| |
| |||||||
Log-Analyse und Auswertung: Bei Firefox start -> resource://firefox.abs.avira.com/html/blocked.htmlWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
20.09.2014, 10:21
| #1 |
| |  Bei Firefox start -> resource://firefox.abs.avira.com/html/blocked.html Tag. Bei jedem Firefoxstart öffnet sich statt meiner üblichen Startseite "google.de" ein weißes Fenster mit der Adressleiste -> resource://firefox.abs.avira.com/html/blocked.html. Habe wie in einem anderen Thread dazu schon einen Scan mit Farbar's Recovery Scan Tool gemacht und poste die Logfiles dazu. Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by Nepenthe (administrator) on NEPENTHE-PC on 20-09-2014 11:09:07
Running from C:\Users\Nepenthe\Downloads
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(AVM Berlin) C:\Program Files\avmwlanstick\WLanNetService.exe
(hxxp://libusb-win32.sourceforge.net) C:\Windows\System32\libusbd-nt.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(HDPlus-01TotalV18.09) C:\Program Files\TotalPlus01-3.1V18.09\944feefa-d33a-40b7-8bcb-44de08bf820e.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winamp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(HDPlus-01TotalV18.09) C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-4.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8555040 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-08] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3462823370-4273713148-3641588921-1001\...\MountPoints2: E - E:\autorun.exe
HKU\S-1-5-21-3462823370-4273713148-3641588921-1001\...\MountPoints2: {44bc0cd3-edef-11e0-884b-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-21-3462823370-4273713148-3641588921-1001\...\MountPoints2: {d4af1561-edad-11e0-8949-806e6f6e6963} - I:\Setup.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=99b7bac2-a71d-44f8-824c-73154e006f20&searchtype=ds&p={searchTerms}&fr=linkury-tb
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1411052473&from=ild&uid=ST31000528AS_6VP2YSBAXXXX6VP2YSBA
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1411052473&from=ild&uid=ST31000528AS_6VP2YSBAXXXX6VP2YSBA
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=99b7bac2-a71d-44f8-824c-73154e006f20&searchtype=ds&p={searchTerms}&fr=linkury-tb
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1411052473&from=ild&uid=ST31000528AS_6VP2YSBAXXXX6VP2YSBA
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=99b7bac2-a71d-44f8-824c-73154e006f20&searchtype=ds&p={searchTerms}&fr=linkury-tb
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={038FE653-5790-11E2-A379-6C626D90EDA7}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1411052473&from=ild&uid=ST31000528AS_6VP2YSBAXXXX6VP2YSBA&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=99b7bac2-a71d-44f8-824c-73154e006f20&searchtype=ds&p={searchTerms}&fr=linkury-tb
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1411052473&from=ild&uid=ST31000528AS_6VP2YSBAXXXX6VP2YSBA&q={searchTerms}
SearchScopes: HKCU - {CFE09A33-F220-4AD8-AB41-C5EA6957365B} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=233c845e-5315-47f3-8c91-1bf30af51654&apn_sauid=C6C5C98E-BD0E-4DB7-9A2A-ACF30131043B
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={038FE653-5790-11E2-A379-6C626D90EDA7}
BHO: TotalPlus01-3.1V18.09 -> {11111111-1111-1111-1111-110611321185} -> C:\Program Files\TotalPlus01-3.1V18.09\TotalPlus01-3.1V18.09-bho.dll (HDPlus-01TotalV18.09)
BHO: ClickMovie1-Downloaderv10 -> {11111111-1111-1111-1111-110611331117} -> C:\Program Files\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-bho.dll (end)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name -> {F1AF26F8-1828-4279-ABCE-074EF3235BD7} -> No File
Toolbar: HKLM - No Name - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
Toolbar: HKCU - No Name - {D47A8D7D-F7B2-48A9-B8D6-B44484D51B89} - No File
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {8FEFF364-6A5F-4966-A917-A3AC28411659} hxxp://download.sopcast.com/download/SOPCORE.CAB
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default
FF NewTab: about:blank
FF SearchEngineOrder.1: Ask.com
FF Homepage: hxxp://www.google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nullsoft.com/winampDetector;version=1 -> C:\Program Files\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\istartsurf.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: TotalPlus01-3.1V18.09 - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\Extensions\6cfae8cc4676442fa78d9dcdf@bd4ea874e76d4af1994ba.com [2014-09-19]
FF Extension: Avira Browser Safety - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\Extensions\abs@avira.com [2014-08-08]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\Extensions\ich@maltegoetz.de [2013-12-20]
FF Extension: ClickMovie1-Downloaderv10 - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\Extensions\LPESNIOB27154074@RO39491085.com [2014-09-19]
FF Extension: WOT - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2012-03-03]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-06-29]
FF Extension: DivX Web Player - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\Extensions\DivXWebPlayer@divx.com.xpi [2012-02-12]
FF Extension: Adblock Plus - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-29]
FF Extension: QuickStores-Toolbar - C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de [2014-09-12]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Nepenthe\AppData\Roaming\Mozilla\Firefox\Profiles\ff802s7o.default\extensions\faststartff@gmail.com
FF HKCU\...\Firefox\Extensions: [{184AA5E6-741D-464a-820E-94B3ABC2F3B4}] - C:\Users\Nepenthe\AppData\Roaming\12012
FF Extension: Java Link Helper - C:\Users\Nepenthe\AppData\Roaming\12012 [2012-06-04]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://www.istartsurf.com/?type=sc&ts=1411052473&from=ild&uid=ST31000528AS_6VP2YSBAXXXX6VP2YSBA
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gfhdkohbepelnfckgjinfddmecpngnpb] - C:\Program Files\LyricStar\Chrome.crx []
CHR HKLM\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Nepenthe\AppData\Local\Wajam\Chrome\wajam.crx [2012-10-05]
CHR HKLM\...\Chrome\Extension: [ohlfohjgijhjlpidbbnmcdooegafnnnm] - C:\Program Files\SockshareDownloader\SockshareDownloader10.crx [2012-10-05]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [176128 2010-05-27] (AMD) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-08] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
R2 AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-18] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-18] (globalUpdate) [File not signed]
R2 libusbd; C:\Windows\System32\libusbd-nt.exe [18944 2005-03-09] (hxxp://libusb-win32.sourceforge.net) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [209920 2010-05-27] (Advanced Micro Devices, Inc.) [File not signed]
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [83872 2014-05-27] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-19] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-02-09] (DT Soft Ltd)
S3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [926080 2010-10-22] (AVM GmbH)
R3 libusb0; C:\Windows\System32\drivers\libusb0.sys [33792 2005-03-09] () [File not signed]
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2014-05-27] ()
S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [99400 2012-05-12] (MotioninJoy)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 WmBEnum; C:\Windows\System32\drivers\WmBEnum.sys [22856 2010-04-28] (Logitech Inc.)
S3 WmFilter; C:\Windows\System32\drivers\WmFilter.sys [37704 2010-04-27] (Logitech Inc.)
S3 WmHidLo; C:\Windows\System32\drivers\WmHidLo.sys [31816 2010-04-28] (Logitech Inc.)
S3 WmVirHid; C:\Windows\System32\drivers\WmVirHid.sys [15048 2010-04-28] (Logitech Inc.)
R3 WmXlCore; C:\Windows\System32\drivers\WmXlCore.sys [66632 2010-04-28] (Logitech Inc.)
S3 amdkmdag; system32\DRIVERS\atikmdag.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad32v.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
S3 XDva401; \??\C:\Windows\system32\XDva401.sys [X]
S3 XDva404; \??\C:\Windows\system32\XDva404.sys [X]
S3 XDva405; \??\C:\Windows\system32\XDva405.sys [X]
S3 XDva409; \??\C:\Windows\system32\XDva409.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 11:09 - 2014-09-20 11:09 - 00018855 _____ () C:\Users\Nepenthe\Downloads\FRST.txt
2014-09-20 11:08 - 2014-09-20 11:09 - 00000000 ____D () C:\FRST
2014-09-20 11:07 - 2014-09-20 11:07 - 01097728 _____ (Farbar) C:\Users\Nepenthe\Downloads\FRST.exe
2014-09-18 17:06 - 2014-09-20 11:06 - 00002440 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-5_user.job
2014-09-18 17:06 - 2014-09-20 11:06 - 00002440 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-5.job
2014-09-18 17:06 - 2014-09-20 11:06 - 00001476 _____ () C:\Windows\Tasks\944feefa-d33a-40b7-8bcb-44de08bf820e.job
2014-09-18 17:05 - 2014-09-20 11:05 - 00004490 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-11.job
2014-09-18 17:05 - 2014-09-20 11:05 - 00003808 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-4.job
2014-09-18 17:05 - 2014-09-20 11:05 - 00003808 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-3.job
2014-09-18 17:05 - 2014-09-20 11:05 - 00002780 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-1.job
2014-09-18 17:05 - 2014-09-20 11:05 - 00002104 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-2.job
2014-09-18 17:05 - 2014-09-20 08:05 - 00001698 _____ () C:\Windows\Tasks\VIQHFUCG.job
2014-09-18 17:05 - 2014-09-20 03:52 - 00001342 _____ () C:\Windows\Tasks\RI.job
2014-09-18 17:05 - 2014-09-19 00:17 - 00000000 ____D () C:\Program Files\TotalPlus01-3.1V18.09
2014-09-18 17:05 - 2014-09-18 17:05 - 01486744 _____ (HDPlus-01TotalV18.09) C:\Users\Nepenthe\AppData\Roaming\RI.exe
2014-09-18 17:03 - 2014-09-18 17:03 - 00000000 ____D () C:\Users\Nepenthe\AppData\Roaming\WebExtend
2014-09-18 17:01 - 2014-09-18 18:07 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-09-18 17:00 - 2014-09-20 11:00 - 00002792 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5_user.job
2014-09-18 17:00 - 2014-09-20 11:00 - 00002448 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5.job
2014-09-18 17:00 - 2014-09-20 11:00 - 00001426 _____ () C:\Windows\Tasks\ab619f7d-c720-4af0-a33c-438d9aef174c.job
2014-09-18 16:59 - 2014-09-20 11:00 - 00002112 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-2.job
2014-09-18 16:59 - 2014-09-20 10:59 - 00004498 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-11.job
2014-09-18 16:59 - 2014-09-20 10:59 - 00003816 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-4.job
2014-09-18 16:59 - 2014-09-20 10:59 - 00003136 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-3.job
2014-09-18 16:59 - 2014-09-20 10:59 - 00002796 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-1.job
2014-09-18 16:59 - 2014-09-20 05:10 - 00000986 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-18 16:59 - 2014-09-20 02:59 - 00001346 _____ () C:\Windows\Tasks\MJRA.job
2014-09-18 16:59 - 2014-09-20 02:12 - 00001350 _____ () C:\Windows\Tasks\HVYOEL.job
2014-09-18 16:59 - 2014-09-19 17:10 - 00000982 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-18 16:59 - 2014-09-19 00:17 - 00000000 ____D () C:\Program Files\ClickMovie1-Downloaderv10
2014-09-18 16:59 - 2014-09-18 16:59 - 01486744 _____ (end) C:\Users\Nepenthe\AppData\Roaming\HVYOEL.exe
2014-09-18 16:59 - 2014-09-18 16:59 - 00000000 ____D () C:\Users\Nepenthe\AppData\Local\globalUpdate
2014-09-18 16:59 - 2014-09-18 16:59 - 00000000 ____D () C:\Program Files\globalUpdate
2014-09-18 16:57 - 2014-09-18 16:57 - 00000000 ____D () C:\Users\Nepenthe\AppData\Local\Cool_Mirage
2014-09-17 21:33 - 2014-09-17 21:33 - 00002101 _____ () C:\Users\Nepenthe\Desktop\Skype.lnk
2014-09-17 18:56 - 2014-09-17 18:56 - 00000000 ___RD () C:\Program Files\Skype
2014-09-17 18:56 - 2014-09-17 18:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-17 18:56 - 2014-09-17 18:56 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-09-14 18:35 - 2014-09-14 18:39 - 140526656 _____ () C:\Users\Nepenthe\Desktop\Mein Film.wmv
2014-09-14 18:32 - 2014-09-14 18:32 - 00347816 _____ (Microsoft Corporation) C:\Users\Nepenthe\Downloads\MicrosoftFixit.wu.LB.133414313964118.1.1.Run.exe
2014-09-14 16:26 - 2014-09-14 16:27 - 72002578 _____ () C:\Users\Nepenthe\Downloads\[AMV] Sword Art Online - Revolution(720p_H.264-AAC).mp4
2014-09-12 20:08 - 2014-09-20 11:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-10 03:08 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-10 03:08 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 03:08 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 03:08 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 03:08 - 2014-08-18 23:57 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-10 03:08 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 03:08 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-10 03:08 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-10 03:08 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-10 03:08 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 03:08 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 03:08 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-10 03:08 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 03:08 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 03:08 - 2014-08-18 23:36 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-10 03:08 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-10 03:08 - 2014-08-18 23:30 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-10 03:08 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 03:08 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-10 03:08 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-10 03:08 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 03:08 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 03:08 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 03:08 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 03:08 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 03:08 - 2014-08-18 23:08 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-10 03:08 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-10 03:08 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 03:08 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 03:08 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-10 03:08 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-10 01:09 - 2014-07-07 03:40 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 01:09 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 01:08 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 01:08 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-09 10:19 - 2014-09-09 10:24 - 106239680 _____ () C:\Users\Nepenthe\Downloads\HMS_phil.rar
2014-09-07 13:39 - 2014-09-07 13:42 - 00000000 ____D () C:\Users\Nepenthe\AppData\Local\Adobe
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\Nepenthe\AppData\Roaming\RI
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\Nepenthe\AppData\Roaming\HVYOEL
2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\Nepenthe\AppData\Roaming\VIQHFUCG
2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\Nepenthe\AppData\Roaming\MJRA
2014-08-27 21:56 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 21:56 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 11:09 - 2014-09-20 11:09 - 00018855 _____ () C:\Users\Nepenthe\Downloads\FRST.txt
2014-09-20 11:09 - 2014-09-20 11:08 - 00000000 ____D () C:\FRST
2014-09-20 11:07 - 2014-09-20 11:07 - 01097728 _____ (Farbar) C:\Users\Nepenthe\Downloads\FRST.exe
2014-09-20 11:06 - 2014-09-18 17:06 - 00002440 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-5_user.job
2014-09-20 11:06 - 2014-09-18 17:06 - 00002440 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-5.job
2014-09-20 11:06 - 2014-09-18 17:06 - 00001476 _____ () C:\Windows\Tasks\944feefa-d33a-40b7-8bcb-44de08bf820e.job
2014-09-20 11:05 - 2014-09-18 17:05 - 00004490 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-11.job
2014-09-20 11:05 - 2014-09-18 17:05 - 00003808 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-4.job
2014-09-20 11:05 - 2014-09-18 17:05 - 00003808 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-3.job
2014-09-20 11:05 - 2014-09-18 17:05 - 00002780 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-1.job
2014-09-20 11:05 - 2014-09-18 17:05 - 00002104 _____ () C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-2.job
2014-09-20 11:04 - 2014-06-28 18:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-20 11:03 - 2014-09-12 20:08 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-20 11:00 - 2014-09-18 17:00 - 00002792 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5_user.job
2014-09-20 11:00 - 2014-09-18 17:00 - 00002448 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5.job
2014-09-20 11:00 - 2014-09-18 17:00 - 00001426 _____ () C:\Windows\Tasks\ab619f7d-c720-4af0-a33c-438d9aef174c.job
2014-09-20 11:00 - 2014-09-18 16:59 - 00002112 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-2.job
2014-09-20 10:59 - 2014-09-18 16:59 - 00004498 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-11.job
2014-09-20 10:59 - 2014-09-18 16:59 - 00003816 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-4.job
2014-09-20 10:59 - 2014-09-18 16:59 - 00003136 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-3.job
2014-09-20 10:59 - 2014-09-18 16:59 - 00002796 _____ () C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-1.job
2014-09-20 10:47 - 2011-11-23 21:21 - 00000000 ____D () C:\Users\Nepenthe\AppData\Roaming\Skype
2014-09-20 10:46 - 2013-10-11 23:00 - 00000000 ____D () C:\Users\Nepenthe\AppData\Roaming\Winamp
2014-09-20 10:31 - 2012-01-25 00:58 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-20 08:05 - 2014-09-18 17:05 - 00001698 _____ () C:\Windows\Tasks\VIQHFUCG.job
2014-09-20 07:28 - 2011-10-05 16:56 - 00000000 ____D () C:\Users\Nepenthe\AppData\Roaming\vlc
2014-09-20 05:10 - 2014-09-18 16:59 - 00000986 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-20 03:52 - 2014-09-18 17:05 - 00001342 _____ () C:\Windows\Tasks\RI.job
2014-09-20 02:59 - 2014-09-18 16:59 - 00001346 _____ () C:\Windows\Tasks\MJRA.job
2014-09-20 02:12 - 2014-09-18 16:59 - 00001350 _____ () C:\Windows\Tasks\HVYOEL.job
2014-09-19 17:10 - 2014-09-18 16:59 - 00000982 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-19 15:34 - 2014-07-05 15:11 - 00000000 ____D () C:\Users\Nepenthe\AppData\Local\Deployment
2014-09-19 15:34 - 2009-07-14 06:34 - 00010096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-19 15:34 - 2009-07-14 06:34 - 00010096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-19 15:32 - 2014-05-26 23:29 - 01805443 _____ () C:\Windows\WindowsUpdate.log
2014-09-19 15:31 - 2012-01-25 00:58 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-19 15:27 - 2011-10-03 13:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-19 15:27 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-19 00:17 - 2014-09-18 17:05 - 00000000 ____D () C:\Program Files\TotalPlus01-3.1V18.09
2014-09-19 00:17 - 2014-09-18 16:59 - 00000000 ____D () C:\Program Files\ClickMovie1-Downloaderv10
2014-09-18 18:07 - 2014-09-18 17:01 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-09-18 17:05 - 2014-09-18 17:05 - 01486744 _____ (HDPlus-01TotalV18.09) C:\Users\Nepenthe\AppData\Roaming\RI.exe
2014-09-18 17:03 - 2014-09-18 17:03 - 00000000 ____D () C:\Users\Nepenthe\AppData\Roaming\WebExtend
2014-09-18 17:01 - 2014-06-29 13:07 - 00001317 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-18 17:01 - 2012-02-12 18:24 - 00447488 ___SH () C:\Users\Nepenthe\Thumbs.db
2014-09-18 17:01 - 2011-10-03 12:02 - 00001609 _____ () C:\Users\Nepenthe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-18 16:59 - 2014-09-18 16:59 - 01486744 _____ (end) C:\Users\Nepenthe\AppData\Roaming\HVYOEL.exe
2014-09-18 16:59 - 2014-09-18 16:59 - 00000000 ____D () C:\Users\Nepenthe\AppData\Local\globalUpdate
2014-09-18 16:59 - 2014-09-18 16:59 - 00000000 ____D () C:\Program Files\globalUpdate
2014-09-18 16:57 - 2014-09-18 16:57 - 00000000 ____D () C:\Users\Nepenthe\AppData\Local\Cool_Mirage
2014-09-17 21:33 - 2014-09-17 21:33 - 00002101 _____ () C:\Users\Nepenthe\Desktop\Skype.lnk
2014-09-17 21:32 - 2014-01-16 00:48 - 00000000 ____D () C:\Program Files\Steam
2014-09-17 18:56 - 2014-09-17 18:56 - 00000000 ___RD () C:\Program Files\Skype
2014-09-17 18:56 - 2014-09-17 18:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-17 18:56 - 2014-09-17 18:56 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-09-17 18:55 - 2011-11-23 21:21 - 00000000 ____D () C:\ProgramData\Skype
2014-09-17 15:51 - 2009-07-14 06:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-14 18:39 - 2014-09-14 18:35 - 140526656 _____ () C:\Users\Nepenthe\Desktop\Mein Film.wmv
2014-09-14 18:32 - 2014-09-14 18:32 - 00347816 _____ (Microsoft Corporation) C:\Users\Nepenthe\Downloads\MicrosoftFixit.wu.LB.133414313964118.1.1.Run.exe
2014-09-14 16:27 - 2014-09-14 16:26 - 72002578 _____ () C:\Users\Nepenthe\Downloads\[AMV] Sword Art Online - Revolution(720p_H.264-AAC).mp4
2014-09-14 16:24 - 2011-10-07 17:16 - 00000000 ____D () C:\Program Files\JDownloader
2014-09-13 18:03 - 2014-06-29 13:07 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-13 16:15 - 2011-10-03 14:02 - 00000000 ___RD () C:\Users\Nepenthe\Desktop\Programme
2014-09-10 04:03 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-09-10 03:36 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-10 03:08 - 2013-09-09 11:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 03:04 - 2010-07-06 23:03 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 03:01 - 2010-07-06 22:23 - 01595580 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-10 01:04 - 2014-06-28 18:04 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-10 01:04 - 2014-06-28 18:04 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-09 10:24 - 2014-09-09 10:19 - 106239680 _____ () C:\Users\Nepenthe\Downloads\HMS_phil.rar
2014-09-08 23:31 - 2014-07-05 15:11 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-08 23:30 - 2012-12-02 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-08 23:30 - 2012-12-02 18:14 - 00000000 ____D () C:\Program Files\Avira
2014-09-07 13:42 - 2014-09-07 13:39 - 00000000 ____D () C:\Users\Nepenthe\AppData\Local\Adobe
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\Nepenthe\AppData\Roaming\RI
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\Nepenthe\AppData\Roaming\HVYOEL
2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\Nepenthe\AppData\Roaming\VIQHFUCG
2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\Nepenthe\AppData\Roaming\MJRA
2014-08-28 03:18 - 2009-07-14 06:33 - 00269280 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-25 06:53 - 2010-07-06 23:02 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 03:46 - 2014-08-27 21:56 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-27 21:56 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
Files to move or delete:
====================
C:\ProgramData\Qfc076ER.dat
Some content of TEMP:
====================
C:\Users\Nepenthe\AppData\Local\Temp\avgnt.exe
C:\Users\Nepenthe\AppData\Local\Temp\BackupSetup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-16 00:41
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-09-2014
Ran by Nepenthe at 2014-09-20 11:09:55
Running from C:\Users\Nepenthe\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 2.0.3.13070 - Adobe Systems Inc.)
Adobe AIR (Version: 2.0.3.13070 - Adobe Systems Inc.) Hidden
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
ATI Catalyst Install Manager (HKLM\...\{2E7913B5-F529-229B-E7DA-CCF8E76E5DD1}) (Version: 3.0.774.0 - ATI Technologies, Inc.)
Avira (HKLM\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
AVM FRITZ!WLAN (HKLM\...\AVMWLANCLI) (Version: - AVM Berlin)
CCleaner (HKLM\...\CCleaner) (Version: 3.11 - Piriform)
Cry of Fear (HKLM\...\Steam App 223710) (Version: - Team Psykskallar)
CyberLink LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2515 - CyberLink Corp.)
CyberLink LabelPrint (Version: 2.5.2515 - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink Power2Go (Version: 6.1.3602c - CyberLink Corp.) Hidden
CyberLink PowerDVD Copy (HKLM\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
CyberLink PowerDVD Copy (Version: 1.5.1306 - CyberLink Corp.) Hidden
DAEMON Tools Pro (HKLM\...\DAEMON Tools Pro) (Version: 5.2.0.0348 - DT Soft Ltd)
Dead Space™ 2 (HKLM\...\{96D06FDD-6AF4-4309-BC1B-1C9588B0575E}) (Version: 1.0.941.0 - Electronic Arts)
DH Driver Cleaner Professional Edition (HKLM\...\Driver Cleaner Pro) (Version: Version 1.5 - Ruud Ketelaars)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
EAX(tm) Unified (SHELL) (HKLM\...\EAX(tm) Unified (SHELL)) (Version: - )
F1 2010 (Version: 1.0.0001.132 - Codemasters) Hidden
Fable III (Version: 1.0.0001.131 - Microsoft Game Studios) Hidden
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
ICQ 8.0 (build 6014) (HKCU\...\ICQ) (Version: 8.0.6014.0 - Mail.Ru)
ICQ7.6 (HKLM\...\{7644E42D-B096-457F-8B5B-901238FC81AE}) (Version: 7.6 - ICQ)
Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (Version: 2.1.67.1 - Oracle, Inc.) Hidden
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
LastChaosGER (HKLM\...\{A86A50FC-7C22-478B-BAEF-82393328825F}) (Version: 1.00.000 - Barunsongames CO., LTD.)
LibUSB-Win32-0.1.10.1 (HKLM\...\LibUSB-Win32_is1) (Version: 0.1.10.1 - LibUSB-Win32)
Medion Cockpit (HKLM\...\{EE5088C1-AE86-497F-B3F4-96EC10FA8E31}) (Version: 1.0.0 - allyve GmbH)
Medion Home Cinema (HKLM\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.)
Medion Home Cinema (Version: 6.0.0000 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (HKLM\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Search Enhancement Pack (Version: 3.0.127.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Minecraft (HKLM\...\{34D9106C-A947-47ED-B4AB-764736350769}) (Version: 1.6.1 - MINECRAFTinstall.net)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 32.0.1 (x86 de) (HKLM\...\Mozilla Firefox 32.0.1 (x86 de)) (Version: 32.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller Driver (Version: 280.19 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5721 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.154.1168 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3165 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden
NVIDIA Update 1.15.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.15.2 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
OpenAL (HKLM\...\OpenAL) (Version: - )
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Rapture3D 2.4.4 Game (HKLM\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6083 - Realtek Semiconductor Corp.)
Rust (HKLM\...\Steam App 252490) (Version: - Facepunch Studios)
Skype™ 6.20 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Sonarca Sound Recorder Free 3.6.1 (HKLM\...\655B116F-5CF5-4376-9A36-9FB163ED609F_is1) (Version: - Accmeware Corporation)
Steam (HKLM\...\Steam) (Version: - Valve Corporation)
System Requirements Lab (HKLM\...\SystemRequirementsLab) (Version: - )
System Requirements Lab CYRI (HKLM\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.10 - TeamSpeak Systems GmbH)
Unlocker 1.9.1 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 11.0 (HKLM\...\{6BE7495E-8DF1-11E1-BB7D-F04DA23A5C58}) (Version: 11.0.682 - Sony)
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
Winamp (HKLM\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Call (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live Writer (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Mobile Device Updater Component (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
WinRAR 4.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
WinX HD Video Converter Deluxe 3.10.3 (HKLM\...\WinX HD Video Converter Deluxe_is1) (Version: - Digiarty Software,Inc.)
WinZip 15.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240C1}) (Version: 15.0.9411 - WinZip Computing, S.L. )
Zattoo Live TV (HKCU\...\6d7aa3e3bf931c56) (Version: 1.0.0.44 - Zattoo Europa AG)
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)
Zune (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CHS) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CHT) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CSY) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (DAN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (DEU) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ELL) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ESP) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (FIN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (FRA) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (HUN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (IND) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ITA) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (JPN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (KOR) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (MSL) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (NLD) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (NOR) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PLK) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PTB) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PTG) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (RUS) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (SVE) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3462823370-4273713148-3641588921-1001_Classes\CLSID\{25815CC0-43F4-3C75-8C3A-A139D9ADE740}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3462823370-4273713148-3641588921-1001_Classes\CLSID\{30E72785-9BEB-4ed0-B60A-4504D0AF7AAE}\InprocServer32 -> C:\Users\Nepenthe\AppData\Local\Microsoft\Windows Sidebar\Gadgets\GermanyRain.gadget\AxSBHost.dll (Mark Schmidt - Microsoft)
==================== Restore Points =========================
09-09-2014 23:02:03 Windows Update
10-09-2014 01:00:15 Windows Update
16-09-2014 14:31:45 Windows Update
17-09-2014 19:31:02 Removed Java(TM) 6 Update 21
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0713C727-F0BA-415D-BD30-542C2A42E43B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-01-25] (Google Inc.)
Task: {10E1C4AE-1B75-409C-9854-4C69657A163A} - System32\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-5 => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-5.exe [2014-09-18] (HDPlus-01TotalV18.09)
Task: {17CC5346-203A-43F6-A21F-FC6A8814B9C1} - System32\Tasks\HVYOEL => C:\Users\Nepenthe\AppData\Roaming\HVYOEL.exe [2014-09-18] (end)
Task: {1C037840-989A-429C-9D0A-716EE6E103F2} - System32\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-4 => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-4.exe [2014-09-18] (HDPlus-01TotalV18.09)
Task: {24CE4A57-8616-4C36-8246-4DAA70559933} - System32\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5_user => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5.exe [2014-09-18] (end)
Task: {30BFDB7A-5045-4E4E-8267-A989C990CDBA} - System32\Tasks\RI => C:\Users\Nepenthe\AppData\Roaming\RI.exe [2014-09-18] (HDPlus-01TotalV18.09)
Task: {3FF588C8-C7C1-40BF-9AE3-4AEA99563118} - System32\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-3 => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-3.exe
Task: {44E10811-9C8F-4D77-8846-EAD68A2240C9} - System32\Tasks\{6FBB9E22-BDE7-43A1-A78C-8D13AA2C717B} => C:\Users\Nepenthe\Desktop\Programme\Guitar Pro\Guitar Pro 6 (T)\Guitar Pro 6.exe [2010-05-18] ()
Task: {4CAC8C0D-0367-490A-AACF-3CB619E71461} - System32\Tasks\{C3B9BCD1-E0D4-4D31-8FE2-27406495998B} => C:\Program Files\Winamp\winamp.exe [2013-07-24] (Nullsoft, Inc.)
Task: {5E51425C-656F-4D0A-9FF0-87AC00044C8F} - System32\Tasks\{510ED09B-2A7C-4A7C-9876-21E7D8806249} => C:\Program Files\Winamp\winamp.exe [2013-07-24] (Nullsoft, Inc.)
Task: {6210DAA1-6C1A-4348-8285-40EA48F5CA98} - System32\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-3 => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-3.exe
Task: {63D9E4B1-A056-4E75-8053-35F337C35293} - System32\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-11 => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-11.exe
Task: {696E2AA2-D7CF-47C2-A337-F6D2CC98021F} - System32\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-1 => C:\Program Files\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe [2014-09-18] (end)
Task: {6AAE16AA-D184-40CD-A444-1CC89BEC8609} - System32\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-1 => C:\Program Files\TotalPlus01-3.1V18.09\TotalPlus01-3.1V18.09-codedownloader.exe [2014-09-18] (HDPlus-01TotalV18.09)
Task: {6BF71F03-4DF4-450F-82AF-72E7CE25549D} - System32\Tasks\VIQHFUCG => C:\Users\Nepenthe\AppData\Roaming\VIQHFUCG.exe
Task: {7082235A-95ED-4622-976F-E6B1CEBC6A10} - System32\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-5_user => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-5.exe [2014-09-18] (HDPlus-01TotalV18.09)
Task: {70A6C10E-1110-44D0-A329-DA5BD5CF45DC} - System32\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-2 => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-2.exe [2014-09-18] (HDPlus-01TotalV18.09)
Task: {78D28D75-7CA5-4E64-9EE1-62195A2A6F3D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-10] (Adobe Systems Incorporated)
Task: {7C7BBCCB-6CAF-42AF-8AE4-2BC7E966AF91} - System32\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-4 => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-4.exe [2014-09-18] (end)
Task: {8FA1EB2D-0C44-4FDA-AD86-CE86C9059DD2} - System32\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-2 => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-2.exe [2014-09-18] (end)
Task: {9FA044D4-FD5C-43F5-8AC1-BEB7A7B95B53} - System32\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5 => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5.exe [2014-09-18] (end)
Task: {A355B550-125F-4FC3-B101-FB059C580045} - System32\Tasks\LaunchSignup => C:\Program Files\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {AB1A4D2F-C61F-43DF-B3F3-AFD94BED79CF} - System32\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-11 => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-11.exe
Task: {AE992615-57F9-4A38-9332-44C907E92345} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-01-25] (Google Inc.)
Task: {C0717D17-F009-494D-98C2-8E259DB22847} - System32\Tasks\RunAsStdUser Task => C:\Program Files\Thoosje Sevenbar\Thoosje Sevenbar.exe
Task: {CA51F873-6BFE-4BBB-9AE0-B5B7A76F3E85} - System32\Tasks\ab619f7d-c720-4af0-a33c-438d9aef174c => C:\Program Files\ClickMovie1-Downloaderv10\ab619f7d-c720-4af0-a33c-438d9aef174c.exe [2014-09-18] (end)
Task: {D6B1BFCF-DBE1-44AC-97ED-00F51D803BC3} - System32\Tasks\MJRA => C:\Users\Nepenthe\AppData\Roaming\MJRA.exe
Task: {D7F6AFDE-31E3-47FD-98A6-024C5ACC103D} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-09-18] (globalUpdate) <==== ATTENTION
Task: {EF008E56-5B25-4F82-8D10-7B4AF7356BB9} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-09-18] (globalUpdate) <==== ATTENTION
Task: {FE610497-3F37-424E-91C6-B54ACA0E9E82} - System32\Tasks\944feefa-d33a-40b7-8bcb-44de08bf820e => C:\Program Files\TotalPlus01-3.1V18.09\944feefa-d33a-40b7-8bcb-44de08bf820e.exe [2014-09-18] (HDPlus-01TotalV18.09)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-1.job => C:\Program Files\TotalPlus01-3.1V18.09\TotalPlus01-3.1V18.09-codedownloader.exe
Task: C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-11.job => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-11.exe
Task: C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-2.job => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-2.exe
Task: C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-3.job => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-3.exe
Task: C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-4.job => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-4.exe
Task: C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-5.job => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-5.exe
Task: C:\Windows\Tasks\61751c0f-7a12-4483-845a-4b41e89d5251-5_user.job => C:\Program Files\TotalPlus01-3.1V18.09\61751c0f-7a12-4483-845a-4b41e89d5251-5.exe
Task: C:\Windows\Tasks\944feefa-d33a-40b7-8bcb-44de08bf820e.job => C:\Program Files\TotalPlus01-3.1V18.09\944feefa-d33a-40b7-8bcb-44de08bf820e.exe
Task: C:\Windows\Tasks\ab619f7d-c720-4af0-a33c-438d9aef174c.job => C:\Program Files\ClickMovie1-Downloaderv10\ab619f7d-c720-4af0-a33c-438d9aef174c.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-1.job => C:\Program Files\ClickMovie1-Downloaderv10\ClickMovie1-Downloaderv10-codedownloader.exe
Task: C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-11.job => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-11.exe
Task: C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-2.job => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-2.exe
Task: C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-3.job => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-3.exe
Task: C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-4.job => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-4.exe
Task: C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5.job => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5.exe
Task: C:\Windows\Tasks\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5_user.job => C:\Program Files\ClickMovie1-Downloaderv10\de3a513f-3f4d-44a7-a3cc-ea536290cf03-5.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HVYOEL.job => C:\Users\Nepenthe\AppData\Roaming\HVYOEL.exe
Task: C:\Windows\Tasks\MJRA.job => C:\Users\Nepenthe\AppData\Roaming\MJRA.exe
Task: C:\Windows\Tasks\RI.job => C:\Users\Nepenthe\AppData\Roaming\RI.exe
Task: C:\Windows\Tasks\VIQHFUCG.job => C:\Users\Nepenthe\AppData\Roaming\VIQHFUCG.exe
==================== Loaded Modules (whitelisted) =============
2013-04-14 17:13 - 2013-10-23 09:19 - 00092448 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-08-27 15:00 - 2014-08-27 15:00 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-27 15:00 - 2014-08-27 15:00 - 00066864 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-08-08 19:43 - 2014-08-27 15:00 - 00052472 ____N () C:\Users\Nepenthe\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-09-20 10:46 - 2014-09-20 10:46 - 00010752 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\auth.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00069120 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\burnlib.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00025088 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\dsp_sc.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00013824 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\dsp_sps.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00006656 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\enc_fhgaac.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004096 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\enc_flac.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00005632 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\enc_lame.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004096 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\enc_vorbis.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004096 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\enc_wav.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00006144 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\enc_wma.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00023552 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_classicart.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00007168 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_crasher.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00023040 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_ff.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00012288 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_hotkeys.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00041984 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_jumpex.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00022528 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_ml.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00009728 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_nopro.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00011776 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_skinmanager.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00010240 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_timerestore.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00008192 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_tray.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00010752 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\gen_undo.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00005120 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_avi.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00014848 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_cdda.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00006656 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_dshow.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00005632 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_flac.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00003584 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_flv.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00003584 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_linein.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00020480 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_midi.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004608 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_mkv.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00018432 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_mod.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00023040 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_mp3.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00005120 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_mp4.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00011776 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_nsv.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00003584 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_swf.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00011264 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_vorbis.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00006656 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_wav.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00005632 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_wave.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00015360 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_wm.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004608 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\in_wv.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00003584 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_addons.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00006656 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_autotag.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00005120 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_bookmarks.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00024064 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_cloud.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00008192 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_devices.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00047616 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_disc.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00009728 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_downloads.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004608 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_enqplay.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00009728 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_history.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00005120 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_impex.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00056320 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_local.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00003584 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_nowplaying.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00014336 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_online.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00017408 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_playlists.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00034816 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_plg.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00055296 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_pmp.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00005120 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_rg.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00008192 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_transcode.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00015360 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ml_wire.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00036352 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\ombrowser.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00006144 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\out_disk.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00016384 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\out_ds.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00007680 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\out_wave.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00003072 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\playlist.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004608 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\pmp_activesync.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00019968 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\pmp_android.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00007680 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\pmp_cloud.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00036864 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\pmp_ipod.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00003584 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\pmp_njb.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004096 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\pmp_p4s.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00011776 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\pmp_usb.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00039936 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\pmp_wifi.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00006144 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\tagz.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00088064 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\vis_avs.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00155648 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\vis_milk2.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00007680 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\vis_nsfs.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00211456 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\winamp.lng
2014-09-20 10:46 - 2014-09-20 10:46 - 00004096 _____ () C:\Users\Nepenthe\AppData\Local\Temp\WDE5333.tmp\winampa.lng
2013-07-24 00:57 - 2013-07-24 00:57 - 00340992 _____ () C:\Program Files\Winamp\Plugins\freeform\wacs\freetype\freetype.wac
2014-09-12 20:08 - 2014-09-12 20:08 - 03716720 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-09-10 01:04 - 2014-09-10 01:04 - 16825520 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Users^Nepenthe^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Youtube.lnk => C:\Windows\pss\Youtube.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: AVMWlanClient => C:\Program Files\avmwlanstick\wlangui.exe
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: BullGuard => "C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe" -boot
MSCONFIG\startupreg: cacaoweb => "C:\Users\Nepenthe\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
MSCONFIG\startupreg: CLMLServer => "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: icq => C:\Users\Nepenthe\AppData\Roaming\ICQM\icq.exe -CU
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: PC Remote Server => C:\Program Files\PC Remote\PC Remote\PCRemote.exe /silent
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: UnlockerAssistant => "C:\Program Files\Unlocker\UnlockerAssistant.exe"
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/18/2014 05:05:34 PM) (Source: MsiInstaller) (EventID: 11309) (User: Nepenthe-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt. System error 3. Verify that the file exists and that you can access it.
Error: (09/18/2014 05:05:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 32.0.1.5367, Zeitstempel: 0x541259dd
Name des fehlerhaften Moduls: mozalloc.dll, Version: 32.0.1.5367, Zeitstempel: 0x541225d2
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0x112c
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Error: (09/18/2014 04:59:38 PM) (Source: MsiInstaller) (EventID: 11309) (User: Nepenthe-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt. System error 3. Verify that the file exists and that you can access it.
Error: (09/18/2014 04:59:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 32.0.1.5367, Zeitstempel: 0x541259dd
Name des fehlerhaften Moduls: mozalloc.dll, Version: 32.0.1.5367, Zeitstempel: 0x541225d2
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000141b
ID des fehlerhaften Prozesses: 0x1e8
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Error: (09/17/2014 09:31:35 PM) (Source: MsiInstaller) (EventID: 10005) (User: Nepenthe-PC)
Description: Product: Java(TM) 6 Update 21 -- Internal Error 2753. regutils.dll
Error: (09/17/2014 03:51:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_LanmanServer, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00009b60
ID des fehlerhaften Prozesses: 0x470
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_LanmanServer0
Pfad der fehlerhaften Anwendung: svchost.exe_LanmanServer1
Pfad des fehlerhaften Moduls: svchost.exe_LanmanServer2
Berichtskennung: svchost.exe_LanmanServer3
Error: (09/16/2014 02:13:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000795b
ID des fehlerhaften Prozesses: 0x168c
Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0
Pfad der fehlerhaften Anwendung: ipmGui.exe1
Pfad des fehlerhaften Moduls: ipmGui.exe2
Berichtskennung: ipmGui.exe3
Error: (09/13/2014 03:51:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000795b
ID des fehlerhaften Prozesses: 0x17f4
Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0
Pfad der fehlerhaften Anwendung: ipmGui.exe1
Pfad des fehlerhaften Moduls: ipmGui.exe2
Berichtskennung: ipmGui.exe3
Error: (09/08/2014 03:44:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000795b
ID des fehlerhaften Prozesses: 0x14e4
Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0
Pfad der fehlerhaften Anwendung: ipmGui.exe1
Pfad des fehlerhaften Moduls: ipmGui.exe2
Berichtskennung: ipmGui.exe3
Error: (09/06/2014 03:14:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000795b
ID des fehlerhaften Prozesses: 0x8e8
Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0
Pfad der fehlerhaften Anwendung: ipmGui.exe1
Pfad des fehlerhaften Moduls: ipmGui.exe2
Berichtskennung: ipmGui.exe3
System errors:
=============
Error: (09/19/2014 02:50:28 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 19.09.2014 um 02:45:51 unerwartet heruntergefahren.
Error: (09/17/2014 08:27:18 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 17.09.2014 um 20:25:18 unerwartet heruntergefahren.
Error: (09/17/2014 08:23:31 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 17.09.2014 um 20:21:32 unerwartet heruntergefahren.
Error: (09/17/2014 07:05:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/17/2014 07:05:50 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}
Error: (09/17/2014 07:05:49 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}
Error: (09/17/2014 07:05:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/17/2014 07:05:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/17/2014 07:05:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/17/2014 07:05:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Microsoft Office Sessions:
=========================
Error: (09/18/2014 05:05:34 PM) (Source: MsiInstaller) (EventID: 11309) (User: Nepenthe-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt. System error 3. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (09/18/2014 05:05:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe32.0.1.5367541259ddmozalloc.dll32.0.1.5367541225d2800000030000141b112c01cfd351de0f42d6C:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dll355a26e3-3f45-11e4-be34-6c626d90eda7
Error: (09/18/2014 04:59:38 PM) (Source: MsiInstaller) (EventID: 11309) (User: Nepenthe-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt. System error 3. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (09/18/2014 04:59:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe32.0.1.5367541259ddmozalloc.dll32.0.1.5367541225d2800000030000141b1e801cfd34c94c8f934C:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dll542b9f34-3f44-11e4-be34-6c626d90eda7
Error: (09/17/2014 09:31:35 PM) (Source: MsiInstaller) (EventID: 10005) (User: Nepenthe-PC)
Description: Product: Java(TM) 6 Update 21 -- Internal Error 2753. regutils.dll(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (09/17/2014 03:51:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe_LanmanServer6.1.7600.163854a5bc100msvcrt.dll7.0.7601.177444eeaf722c000000500009b6047001cfd27e794f0777C:\Windows\system32\svchost.exeC:\Windows\system32\msvcrt.dllc27fed80-3e71-11e4-88b3-6c626d90eda7
Error: (09/16/2014 02:13:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: ipmGui.exe14.0.6.52253bec647ipmGui.exe14.0.6.52253bec647c00000050000795b168c01cfd13255a46bbeC:\program files\avira\antivir desktop\ipmGui.exeC:\program files\avira\antivir desktop\ipmGui.exe598b39fc-3d36-11e4-bdcc-6c626d90eda7
Error: (09/13/2014 03:51:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: ipmGui.exe14.0.6.52253bec647ipmGui.exe14.0.6.52253bec647c00000050000795b17f401cfcee4812b34f5C:\program files\avira\antivir desktop\ipmGui.exeC:\program files\avira\antivir desktop\ipmGui.exe84964b31-3ae8-11e4-ade8-6c626d90eda7
Error: (09/08/2014 03:44:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: ipmGui.exe14.0.6.52253bec647ipmGui.exe14.0.6.52253bec647c00000050000795b14e401cfcaf5acc07533C:\program files\avira\antivir desktop\ipmGui.exeC:\program files\avira\antivir desktop\ipmGui.exeaf349a2a-36f9-11e4-b720-6c626d90eda7
Error: (09/06/2014 03:14:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: ipmGui.exe14.0.6.52253bec647ipmGui.exe14.0.6.52253bec647c00000050000795b8e801cfc95f31fb9946C:\program files\avira\antivir desktop\ipmGui.exeC:\program files\avira\antivir desktop\ipmGui.exe35523646-3563-11e4-a501-6c626d90eda7
==================== Memory info ===========================
Processor: AMD Athlon(tm) II X2 245 Processor
Percentage of memory in use: 46%
Total physical RAM: 3198.3 MB
Available physical RAM: 1699.77 MB
Total Pagefile: 6394.9 MB
Available Pagefile: 4531.54 MB
Total Virtual: 2047.88 MB
Available Virtual: 1887.03 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:900.41 GB) (Free:163.62 GB) NTFS
Drive d: (Recover) (Fixed) (Total:30 GB) (Free:12.19 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=900.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=30 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
Danke im vorraus! |
Baum-Darstellung