B91F443549630593DF7E18781C7281D05BA8DDD4 CHR DefaultSearchKeyword: Default -> trovi.search CHR DefaultSearchProvider: Default -> Trovi search CHR DefaultSearchURL: Default -> hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV= CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms} CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll () CHR Plugin: (ChromeUtilPlugin) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0\background/ChromeUtilPlugin.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\system32\npDeployJava1.dll No File CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR CustomProfile: C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-12-23] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05] CHR Extension: (YouTube) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-08] CHR Extension: (No Name) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn [2013-10-21] CHR Extension: (Google-Suche) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-08] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-02-23] CHR Extension: (Avira Browser Safety) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-20] CHR Extension: (Google Wallet) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-15] CHR Extension: (Google Mail) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-08] CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-09-03] CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-14] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-08-22] (APN LLC.) R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG) R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1890128 2014-09-04] (LogMeIn Inc.) R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2014-08-08] (LogMeIn, Inc.) R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG) R2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-10-26] (Nero AG) S3 OverwolfUpdater; C:\Program Files\Overwolf\OverwolfUpdater.exe [998176 2014-08-28] (Overwolf LTD) R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-07-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-27] (Avira Operations GmbH & Co. KG) S3 EverestDriver; C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [7168 2005-08-18] () [File not signed] R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd6.sys [44032 2009-07-14] (VIA Technologies, Inc. ) R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-08-31] (REALiX(tm)) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH) S3 taphss6; system32\DRIVERS\taphss6.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-06 12:34 - 2014-09-06 12:35 - 00019637 _____ () C:\Users\Holger\Downloads\FRST.txt 2014-09-06 12:34 - 2014-09-06 12:35 - 00000000 ____D () C:\FRST 2014-09-06 12:33 - 2014-09-06 12:33 - 01096704 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe 2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp 2014-09-06 10:25 - 2014-09-06 10:25 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-09-06 10:25 - 2014-09-06 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-06 10:24 - 2014-09-06 11:42 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-06 10:24 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-06 10:24 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-06 10:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-09-06 10:06 - 2014-09-06 10:06 - 01370467 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe 2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp 2014-09-06 09:45 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr 2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr 2014-09-06 09:25 - 2014-09-06 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector 2014-09-06 09:25 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe 2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP 2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398 2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar 2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505 2014-09-06 08:33 - 2014-09-06 08:34 - 68953382 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part4.rar 2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part3.rar 2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part2.rar 2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part1.rar 2014-09-06 08:32 - 2014-09-06 08:32 - 00616256 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsmC98D.tmp 2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk 2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE) 2014-09-06 01:10 - 2014-09-06 01:18 - 00000000 ____D () C:\Program Files\GameforgeLive 2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk 2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live 2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d 2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live 2014-09-06 01:02 - 2014-09-06 01:03 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe 2014-09-06 00:59 - 2014-09-06 01:00 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe 2014-09-06 00:43 - 2014-09-06 08:34 - 00000364 _____ () C:\Windows\Tasks\APSnotifierPP2.job 2014-09-06 00:42 - 2014-09-06 00:42 - 00631688 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsr15C9.tmp 2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk 2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf 2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf 2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf 2014-09-05 23:52 - 2014-09-06 12:30 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf 2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe 2014-09-05 23:25 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-09-05 23:24 - 2014-09-05 23:50 - 00000000 ____D () C:\Fraps 2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe 2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk 2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe 2014-09-05 17:59 - 2014-09-05 18:00 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE 2014-09-05 17:58 - 2014-09-05 17:59 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar 2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar 2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar 2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar 2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar 2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar 2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar 2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi 2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504 2014-08-31 14:05 - 2014-08-31 14:06 - 78567538 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part6.rar 2014-08-31 14:05 - 2014-08-31 14:06 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part5.rar 2014-08-31 14:05 - 2014-08-31 14:06 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part4.rar 2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part3.rar 2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part2.rar 2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part1.rar 2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part15.rar 2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part14.rar 2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part13.rar 2014-08-28 18:33 - 2014-08-28 18:33 - 08371674 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part16.rar 2014-08-28 18:32 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part12.rar 2014-08-28 18:32 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part11.rar 2014-08-28 18:32 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part10.rar 2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part09.rar 2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part08.rar 2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part07.rar 2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part06.rar 2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part05.rar 2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part04.rar 2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part03.rar 2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part02.rar 2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part01.rar 2014-08-28 16:37 - 2014-08-28 16:39 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso 2014-08-28 16:24 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-28 16:24 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG 2014-08-23 14:57 - 2014-08-23 14:58 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD 2014-08-23 14:53 - 2014-08-23 14:57 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar 2014-08-23 14:53 - 2014-08-23 14:57 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar 2014-08-23 14:53 - 2014-08-23 14:56 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar 2014-08-23 11:38 - 2014-08-22 22:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502 2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503 2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-08-22 05:42 - 2014-08-24 13:18 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo 2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk 2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular 2014-08-21 17:35 - 2014-08-21 17:37 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe 2014-08-20 18:18 - 2011-10-20 17:51 - 1064916992 _____ () C:\Users\Holger\Downloads\Winnie.Puuh.2011.BDRip.German.AC3-XviD-Oxy.avi 2014-08-19 17:33 - 2013-10-02 14:40 - 00000863 _____ () C:\Users\Holger\Downloads\Bitte lesen - Please read.txt 2014-08-19 17:33 - 2013-06-15 15:04 - 00000173 _____ () C:\Users\Holger\Downloads\SHARE-ONLINE Premium-Account.url 2014-08-19 17:33 - 2013-06-15 14:32 - 00000113 _____ () C:\Users\Holger\Downloads\UPLOADED Premium-Account.url 2014-08-19 17:25 - 2014-08-19 17:28 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD 2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15 2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX 2014-08-19 17:14 - 2014-08-19 17:15 - 68955853 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part25.rar 2014-08-19 17:14 - 2014-08-19 17:15 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part24.rar 2014-08-19 17:14 - 2014-08-19 17:15 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part22.rar 2014-08-19 17:14 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part23.rar 2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part21.rar 2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part20.rar 2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part19.rar 2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part18.rar 2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part17.rar 2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part16.rar 2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part15.rar 2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part14.rar 2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part13.rar 2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part12.rar 2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part11.rar 2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part10.rar 2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part09.rar 2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part08.rar 2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part07.rar 2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part06.rar 2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part05.rar 2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part04.rar 2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part03.rar 2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part02.rar 2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part01.rar 2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC 2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk 2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch 2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm) 2014-08-16 17:58 - 2014-08-18 16:35 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm) 2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company 2014-08-16 17:55 - 2014-08-16 17:56 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe 2014-08-14 18:10 - 2014-04-23 23:16 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ oboom.com.url 2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ uploaded.net.url 2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ share-online.biz.url 2014-08-14 18:09 - 2014-08-14 18:10 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD 2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial 2014-08-14 03:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-08-14 03:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-14 03:05 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-08-14 03:05 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-08-13 18:55 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-08-13 18:55 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-13 18:55 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-13 18:55 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-08-13 18:55 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-08-13 18:55 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-08-13 18:55 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-08-13 18:55 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-08-13 18:55 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-13 18:55 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-13 18:55 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-08-13 18:55 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-13 18:55 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-08-13 18:55 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-08-13 18:55 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-08-13 18:55 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-13 18:55 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-08-13 18:55 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-13 18:55 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-08-13 18:55 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-08-13 18:55 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-13 18:55 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-13 18:55 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-13 18:55 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-08-13 18:55 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-08-13 18:55 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-08-13 18:55 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-13 18:55 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-08-13 18:55 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-13 18:55 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-13 18:55 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-08-13 18:55 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-08-13 18:55 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-13 18:55 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-08-13 18:55 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-08-13 18:54 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-13 18:54 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-08-13 18:54 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-08-13 18:54 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-08-13 18:54 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-08-13 18:54 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-13 18:54 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-13 18:54 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-13 18:54 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev 2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar 2014-08-13 18:50 - 2014-08-13 18:51 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar 2014-08-11 05:19 - 2014-08-10 09:04 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch 2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar 2014-08-10 22:16 - 2014-08-10 22:17 - 00000000 ____D () C:\Users\Holger\Downloads\Person.of.Interest.S03E19.Frank.Mercer.und.Betty.Harris.German.Dubbed.DL.iTunesHD.x264-TVS 2014-08-10 22:16 - 2014-08-10 22:16 - 17260579 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part4.rar 2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part3.rar 2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part2.rar 2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part1.rar 2014-08-10 22:15 - 2014-08-10 22:15 - 00012471 _____ () C:\Users\Holger\Downloads\xix.nfo 2014-08-10 22:15 - 2014-08-10 22:15 - 00006211 _____ () C:\Users\Holger\Downloads\ncode_imageresizer.js 2014-08-09 11:24 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\Holger\Downloads\o594459t05q2e4i 2014-08-09 11:22 - 2014-08-09 11:24 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part09.rar 2014-08-09 11:22 - 2014-08-09 11:24 - 168822268 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part10.rar 2014-08-09 11:20 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part08.rar 2014-08-09 11:19 - 2014-08-09 11:24 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part07.rar 2014-08-09 11:18 - 2014-08-28 20:05 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6 2014-08-09 11:18 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part06.rar 2014-08-09 11:17 - 2014-08-09 11:20 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part04.rar 2014-08-09 11:17 - 2014-08-09 11:19 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part05.rar 2014-08-09 11:15 - 2014-08-09 11:18 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part02.rar 2014-08-09 11:15 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part03.rar 2014-08-09 11:15 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part01.rar 2014-08-09 11:10 - 2014-08-09 11:14 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part2.rar 2014-08-09 11:10 - 2014-08-09 11:14 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part1.rar 2014-08-09 11:10 - 2014-08-09 11:13 - 330317416 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part3.rar 2014-08-09 10:40 - 2014-08-09 09:16 - 19648512 _____ () C:\Users\Holger\Downloads\sample.avi 2014-08-09 10:40 - 2014-08-09 09:13 - 00001472 _____ () C:\Users\Holger\Downloads\nfo.nfo 2014-08-09 10:34 - 2014-08-09 10:35 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part02.rar 2014-08-09 10:34 - 2014-08-09 10:35 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part01.rar 2014-08-09 01:08 - 2014-08-09 01:08 - 00000000 ____D () C:\Users\Holger\Tracing 2014-08-09 01:07 - 2014-08-09 01:07 - 00001251 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ____D () C:\Windows\de 2014-08-09 01:07 - 2013-02-05 22:57 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys 2014-08-09 01:06 - 2014-08-09 01:06 - 00002432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-08-09 01:06 - 2014-08-09 01:06 - 00001404 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2014-08-09 01:06 - 2014-08-09 01:06 - 00001320 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2014-08-09 01:06 - 2014-08-09 01:06 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-08-09 01:05 - 2014-08-09 01:07 - 00000000 ____D () C:\Program Files\Windows Live 2014-08-09 01:05 - 2014-08-09 01:05 - 00000000 ____D () C:\Windows\PCHEALTH 2014-08-09 01:03 - 2014-08-09 01:03 - 00002145 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ___RD () C:\Users\Holger\SkyDrive 2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive 2014-08-09 01:02 - 2014-08-09 01:02 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive 2014-08-09 01:01 - 2014-08-09 01:09 - 00000000 ____D () C:\Users\Holger\AppData\Local\Windows Live 2014-08-09 01:01 - 2014-08-09 01:01 - 00000000 ____D () C:\Program Files\Common Files\Windows Live 2014-08-09 01:00 - 2014-08-09 01:01 - 142602520 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-all_16.4.3508.0205.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-06 12:35 - 2014-09-06 12:34 - 00019637 _____ () C:\Users\Holger\Downloads\FRST.txt 2014-09-06 12:35 - 2014-09-06 12:34 - 00000000 ____D () C:\FRST 2014-09-06 12:33 - 2014-09-06 12:33 - 01096704 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe 2014-09-06 12:32 - 2013-08-27 16:00 - 01602452 _____ () C:\Windows\WindowsUpdate.log 2014-09-06 12:30 - 2014-09-05 23:52 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf 2014-09-06 12:29 - 2014-06-15 19:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\LogMeIn Hamachi 2014-09-06 12:29 - 2013-09-08 13:32 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp 2014-09-06 12:28 - 2013-12-20 14:22 - 00000000 ____D () C:\Users\NeroMediaHomeUser.4 2014-09-06 12:28 - 2013-11-07 21:31 - 00000000 ____D () C:\Windows\Minidump 2014-09-06 12:28 - 2013-09-06 13:34 - 00069120 _____ () C:\Windows\setupact.log 2014-09-06 12:28 - 2013-08-27 16:08 - 00000000 ____D () C:\Users\Holger 2014-09-06 12:28 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-06 12:03 - 2013-08-27 16:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-06 11:54 - 2013-09-08 13:33 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-06 11:42 - 2014-09-06 10:24 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-06 10:41 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-06 10:41 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-06 10:33 - 2013-10-21 17:16 - 00000000 ____D () C:\AdwCleaner 2014-09-06 10:33 - 2013-09-06 13:34 - 00575022 _____ () C:\Windows\PFRO.log 2014-09-06 10:28 - 2014-09-06 09:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector 2014-09-06 10:25 - 2014-09-06 10:25 - 00001064 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-09-06 10:25 - 2014-09-06 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-06 10:25 - 2014-06-11 19:52 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-09-06 10:11 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-09-06 10:11 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini 2014-09-06 10:06 - 2014-09-06 10:06 - 01370467 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe 2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp 2014-09-06 09:44 - 2014-09-06 09:45 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr 2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr 2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP 2014-09-06 09:18 - 2013-08-29 18:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\JDownloader v2.0 2014-09-06 09:17 - 2013-08-27 16:22 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc 2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398 2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar 2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505 2014-09-06 08:34 - 2014-09-06 08:33 - 68953382 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part4.rar 2014-09-06 08:34 - 2014-09-06 00:43 - 00000364 _____ () C:\Windows\Tasks\APSnotifierPP2.job 2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part3.rar 2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part2.rar 2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part1.rar 2014-09-06 08:32 - 2014-09-06 08:32 - 00616256 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsmC98D.tmp 2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk 2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE) 2014-09-06 01:18 - 2014-09-06 01:10 - 00000000 ____D () C:\Program Files\GameforgeLive 2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk 2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live 2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d 2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live 2014-09-06 01:03 - 2014-09-06 01:02 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe 2014-09-06 01:00 - 2014-09-06 00:59 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe 2014-09-06 00:42 - 2014-09-06 00:42 - 00631688 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsr15C9.tmp 2014-09-06 00:42 - 2013-10-18 21:54 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\.minecraft 2014-09-05 23:57 - 2013-08-30 14:49 - 00000000 ____D () C:\Users\Holger\AppData\Local\PMB Files 2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk 2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf 2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf 2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf 2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe 2014-09-05 23:50 - 2014-09-05 23:24 - 00000000 ____D () C:\Fraps 2014-09-05 23:25 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe 2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk 2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe 2014-09-05 18:00 - 2014-09-05 17:59 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE 2014-09-05 17:59 - 2014-09-05 17:58 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar 2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar 2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar 2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar 2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar 2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar 2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar 2014-09-05 08:59 - 2013-09-08 13:34 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi 2014-09-05 08:42 - 2014-06-18 19:14 - 00000896 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504 2014-08-31 14:06 - 2014-08-31 14:05 - 78567538 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part6.rar 2014-08-31 14:06 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part5.rar 2014-08-31 14:06 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part4.rar 2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part3.rar 2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part2.rar 2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part1.rar 2014-08-29 07:33 - 2009-07-14 06:33 - 00277824 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-28 20:05 - 2014-08-09 11:18 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6 2014-08-28 20:04 - 2013-08-27 16:14 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-08-28 20:02 - 2013-08-30 14:49 - 00000000 ____D () C:\ProgramData\PMB Files 2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part15.rar 2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part14.rar 2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part13.rar 2014-08-28 18:33 - 2014-08-28 18:33 - 08371674 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part16.rar 2014-08-28 18:33 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part12.rar 2014-08-28 18:33 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part11.rar 2014-08-28 18:32 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part10.rar 2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part09.rar 2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part08.rar 2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part07.rar 2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part06.rar 2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part05.rar 2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part04.rar 2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part03.rar 2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part02.rar 2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part01.rar 2014-08-28 16:39 - 2014-08-28 16:37 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso 2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG 2014-08-24 13:18 - 2014-08-22 05:42 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo 2014-08-23 14:58 - 2014-08-23 14:57 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD 2014-08-23 14:57 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar 2014-08-23 14:57 - 2014-08-23 14:53 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar 2014-08-23 14:56 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar 2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503 2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-08-23 07:22 - 2013-10-04 08:57 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\Program Files\Avira 2014-08-23 03:46 - 2014-08-28 16:24 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-23 02:42 - 2014-08-28 16:24 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-22 22:06 - 2014-08-23 11:38 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502 2014-08-21 17:39 - 2013-09-03 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\elsterformular 2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk 2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular 2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular 2014-08-21 17:38 - 2013-09-03 16:40 - 00000000 ____D () C:\ProgramData\elsterformular 2014-08-21 17:37 - 2014-08-21 17:35 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe 2014-08-20 18:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-08-20 17:46 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Avira 2014-08-19 17:28 - 2014-08-19 17:25 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD 2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15 2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX 2014-08-19 17:15 - 2014-08-19 17:14 - 68955853 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part25.rar 2014-08-19 17:15 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part24.rar 2014-08-19 17:15 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part22.rar 2014-08-19 17:14 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part23.rar 2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part21.rar 2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part20.rar 2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part19.rar 2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part18.rar 2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part17.rar 2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part16.rar 2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part15.rar 2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part14.rar 2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part13.rar 2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part12.rar 2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part11.rar 2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part10.rar 2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part09.rar 2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part08.rar 2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part07.rar 2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part06.rar 2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part05.rar 2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part04.rar 2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part03.rar 2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part02.rar 2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part01.rar 2014-08-18 16:35 - 2014-08-16 17:58 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm) 2014-08-16 19:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC 2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk 2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch 2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm) 2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company 2014-08-16 17:56 - 2014-08-16 17:55 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe 2014-08-14 18:10 - 2014-08-14 18:09 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD 2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial 2014-08-14 03:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-08-14 03:29 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-14 03:29 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE 2014-08-14 03:13 - 2014-01-18 10:07 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-14 03:09 - 2014-01-18 10:07 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev 2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar 2014-08-13 18:51 - 2014-08-13 18:50 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar 2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar 2014-08-10 22:17 - 2014-08-10 22:16 - 00000000 ____D () C:\Users\Holger\Downloads\Person.of.Interest.S03E19.Frank.Mercer.und.Betty.Harris.German.Dubbed.DL.iTunesHD.x264-TVS 2014-08-10 22:16 - 2014-08-10 22:16 - 17260579 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part4.rar 2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part3.rar 2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part2.rar 2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part1.rar 2014-08-10 22:15 - 2014-08-10 22:15 - 00012471 _____ () C:\Users\Holger\Downloads\xix.nfo 2014-08-10 22:15 - 2014-08-10 22:15 - 00006211 _____ () C:\Users\Holger\Downloads\ncode_imageresizer.js 2014-08-10 09:04 - 2014-08-11 05:19 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch 2014-08-09 11:24 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\Holger\Downloads\o594459t05q2e4i 2014-08-09 11:24 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part09.rar 2014-08-09 11:24 - 2014-08-09 11:22 - 168822268 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part10.rar 2014-08-09 11:24 - 2014-08-09 11:19 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part07.rar 2014-08-09 11:22 - 2014-08-09 11:20 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part08.rar 2014-08-09 11:22 - 2014-08-09 11:18 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part06.rar 2014-08-09 11:20 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part04.rar 2014-08-09 11:19 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part05.rar 2014-08-09 11:18 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part02.rar 2014-08-09 11:17 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part03.rar 2014-08-09 11:17 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part01.rar 2014-08-09 11:14 - 2014-08-09 11:10 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part2.rar 2014-08-09 11:14 - 2014-08-09 11:10 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part1.rar 2014-08-09 11:13 - 2014-08-09 11:10 - 330317416 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part3.rar 2014-08-09 10:35 - 2014-08-09 10:34 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part02.rar 2014-08-09 10:35 - 2014-08-09 10:34 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part01.rar 2014-08-09 09:16 - 2014-08-09 10:40 - 19648512 _____ () C:\Users\Holger\Downloads\sample.avi 2014-08-09 09:13 - 2014-08-09 10:40 - 00001472 _____ () C:\Users\Holger\Downloads\nfo.nfo 2014-08-09 01:09 - 2014-08-09 01:01 - 00000000 ____D () C:\Users\Holger\AppData\Local\Windows Live 2014-08-09 01:08 - 2014-08-09 01:08 - 00000000 ____D () C:\Users\Holger\Tracing 2014-08-09 01:07 - 2014-08-09 01:07 - 00001251 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ____D () C:\Windows\de 2014-08-09 01:07 - 2014-08-09 01:05 - 00000000 ____D () C:\Program Files\Windows Live 2014-08-09 01:06 - 2014-08-09 01:06 - 00002432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-08-09 01:06 - 2014-08-09 01:06 - 00001404 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2014-08-09 01:06 - 2014-08-09 01:06 - 00001320 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2014-08-09 01:06 - 2014-08-09 01:06 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition 2014-08-09 01:05 - 2014-08-09 01:05 - 00000000 ____D () C:\Windows\PCHEALTH 2014-08-09 01:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-08-09 01:03 - 2014-08-09 01:03 - 00002145 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk 2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ___RD () C:\Users\Holger\SkyDrive 2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive 2014-08-09 01:02 - 2014-08-09 01:02 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive 2014-08-09 01:01 - 2014-08-09 01:01 - 00000000 ____D () C:\Program Files\Common Files\Windows Live 2014-08-09 01:01 - 2014-08-09 01:00 - 142602520 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-all_16.4.3508.0205.exe 2014-08-07 03:43 - 2014-08-13 18:54 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-07 03:39 - 2014-08-13 18:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll Files to move or delete: ==================== C:\Users\Public\AlexaNSISPlugin.11516.dll Some content of TEMP: ==================== C:\Users\Holger\AppData\Local\Temp\13-9_mobility_win7_win8_32_dd_ccc_whql.exe C:\Users\Holger\AppData\Local\Temp\80656-671486-pdf-shrink.exe C:\Users\Holger\AppData\Local\Temp\AutoRun.exe C:\Users\Holger\AppData\Local\Temp\AutoRunGUI.dll C:\Users\Holger\AppData\Local\Temp\avgnt.exe C:\Users\Holger\AppData\Local\Temp\BackupSetup.exe C:\Users\Holger\AppData\Local\Temp\bstrapInstall.exe C:\Users\Holger\AppData\Local\Temp\catalyst_mobility_32-bit_util.exe C:\Users\Holger\AppData\Local\Temp\cgtqp6hz.dll C:\Users\Holger\AppData\Local\Temp\CloudBackup6826.exe C:\Users\Holger\AppData\Local\Temp\dlLogic.exe C:\Users\Holger\AppData\Local\Temp\dltr.exe C:\Users\Holger\AppData\Local\Temp\GCVerifier.dll C:\Users\Holger\AppData\Local\Temp\h7rxxkgy.dll C:\Users\Holger\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Holger\AppData\Local\Temp\post1.exe C:\Users\Holger\AppData\Local\Temp\post2.dll C:\Users\Holger\AppData\Local\Temp\post2.exe C:\Users\Holger\AppData\Local\Temp\proxy_vole1768017490497548973.dll C:\Users\Holger\AppData\Local\Temp\Quarantine.exe C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite.dll C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite22799.dll C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite63844.dll C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite67090.dll C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite70292.dll C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite80555.dll C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite82604.dll C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite85762.dll C:\Users\Holger\AppData\Local\Temp\vcredist_x86.exe C:\Users\Holger\AppData\Local\Temp\verifier.exe C:\Users\Holger\AppData\Local\Temp\vis-de.exe C:\Users\Holger\AppData\Local\Temp\vlc-2.1.1-win32.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-06 11:03 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-09-2014 Ran by Holger at 2014-09-06 12:36:35 Running from C:\Users\Holger\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (HKLM\...\7-Zip) (Version: - ) Adobe Acrobat XI Pro (HKLM\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.02 - Adobe Systems) Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.8.0.1280 - Adobe Systems Incorporated) Adobe AIR (Version: 3.8.0.1280 - Adobe Systems Incorporated) Hidden Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) Advanced-System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1) (Version: 2.1.1000.13727 - Systweak Software) Advertising Center (Version: 0.0.0.2 - Nero AG) Hidden AMD Accelerated Video Transcoding (Version: 13.15.100.30830 - Advanced Micro Devices, Inc.) Hidden AMD Catalyst Control Center (Version: 2013.0830.1944.33589 - Ihr Firmenname) Hidden AMD Catalyst Install Manager (HKLM\...\{103811D6-2580-5DF1-2689-5686C05AC91F}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden AMD Media Foundation Decoders (Version: 1.0.80830.1925 - Advanced Micro Devices, Inc.) Hidden Apple Application Support (HKLM\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{941B4CE7-3F5D-443E-A8B7-56A420D2EAFD}) (Version: 7.1.2.6 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Application Profiles (HKLM\...\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}) (Version: 2.0.4888.34279 - Advanced Micro Devices, Inc.) Avira (HKLM\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Avira (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira) Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C1001}) (Version: 12.16.1.1671 - APN, LLC) Bing Bar (HKLM\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation) Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.) Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help English (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help French (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help German (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden ccc-utility (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden Craften Terminal 3.4.5 (HKLM\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de) D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden Drakensang Online (HKLM\...\Drakensang Online) (Version: - ) ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen) EVEREST Home Edition v2.20 (HKLM\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc) FLV Player (remove only) (HKLM\...\FLVM Player) (Version: - ) Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Fraps (HKLM\...\Fraps) (Version: - ) Gameforge Live 2.0.5 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge) Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.) Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.) Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden HWiNFO32 Version 4.22 (HKLM\...\HWiNFO32_is1) (Version: 4.22 - Martin Malík - REALiX) iTunes (HKLM\...\{0A37EE62-9A58-420D-90CC-4E52153112EE}) (Version: 11.3.0.54 - Apple Inc.) Java 7 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden KODAK Create@Home Software (für dm) (HKLM\...\{43B8BDF6-13EC-44BE-9EDA-F284C4CA19A6}) (Version: 7.8.1392 - Eastman Kodak Company) League of Legends (HKLM\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (Version: 3.0.1 - Riot Games ) Hidden LogMeIn Hamachi (HKLM\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.) LogMeIn Hamachi (Version: 2.2.0.236 - LogMeIn, Inc.) Hidden LOLReplay (HKLM\...\LOLReplay) (Version: 0.8.7.4 - www.leaguereplays.com) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Age of Empires II (HKLM\...\Age of Empires 2.0) (Version: - ) Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation) Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden MKLOL (HKCU\...\MKLOL) (Version: - ) Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 12 (HKLM\...\{560FC78C-A4B2-461D-9B47-820C1EEF87B8}) (Version: 12.0.02000 - Nero AG) Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden Nero BackItUp (Version: 12.0.2001 - Nero AG) Hidden Nero BackItUp Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden Nero Blu-ray Player (Version: 12.0.14300 - Nero AG) Hidden Nero Blu-ray Player Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden Nero Burning ROM (Version: 12.0.20000 - Nero AG) Hidden Nero Burning ROM Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden Nero ControlCenter (Version: 11.0.15200 - Nero AG) Hidden Nero ControlCenter Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden Nero Core Components (Version: 11.0.18100 - Nero AG) Hidden Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden Nero Effects Basic (Version: 12.0.11500 - Nero AG) Hidden Nero Express (Version: 12.0.20000 - Nero AG) Hidden Nero Express Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden Nero Installer (Version: 4.4.9.0 - Nero AG) Hidden Nero Kwik Media (Version: 1.18.18200 - Nero AG) Hidden Nero Kwik Media Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden Nero MediaHome 4 (Version: 4.5.9.2 - Nero AG) Hidden Nero MediaHome 4 Essentials (HKLM\...\{52000877-ae1f-4058-9ed0-0abde5553999}) (Version: - Nero AG) Nero PiP Effects Basic (Version: 12.0.11500 - Nero AG) Hidden Nero Recode (Version: 12.0.24000 - Nero AG) Hidden Nero Recode Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden Nero RescueAgent (Version: 12.0.9000 - Nero AG) Hidden Nero RescueAgent Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden Nero SharedVideoCodecs (Version: 1.0.12100.2.0 - Nero AG) Hidden Nero Update (Version: 11.0.11800.31.0 - Nero AG) Hidden Nero Video (Version: 12.0.3000 - Nero AG) Hidden Nero Video Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden neroxml (Version: 1.0.0 - Nero AG) Hidden Nostale(DE) (HKLM\...\NosTale(DE)_is1) (Version: - Gameforge 4D GmbH) Overwolf (HKLM\...\Overwolf) (Version: 0.79.21.0 - Overwolf Ltd.) Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.) PDF Architect (HKLM\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge) Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Prerequisite installer (Version: 12.0.0002 - Nero AG) Hidden Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version: - ) RocketTab (HKLM\...\RocketTab) (Version: - RocketTab) Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Samsung Kies (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.) SDFormatter (HKLM\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association) SimCity 4 Deluxe (HKLM\...\{A7A34FC9-DF24-4A36-00AD-D4EFE94CC116}) (Version: - ) Snap.Do (HKLM\...\{A20F162B-9C72-4093-9C15-8BCDF2D90D30}) (Version: 1.98.1.11691 - ReSoft Ltd.) <==== ATTENTION SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC) TechPowerUp GPU-Z (HKLM\...\TechPowerUp GPU-Z) (Version: - TechPowerUp) VLC Codec Pack 2.0.5 (HKLM\...\VLC - Codec Pack) (Version: 2.0.5 - VLC Codec Pack) VLC media player 2.0.8 (HKLM\...\VLC media player) (Version: 2.0.8 - VideoLAN) Welcome App (Start-up experience) (Version: 12.0.14000 - Nero AG) Hidden Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Mail (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Messenger (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Writer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Writer Resources (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) WinZip 17.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DC}) (Version: 17.5.10562 - WinZip Computing, S.L. ) World of Tanks (HKLM\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{31261F21-2B16-45EE-BEAB-07C4CFA18B65}\InprocServer32 -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\FileSyncApi.dll (Microsoft Corporation) ==================== Restore Points ========================= 06-09-2014 10:07:39 Geplanter Prüfpunkt ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {05F0F530-38C9-4F40-B5EF-03971A66D77E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-08] (Google Inc.) Task: {07D14C9C-2F1D-479D-B481-A560B0ACAAD3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-08] (Google Inc.) Task: {529A5FCA-3AE8-4F4D-B81F-AF14EF56E4FC} - System32\Tasks\RocketTab => C:\Windows\system32\cmd.exe [2010-11-20] (Microsoft Corporation) Task: {5AA336F3-5A42-4C80-A20E-D61FC077E976} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-13] (Adobe Systems Incorporated) Task: {89FF56BF-6C46-4D29-8FFB-A5FA86E91A5E} - System32\Tasks\Overwolf Updater Task => C:\Program Files\Overwolf\OverwolfUpdater.exe [2014-08-28] (Overwolf LTD) Task: {AC0AA77B-8DB3-47E6-9CDC-2B62E6DAF505} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {C7EAC1AA-53DA-4D9F-862D-8AED39D10913} - System32\Tasks\RocketTab Update Task => C:\Program Files\RocketTab\uninstall.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-07-03 13:20 - 2014-07-03 13:20 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2014-07-03 13:19 - 2014-07-03 13:19 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll 2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll 2014-08-20 17:46 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Holger\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll 2012-09-23 21:43 - 2012-09-23 21:43 - 00010240 _____ () C:\Program Files\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu 2014-02-27 17:45 - 2014-02-27 17:45 - 00186368 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\7b778d24921453a8669f3c3b9cc0b71e\Kies.Common.DeviceServiceLib.Interface.ni.dll 2014-02-27 17:46 - 2014-02-27 17:46 - 14971904 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\1e35c2da60014113523a116c51f0f03a\Kies.Theme.ni.dll 2014-02-27 17:44 - 2014-02-27 17:44 - 01822208 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\98ab01d97977a8631264ad46875bebb3\Kies.UI.ni.dll 2014-02-27 17:44 - 2014-02-27 17:44 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\713f8aa449d7a7b75bacbce9b9a8a34e\Kies.MVVM.ni.dll 2014-02-27 17:45 - 2014-02-27 17:45 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\cffeb31975c17760187d713cf2d7934d\ASF_cSharpAPI.ni.dll 2014-08-28 13:27 - 2014-08-28 13:27 - 00025600 _____ () C:\Program Files\Overwolf\0.79.21.0\CoreAudioApi.dll 2014-08-28 13:27 - 2014-08-28 13:27 - 38713856 _____ () C:\Program Files\Overwolf\0.79.21.0\libcef.DLL 2014-05-23 12:16 - 2014-05-23 12:16 - 00379904 _____ () C:\Program Files\LOLReplay\LOLUtils.dll 2013-02-24 22:04 - 2013-02-24 22:04 - 00704008 _____ () C:\Windows\System32\C2MP\TrayMenu.exe 2014-08-28 13:31 - 2014-08-28 13:31 - 00070432 _____ () C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe 2014-08-28 13:27 - 2014-08-28 13:27 - 00514528 _____ () C:\Program Files\Overwolf\0.79.21.0\libglesv2.dll 2014-08-28 13:27 - 2014-08-28 13:27 - 00105952 _____ () C:\Program Files\Overwolf\0.79.21.0\libegl.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (09/06/2014 00:32:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x494 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (09/06/2014 00:05:45 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1". Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (09/06/2014 00:05:29 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0". Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (09/06/2014 00:05:19 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (09/06/2014 00:00:46 PM) (Source: SideBySide) (EventID: 9) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Das Stammelement der Manifestdatei muss assembliert sein. Error: (09/06/2014 11:42:45 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x5bc Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (09/06/2014 11:41:52 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x132c Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (09/06/2014 11:36:11 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x408 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (09/06/2014 11:35:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0xbf0 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (09/06/2014 11:29:01 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532 Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e Ausnahmecode: 0x40000015 Fehleroffset: 0x0008d6fd ID des fehlerhaften Prozesses: 0x12b8 Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 System errors: ============= Error: (09/06/2014 00:28:26 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (09/06/2014 00:28:40 PM) (Source: BugCheck) (EventID: 1001) (User: ) Description: 0x000000f4 (0x00000003, 0x86f6f4f8, 0x86f6f664, 0x831fe000)C:\Windows\MEMORY.DMP090614-18765-01 Error: (09/06/2014 00:28:35 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 06.09.2014 um 12:27:39 unerwartet heruntergefahren. Error: (09/06/2014 10:33:52 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (09/06/2014 10:15:26 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT) Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Gruppenrichtlinienclient" ist vom Dienst "Remoteprozeduraufruf (RPC)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Remoteprozeduraufruf (RPC)" ist vom Dienst "RPC-Endpunktzuordnung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1062 Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "IP-Hilfsdienst" ist vom Dienst "Remoteprozeduraufruf (RPC)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Remoteprozeduraufruf (RPC)" ist vom Dienst "RPC-Endpunktzuordnung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1062 Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Multimediaklassenplaner" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (09/06/2014 00:32:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd49401cfc9bddb24101fC:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll1d3d18f7-35b1-11e4-91b2-00138ff9b6fa Error: (09/06/2014 00:05:45 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest Error: (09/06/2014 00:05:29 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3 Error: (09/06/2014 00:05:19 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Nero\Nero 12\nero backitup\NBVSSTool_x64.exe Error: (09/06/2014 00:00:46 PM) (Source: SideBySide) (EventID: 9) (User: ) Description: C:\Program Files\WinZip\adxloader.dll.ManifestC:\Program Files\WinZip\adxloader.dll.Manifest2 Error: (09/06/2014 11:42:45 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd5bc01cfc9b6e5e56f03C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll273eb0b3-35aa-11e4-b2a3-00138ff9b6fa Error: (09/06/2014 11:41:52 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd132c01cfc9b6c5d6c4a3C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll073cb0d2-35aa-11e4-b2a3-00138ff9b6fa Error: (09/06/2014 11:36:11 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd40801cfc9b5faadfd82C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll3c6ef57d-35a9-11e4-b2a3-00138ff9b6fa Error: (09/06/2014 11:35:49 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdbf001cfc9b5ed20b3b1C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll2f1b0a42-35a9-11e4-b2a3-00138ff9b6fa Error: (09/06/2014 11:29:01 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd12b801cfc9b4f9d73669C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \MSVCR100.dll3c035211-35a8-11e4-b2a3-00138ff9b6fa CodeIntegrity Errors: =================================== Date: 2013-12-30 10:49:25.039 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 10:49:24.601 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 10:49:24.211 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 10:49:23.773 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 10:49:22.914 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 10:49:22.507 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 10:49:22.117 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-12-30 10:49:21.726 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-23 15:50:41.997 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2013-09-23 15:50:41.544 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Pentium(R) D CPU 2.80GHz Percentage of memory in use: 44% Total physical RAM: 3327.3 MB Available physical RAM: 1831.63 MB Total Pagefile: 6650.84 MB Available Pagefile: 4658.09 MB Total Virtual: 2047.88 MB Available Virtual: 1888.4 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:292.87 GB) (Free:6.74 GB) NTFS Drive d: () (Fixed) (Total:638.54 GB) (Free:472.58 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9E3CAF4E) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=292.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=638.5 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |