|
Log-Analyse und Auswertung: Werbeinblendungen und ungewollte UmleitungenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
21.09.2014, 18:25 | #1 |
| Werbeinblendungen und ungewollte Umleitungen Hallo, ich habe seit kurzem ungewollte Werbeeinblendungen, zum Beispiel auf der Google-Ergebnisseite. Auf vielen Seiten kommt ein Browserdialog, der mir sagen möchte, dass meine Java-Version zu alt wäre. Wenn ich versuche das Fenster zu schließen (x), öffnet sich eine neue Seite. Ich kann lediglich im "Incognito Modus" ohne diese Probleme surfen. |
21.09.2014, 19:01 | #2 |
/// Malwareteam | Werbeinblendungen und ungewollte Umleitungen Hallo fertone,
__________________mein Name ist Jonas und ich werde dir bei deiner Bereinigung helfen. Diese kann mit viel Arbeit für dich verbunden sein. Bevor wir anfangen können, lies bitte die Bereinigungsregeln und Hinweise: Regeln zum Ablauf der Bereinigung
Hinweis Wenn du alles gelesen hast, kann es losgehen. Bitte speichere alle Programme auf dem Desktop und führe sie von dort aus.
Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Poste folgende Logfiles in deiner nächsten Antwort:
__________________ |
21.09.2014, 19:24 | #3 |
| Werbeinblendungen und ungewollte Umleitungen Hey und danke!
__________________Hier nun die Daten: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2014 Ran by Patrick (administrator) on FRT-MBL-ASUS on 21-09-2014 20:22:28 Running from C:\Users\Patrick\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\AMSP_LogServer.exe (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\AllShareFrameworkManagerDMS.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\AllShareFrameworkDMS.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Copyright 2013 SAMSUNG) D:\programme_2\Samsung Link\Samsung Link.exe (Copyright 2013 SAMSUNG) D:\programme_2\Samsung Link\Samsung Link.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\facemgr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Spotify Ltd) C:\Users\Patrick\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2264168 2011-07-13] (Realtek Semiconductor) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [961184 2011-08-03] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [798880 2011-08-03] (Atheros Commnucations) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-12] (Trend Micro Inc.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [99128 2012-09-17] (Synaptics Incorporated) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-09-17] (Synaptics Incorporated) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2011-10-19] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608 2011-07-22] (ASUS) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-08] (ASUS) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2255360 2011-06-10] (ASUS) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694040 2014-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3477640 2012-09-23] (Adobe Systems Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Run: [Google Update] => "C:\Users\Patrick\AppData\Local\Google\Update\GoogleUpdate.exe" /c HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Run: [GoogleChromeAutoLaunch_133FC10A42EC311A0885C7B36F719938] => C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.) HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [24477056 2014-06-27] (Google) HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Run: [Spotify] => C:\Users\Patrick\AppData\Roaming\Spotify\Spotify.exe [6342200 2014-09-20] (Spotify Ltd) HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Run: [Spotify Web Helper] => C:\Users\Patrick\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-09-20] (Spotify Ltd) HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.) HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Run: [Messenger (Yahoo!)] => C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe [6595928 2012-05-25] (Yahoo! Inc.) HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\RunOnce: [Application Restart #2] => C:\Users\Patrick\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-sid (the data entry has 544 more characters). HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: G - G:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {10cec26e-d9b9-11e1-a33d-0008ca84e168} - F:\LaunchU3.exe -a HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {4bf99038-ed35-11e1-bab5-0008ca84e168} - G:\setup\rsrc\Autorun.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {4bf99047-ed35-11e1-bab5-0008ca84e168} - G:\setup\rsrc\Autorun.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {71710796-debe-11e3-bbba-c86000235a66} - G:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {75b0cd87-d129-11e3-8b92-c86000235a66} - G:\wubi.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {9ef736dd-dcdc-11e3-8ac3-c86000235a66} - F:\wubi.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {baaa8b85-f2d5-11e1-94e1-0008ca84e168} - F:\setup.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {bf23f07f-9408-11e2-8963-0008ca84e168} - G:\setup.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {bf23f0d7-9408-11e2-8963-0008ca84e168} - F:\setup.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\MountPoints2: {e5f7b8b2-9ac5-11e2-893d-0008ca84e168} - F:\setup.exe HKU\S-1-5-21-1008409951-1812035238-1064759500-1002\...\Winlogon: [Shell] C:\Windows\explorer.exe [2388992 2011-10-19] (Microsoft Corporation) <==== ATTENTION AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2014-07-02] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation) AppInit_DLLs-x32: , C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-07-02] (NVIDIA Corporation) Startup: C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.0.lnk ShortcutTarget: Intel(R) Turbo Boost Technology Monitor 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) Startup: C:\Users\Patrick-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.0.lnk ShortcutTarget: Intel(R) Turbo Boost Technology Monitor 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) ShellIconOverlayIdentifiers: AccExtIco1 -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll () ShellIconOverlayIdentifiers: AccExtIco2 -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll () ShellIconOverlayIdentifiers: AccExtIco3 -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll () ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} URLSearchHook: HKCU - (No Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} - No File SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKCU - No Name - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - No File DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.66.2.cab Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll" Winsock: Catalog5-x64 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5-x64 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll" Hosts: 127.0.0.1 localhost Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Patrick\AppData\Roaming\Mozilla\Firefox\Profiles\pv7ymtjk.default-1408875130870 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.7.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.7.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper -> C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll () FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF Plugin-x32: samsung.com/SamsungLinkPCPlugin -> D:\programme_2\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Patrick\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Patrick\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Patrick\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Patrick\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File FF Plugin ProgramFiles/Appdata: C:\Users\Patrick\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google) FF Plugin ProgramFiles/Appdata: C:\Users\Patrick\AppData\Roaming\mozilla\plugins\npo1d.dll (Google) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-12-21] Chrome: ======= CHR HomePage: Default -> CHR StartupUrls: Default -> "hxxp://search.gboxapp.com/" CHR NewTab: Default -> "chrome-extension://jhiocdmmaannaccoofjfmjpbfkogmnap/index.html" CHR DefaultSearchKeyword: Default -> google.de__ CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Bounce) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajobbpobbpkfjhmofmglncdlcdloblli [2014-07-24] CHR Extension: (Google Docs) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-24] CHR Extension: (Google Drive) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-06] CHR Extension: (Mini Notepad) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\apjhdoaiejppfmijnkopdcpjcngdlffj [2014-07-24] CHR Extension: (Redbooth (formerly Teambox)) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgecckpiojpahjlndlofcljgacdfkifk [2014-07-24] CHR Extension: (Google Cast) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-07-27] CHR Extension: (Webseiten-Screenshot - Webpage Screenshot) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki [2014-07-24] CHR Extension: (Tab Manager) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\coonecdghnepgiblpccbbihiahajndda [2014-07-23] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-07-06] CHR Extension: (Gmail offline) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2014-07-24] CHR Extension: (Wunderlist - To-do and Task list) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc [2014-07-24] CHR Extension: (Ripple Emulator (Beta)) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\geelfhphabnejjhdalkjhgipohgpdnoc [2014-09-01] CHR Extension: (PageSpeed Insights (by Google)) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplegfbjlmmehdoakndmohflojccocli [2014-09-01] CHR Extension: (TweetDeck by Twitter) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2014-07-24] CHR Extension: (Mockup Builder) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfllfiimcgelfjkiedbcakabjekfldig [2014-07-24] CHR Extension: (Resolution Test) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhfcdbheobinplaamokffboaccidbal [2014-07-24] CHR Extension: (BrowserTexting) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\idijdgooojpepbnadlbkiagcmilndffa [2014-07-27] CHR Extension: (W3Schools Hider) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\igiahejkpbnbnekdaefddmdceocmjpll [2014-09-12] CHR Extension: (Adobe Edge Inspect CC) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijoeapleklopieoejahbpdnhkjjgddem [2014-07-24] CHR Extension: (Dropbox) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2014-07-24] CHR Extension: (Panda | Dribbble & Layervault Designer News) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhiocdmmaannaccoofjfmjpbfkogmnap [2014-07-24] CHR Extension: (IP-Adresse) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpnjjlbngpejmmhgcaagljaomgnginml [2014-07-24] CHR Extension: (TubeStop) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\kckaiklmbnheffnnfoneanfbjjjodecj [2014-09-12] CHR Extension: (Facebook Notifications) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmameahlembdcigphohgiodcgjomcgeo [2014-07-24] CHR Extension: (Google Wallet) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-06] CHR Extension: (Google Chrome to Phone Extension) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2014-07-24] CHR Extension: (Battlefield Play4Free) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2014-09-05] CHR Extension: (Wepware - Capture & Share Live Content) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojdlolcmehojmkbcnkkfeffbhpaipnba [2014-07-24] CHR Extension: (Psykopaint) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil [2014-07-24] CHR Extension: (Balsamiq Mockups) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\pplbmgaodhjmbklkgkgmlghaekcfhhkk [2014-07-24] CHR Profile: C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2 CHR Extension: (Magic Actions for YouTube™) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2014-05-22] CHR Extension: (CR Cast) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\acmfmindblghbicdipoakcolegkcddbk [2014-05-21] CHR Extension: (Theme Creator) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\akpelnjfckgfiplcikojhomllgombffc [2014-01-05] CHR Extension: (Google Docs) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-05] CHR Extension: (Google Drive) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-12] CHR Extension: (MindMeister) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bdehgigffdnkjpaindemkaniebfaepjm [2014-01-05] CHR Extension: (Web2PDFConverter) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bkanhckocooacphbnclgcndnpfpoppdk [2014-03-15] CHR Extension: (YouTube) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-12] CHR Extension: (No Name) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-04-29] CHR Extension: (Videostream for Google Chromecast™) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2014-05-21] CHR Extension: (Google Search) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-12] CHR Extension: (Invalid Access Token.) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cpngackimfmofbokmjmljamhdncknpmg [2014-01-05] CHR Extension: (Video download helper) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dbkchnicaiglcjpgbmpfmoafckkomdcm [2014-05-24] CHR Extension: (FeedSquares Supercharge your Google Reader) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ddkahgkblobiogkkeedfnjkldecloidi [2014-07-13] CHR Extension: (Good News) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\deegloljmdbfbjhlimieancmcfombgjj [2014-04-06] CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2014-02-18] CHR Extension: (Google Cast (Beta)) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\dliochdbjfkdbacpmhlcpmleaejidimm [2014-05-21] CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-01-05] CHR Extension: (Nitrous.IO) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efdcneeepllhjlbejkfnaolelbpdacai [2014-01-05] CHR Extension: (Koding) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fgbjpbdfegnodokpoejnbhnblcojccal [2014-01-05] CHR Extension: (Ripple Emulator (Beta)) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\geelfhphabnejjhdalkjhgipohgpdnoc [2014-03-17] CHR Extension: (avast! Online Security) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-06-21] CHR Extension: (PlaceIt: Screenshot in realistic environments) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hijaedcdaljajmngmmippghbajaadmfb [2014-01-05] CHR Extension: (Download Helper 2014 plus) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hlbklldemkgielfpaoigpjegafncgnmb [2014-05-24] CHR Extension: (Google Keep - notes and lists) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2014-01-05] CHR Extension: (Adobe Edge Inspect CC) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ijoeapleklopieoejahbpdnhkjjgddem [2014-01-18] CHR Extension: (Free Website Builder & Design Engine - Breezi) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jcddmlaijhcifebdodoofgaojgnahlhk [2014-01-05] CHR Extension: (Panda | Dribbble & Layervault Designer News) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jhiocdmmaannaccoofjfmjpbfkogmnap [2014-01-05] CHR Extension: (Clipular! Research, save & share screenshot) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jmjbgcjbgmcfgbgikmbdioggjlhjegpp [2014-01-05] CHR Extension: (LiveReload) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jnihajbhpnppcggbcgedagnkighmdlei [2014-03-15] CHR Extension: (Window Resizer) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\kkelicaakdanhinjdeammmilcgefonfh [2014-02-05] CHR Extension: (uTorrentBar_DE) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\leocdeigfnkaojcapikdjcdbedcjmffc [2012-11-12] CHR Extension: (Until AM for Chrome) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\mjafmkicbmhcbapadecadciafbkecofl [2014-01-05] CHR Extension: (deviantART muro) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\namljbfbglehfnlonjmebceimaalofei [2014-01-05] CHR Extension: (WeatherBug) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\njkkjobcechefaoknodniidfjapgfoco [2014-01-05] CHR Extension: (Google Wallet) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-07] CHR Extension: (Fluid UI) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\obgmmkbgpilmggfkhganmcmpemnhimgg [2014-01-05] CHR Extension: (Battlefield Play4Free) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2014-01-05] CHR Extension: (pricechop) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\opdindacoanklmfpgkkkbadgpemdgpem [2014-07-13] CHR Extension: (Click&Clean App) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2014-05-22] CHR Extension: (Gmail) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-12] CHR Extension: (Balsamiq Mockups) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pplbmgaodhjmbklkgkgmlghaekcfhhkk [2014-01-05] CHR Profile: C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3 CHR Extension: (Google Docs) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-08] CHR Extension: (Google Drive) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-08] CHR Extension: (Mini Notepad) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apjhdoaiejppfmijnkopdcpjcngdlffj [2014-07-24] CHR Extension: (YouTube) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-08] CHR Extension: (Google-Suche) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-08] CHR Extension: (Tab Manager) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coonecdghnepgiblpccbbihiahajndda [2014-07-23] CHR Extension: (FeedSquares Supercharge your Google Reader) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ddkahgkblobiogkkeedfnjkldecloidi [2014-07-13] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-01-05] CHR Extension: (BrowserTexting) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\idijdgooojpepbnadlbkiagcmilndffa [2014-07-27] CHR Extension: (W3Schools Hider) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\igiahejkpbnbnekdaefddmdceocmjpll [2014-09-12] CHR Extension: (TubeStop) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\kckaiklmbnheffnnfoneanfbjjjodecj [2014-09-12] CHR Extension: (uTorrentBar_DE) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\leocdeigfnkaojcapikdjcdbedcjmffc [2013-10-08] CHR Extension: (Google Wallet) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-29] CHR Extension: (Battlefield Play4Free) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh [2014-01-05] CHR Extension: (pricechop) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\opdindacoanklmfpgkkkbadgpemdgpem [2014-07-13] CHR Extension: (Google Mail) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-08] CHR Extension: (pricechop) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\opdindacoanklmfpgkkkbadgpemdgpem\3.9 [2014-07-13] CHR Profile: C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4 CHR Extension: (Google Docs) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-06] CHR Extension: (Google Drive) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-06] CHR Extension: (Mini Notepad) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apjhdoaiejppfmijnkopdcpjcngdlffj [2014-07-24] CHR Extension: (YouTube) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-06] CHR Extension: (Google-Suche) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-06] CHR Extension: (Tab Manager) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\coonecdghnepgiblpccbbihiahajndda [2014-07-23] CHR Extension: (FeedSquares Supercharge your Google Reader) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ddkahgkblobiogkkeedfnjkldecloidi [2014-07-13] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-01-06] CHR Extension: (BrowserTexting) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\idijdgooojpepbnadlbkiagcmilndffa [2014-07-27] CHR Extension: (W3Schools Hider) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\igiahejkpbnbnekdaefddmdceocmjpll [2014-09-12] CHR Extension: (TubeStop) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\kckaiklmbnheffnnfoneanfbjjjodecj [2014-09-12] CHR Extension: (uTorrentBar_DE) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\leocdeigfnkaojcapikdjcdbedcjmffc [2014-01-06] CHR Extension: (Google Wallet) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-06] CHR Extension: (pricechop) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\opdindacoanklmfpgkkkbadgpemdgpem [2014-07-13] CHR Extension: (Google Mail) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-06] CHR Extension: (pricechop) - C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\opdindacoanklmfpgkkkbadgpemdgpem\3.9 [2014-07-13] CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Patrick\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-11-30] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23] CHR StartMenuInternet: Google Chrome - C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\AllShareFrameworkManagerDMS.exe [404360 2013-08-23] (Samsung) [File not signed] R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-08-03] (Atheros) [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [103584 2011-08-03] (Atheros Commnucations) [File not signed] S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-07-13] (BitRaider, LLC) S3 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-06-09] () S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] () R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation) S2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-11-28] () R2 Samsung Link Service; D:\programme_2\Samsung Link\Samsung Link.exe [605768 2013-09-03] (Copyright 2013 SAMSUNG) S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation) R2 Themes; C:\Windows\system32\themeservice.dll [44544 2012-10-02] (Microsoft Corporation) [File not signed] R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X] S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X] S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] () R2 EkaProt6; C:\Windows\System32\DRIVERS\ekaprot6.sys [27288 2012-03-23] (Ekahau Inc.) R1 HWiNFO32; C:\Program Files\HWiNFO64\HWiNFO64A.SYS [30592 2012-05-10] (REALiX(tm)) S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S4 LMIRfsClientNP; No ImagePath R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99800 2013-05-31] (Intel Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation) S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44032 2011-07-20] (Research in Motion Ltd) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [43832 2012-09-17] (Synaptics Incorporated) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [53760 2012-09-28] (Apple, Inc.) [File not signed] S3 BRDriver64; \??\C:\ProgramData\BitRaider\BRDriver64.sys [X] S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X] S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [X] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-21 19:35 - 2014-09-21 19:35 - 00083312 _____ (Premium Installer ) C:\Users\Patrick\Downloads\Nicht bestätigt 117178.crdownload 2014-09-21 14:45 - 2014-09-21 14:45 - 00011091 _____ () C:\Users\Patrick\Desktop\JRT.txt 2014-09-21 14:29 - 2014-09-21 14:29 - 00000000 ____D () C:\Windows\ERUNT 2014-09-21 14:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-09-21 14:10 - 2014-09-21 14:13 - 00000000 ____D () C:\AdwCleaner 2014-09-21 14:10 - 2014-09-21 14:10 - 01373475 _____ () C:\Users\Patrick\Downloads\AdwCleaner_3.310.exe 2014-09-21 14:10 - 2014-09-21 14:10 - 01027006 _____ (Thisisu) C:\Users\Patrick\Downloads\JRT.exe 2014-09-21 09:46 - 2014-09-21 09:48 - 00083418 _____ () C:\Users\Patrick\Downloads\Addition.txt 2014-09-21 09:44 - 2014-09-21 20:22 - 00048839 _____ () C:\Users\Patrick\Downloads\FRST.txt 2014-09-21 09:44 - 2014-09-21 20:22 - 00000000 ____D () C:\FRST 2014-09-21 09:43 - 2014-09-21 09:43 - 02105856 _____ (Farbar) C:\Users\Patrick\Downloads\FRST64.exe 2014-09-21 09:36 - 2014-09-21 09:36 - 01097728 _____ (Farbar) C:\Users\Patrick\Downloads\FRST.exe 2014-09-19 18:33 - 2014-09-19 18:34 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-19 18:33 - 2014-09-19 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-19 18:33 - 2014-09-19 18:33 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-19 18:33 - 2014-09-19 18:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-19 18:33 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-19 18:33 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-19 18:33 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-19 18:31 - 2014-09-19 18:31 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2014-09-19 18:31 - 2014-09-19 18:31 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-09-19 18:31 - 2014-09-19 18:31 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-09-19 18:30 - 2014-09-19 18:31 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Patrick\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-19 18:29 - 2014-09-19 18:29 - 14107296 _____ (Microsoft Corporation) C:\Users\Patrick\Downloads\mseinstall.exe 2014-09-18 17:40 - 2014-09-18 17:40 - 07022106 _____ () C:\Users\Patrick\Downloads\wordpress-4.0-de_DE.zip 2014-09-18 17:37 - 2014-09-18 17:37 - 00707222 _____ () C:\Users\Patrick\Downloads\eddiemachado-bones-v1.06-654-ge832688.zip 2014-09-17 18:29 - 2014-09-17 18:30 - 00000000 ____D () C:\Program Files\Sublime Text 3 2014-09-17 18:29 - 2014-09-17 18:29 - 00001119 _____ () C:\Users\Public\Desktop\Mixture.lnk 2014-09-17 18:29 - 2014-09-17 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mixture 2014-09-17 18:29 - 2014-09-17 18:29 - 00000000 ____D () C:\Program Files (x86)\Mixture Limited 2014-09-17 18:23 - 2014-09-17 18:23 - 05287216 _____ () C:\Users\Patrick\Downloads\pure_theme_download.zip 2014-09-16 19:49 - 2014-09-16 19:49 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-09-14 17:52 - 2014-09-14 17:52 - 00000000 ____D () C:\Windows\SysWOW64\%LOCALAPPDATA% 2014-09-14 17:41 - 2014-09-14 17:41 - 00000000 ____D () C:\Windows\SysWOW64\NV 2014-09-14 17:41 - 2014-09-14 17:41 - 00000000 ____D () C:\Windows\system32\NV 2014-09-14 17:41 - 2014-07-02 19:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-09-14 17:37 - 2014-07-02 22:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 18626304 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 16122344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-09-14 17:37 - 2014-07-02 22:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-09-14 17:37 - 2014-07-02 22:48 - 00032544 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2014-09-11 18:06 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-11 18:06 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-11 18:06 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-11 18:06 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-11 18:06 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-11 18:06 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-11 18:06 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-11 18:06 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-11 18:06 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-11 18:06 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-11 18:06 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-11 18:06 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-11 18:06 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-11 18:06 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-11 18:06 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-11 18:06 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-11 18:06 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-11 18:06 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-11 18:06 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-11 18:06 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-11 18:06 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-09-11 18:06 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-11 18:06 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-11 18:06 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-11 18:06 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-11 18:06 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-09-11 18:06 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-09-11 18:06 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-11 18:06 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-11 18:06 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-11 18:06 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-11 18:06 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-11 18:06 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-11 18:06 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-09-11 18:06 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-11 18:06 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-09-11 18:06 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-11 18:06 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-11 18:06 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-11 18:06 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-11 18:06 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-09-11 18:06 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-09-11 18:06 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-11 18:06 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-11 18:06 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-11 18:06 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-11 18:06 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-11 18:06 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-11 18:06 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-11 18:06 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-11 18:06 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-09-11 18:06 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-11 18:06 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-11 18:06 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-11 18:06 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-11 18:06 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-09-11 17:22 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-11 17:22 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-09-11 17:13 - 2014-09-11 17:14 - 00262144 _____ () C:\Windows\Minidump\091114-165626-01.dmp 2014-09-10 19:08 - 2014-09-10 19:08 - 00001469 _____ () C:\Users\Patrick\Downloads\breezy_lightroom_preset___freebie_by_lady_tori-d4fuh8j.zip 2014-09-10 19:07 - 2014-09-10 19:07 - 00001184 _____ () C:\Users\Patrick\Downloads\Speakeasy.zip 2014-09-10 19:04 - 2014-09-10 19:04 - 00033690 _____ () C:\Users\Patrick\Downloads\free-cp-lr.zip 2014-09-10 19:04 - 2014-09-10 19:04 - 00001180 _____ () C:\Users\Patrick\Downloads\clean_vintage_lightroom_preset_by_welton_arruda-d5ox35u.rar 2014-09-10 19:03 - 2014-09-10 19:03 - 00003323 _____ () C:\Users\Patrick\Downloads\Free Hollywood Presets.zip 2014-09-10 19:03 - 2014-09-10 19:03 - 00001103 _____ () C:\Users\Patrick\Downloads\Blue-Pastel-Lightroom-Preset.zip 2014-09-10 19:02 - 2014-09-10 19:02 - 00001054 _____ () C:\Users\Patrick\Downloads\august_sunset_lightroom_preset_by_piximi-d5ezhf3.rar 2014-09-10 16:45 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-10 16:45 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-10 16:45 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-09-10 16:45 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-09-10 16:45 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-09-10 16:44 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-10 16:44 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-09-10 16:43 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-10 16:43 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-10 16:37 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-10 16:37 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-09 20:21 - 2014-09-09 20:21 - 00244742 _____ () C:\Users\Patrick\Downloads\vintage-2.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00224600 _____ () C:\Users\Patrick\Downloads\sommerstimmung.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00221865 _____ () C:\Users\Patrick\Downloads\vintage-1.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00218884 _____ () C:\Users\Patrick\Downloads\nebel-am-see.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00207700 _____ () C:\Users\Patrick\Downloads\sw-natur-2.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00179107 _____ () C:\Users\Patrick\Downloads\sw-natur.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00157442 _____ () C:\Users\Patrick\Downloads\nebel-kontrast.zip 2014-09-09 20:20 - 2014-09-09 20:20 - 00241196 _____ () C:\Users\Patrick\Downloads\dramatische-wolken.zip 2014-09-09 20:20 - 2014-09-09 20:20 - 00208788 _____ () C:\Users\Patrick\Downloads\hochzeit-details.zip 2014-09-09 20:20 - 2014-09-09 20:20 - 00180581 _____ () C:\Users\Patrick\Downloads\abenddaemmerung.zip 2014-09-09 20:20 - 2014-09-09 20:20 - 00156226 _____ () C:\Users\Patrick\Downloads\hochzeit-hell.zip 2014-09-08 20:18 - 2014-09-08 20:19 - 07000091 _____ () C:\Users\Patrick\Downloads\Photos (1).zip 2014-09-08 20:16 - 2014-09-08 20:16 - 06760386 _____ () C:\Users\Patrick\Downloads\Photos.zip 2014-09-08 18:08 - 2014-09-08 18:10 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\Yahoo! 2014-09-08 18:08 - 2014-09-08 18:08 - 00000000 ____D () C:\ProgramData\Yahoo! Companion 2014-09-08 18:07 - 2014-09-08 18:07 - 00001143 _____ () C:\Users\Public\Desktop\Yahoo! Messenger.lnk 2014-09-08 18:07 - 2014-09-08 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger 2014-09-08 18:03 - 2014-09-08 18:08 - 00000000 ____D () C:\Program Files (x86)\Yahoo! 2014-09-08 18:03 - 2014-09-08 18:03 - 00693424 _____ (Yahoo! Inc.) C:\Users\Patrick\Downloads\msgr11de.exe 2014-09-06 11:49 - 2014-09-06 11:49 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-09-06 11:49 - 2014-09-06 11:49 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-09-06 11:49 - 2014-09-06 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-09-06 11:48 - 2014-09-06 11:48 - 01678440 _____ (Skype Technologies S.A.) C:\Users\Patrick\Downloads\SkypeSetup.exe 2014-09-03 07:58 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-09-03 07:58 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-09-03 07:58 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-09-03 07:58 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-09-03 07:58 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-09-03 07:58 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-09-03 07:57 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-09-03 07:57 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-09-02 20:59 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-09-02 20:59 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-09-02 20:59 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-09-02 20:59 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-09-02 20:59 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-09-02 20:59 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-09-02 20:59 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-09-02 20:59 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-09-02 20:59 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-09-02 20:59 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-09-02 20:59 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-09-02 20:59 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-09-02 20:57 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-09-02 20:57 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-09-02 20:57 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-09-02 20:57 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-09-02 20:57 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-09-02 20:41 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-09-02 20:41 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-09-02 20:41 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-09-02 20:41 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-09-02 20:41 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-09-02 20:41 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-09-02 20:41 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-09-02 20:41 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-09-02 20:41 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-09-02 20:41 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-09-02 20:41 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-09-02 20:41 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-09-02 20:41 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-09-02 20:41 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-08-24 12:12 - 2014-08-24 12:12 - 00000000 ____D () C:\Users\Patrick\Desktop\Alte Firefox-Daten ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-21 20:22 - 2014-09-21 09:44 - 00048839 _____ () C:\Users\Patrick\Downloads\FRST.txt 2014-09-21 20:22 - 2014-09-21 09:44 - 00000000 ____D () C:\FRST 2014-09-21 20:07 - 2012-06-08 18:51 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-21 20:07 - 2012-06-08 17:33 - 00000916 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1008409951-1812035238-1064759500-1002UA.job 2014-09-21 19:50 - 2012-06-23 11:29 - 00282104 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-09-21 19:50 - 2012-06-08 18:37 - 00282104 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-09-21 19:50 - 2012-06-08 18:37 - 00234768 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-09-21 19:36 - 2012-06-23 23:00 - 00000000 ___RD () C:\Users\Patrick\Dropbox 2014-09-21 19:35 - 2014-09-21 19:35 - 00083312 _____ (Premium Installer ) C:\Users\Patrick\Downloads\Nicht bestätigt 117178.crdownload 2014-09-21 19:29 - 2012-06-19 11:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-21 18:48 - 2012-02-05 22:34 - 01217548 _____ () C:\Windows\WindowsUpdate.log 2014-09-21 18:48 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-21 18:48 - 2009-07-14 06:45 - 00018512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-21 18:45 - 2014-01-27 19:48 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\Spotify 2014-09-21 18:45 - 2012-06-08 18:14 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\Skype 2014-09-21 18:42 - 2012-06-08 18:34 - 00000000 ____D () C:\Users\Patrick\AppData\Local\Adobe 2014-09-21 18:41 - 2012-06-23 22:55 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\Dropbox 2014-09-21 18:39 - 2014-05-22 12:19 - 00000000 ____D () C:\Users\Patrick\Documents\Bluetooth Folder 2014-09-21 18:36 - 2012-09-30 13:43 - 00048948 _____ () C:\Windows\setupact.log 2014-09-21 18:36 - 2012-06-08 18:51 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-21 18:34 - 2012-02-05 22:42 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-09-21 18:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-21 16:07 - 2012-06-08 17:33 - 00000864 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1008409951-1812035238-1064759500-1002Core.job 2014-09-21 14:45 - 2014-09-21 14:45 - 00011091 _____ () C:\Users\Patrick\Desktop\JRT.txt 2014-09-21 14:29 - 2014-09-21 14:29 - 00000000 ____D () C:\Windows\ERUNT 2014-09-21 14:14 - 2014-06-21 14:22 - 00000000 ____D () C:\Users\Patrick\AppData\Local\Pokki 2014-09-21 14:14 - 2012-10-02 10:38 - 00457940 _____ () C:\Windows\PFRO.log 2014-09-21 14:13 - 2014-09-21 14:10 - 00000000 ____D () C:\AdwCleaner 2014-09-21 14:12 - 2014-05-16 14:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-21 14:12 - 2012-06-09 12:29 - 00000000 ____D () C:\ProgramData\ICQ 2014-09-21 14:10 - 2014-09-21 14:10 - 01373475 _____ () C:\Users\Patrick\Downloads\AdwCleaner_3.310.exe 2014-09-21 14:10 - 2014-09-21 14:10 - 01027006 _____ (Thisisu) C:\Users\Patrick\Downloads\JRT.exe 2014-09-21 09:48 - 2014-09-21 09:46 - 00083418 _____ () C:\Users\Patrick\Downloads\Addition.txt 2014-09-21 09:43 - 2014-09-21 09:43 - 02105856 _____ (Farbar) C:\Users\Patrick\Downloads\FRST64.exe 2014-09-21 09:36 - 2014-09-21 09:36 - 01097728 _____ (Farbar) C:\Users\Patrick\Downloads\FRST.exe 2014-09-20 09:09 - 2014-01-27 19:49 - 00000000 ____D () C:\Users\Patrick\AppData\Local\Spotify 2014-09-20 09:06 - 2011-02-19 06:24 - 00866036 _____ () C:\Windows\system32\perfh007.dat 2014-09-20 09:06 - 2011-02-19 06:24 - 00209378 _____ () C:\Windows\system32\perfc007.dat 2014-09-20 09:06 - 2009-07-14 07:13 - 02053446 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-19 20:17 - 2012-06-23 22:56 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-09-19 19:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Globalization 2014-09-19 19:54 - 2013-09-12 15:07 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\WinDir 2014-09-19 18:34 - 2014-09-19 18:33 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-19 18:33 - 2014-09-19 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-19 18:33 - 2014-09-19 18:33 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-19 18:33 - 2014-09-19 18:33 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-19 18:31 - 2014-09-19 18:31 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2014-09-19 18:31 - 2014-09-19 18:31 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-09-19 18:31 - 2014-09-19 18:31 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-09-19 18:31 - 2014-09-19 18:30 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Patrick\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-19 18:31 - 2012-07-16 16:32 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-09-19 18:29 - 2014-09-19 18:29 - 14107296 _____ (Microsoft Corporation) C:\Users\Patrick\Downloads\mseinstall.exe 2014-09-18 17:40 - 2014-09-18 17:40 - 07022106 _____ () C:\Users\Patrick\Downloads\wordpress-4.0-de_DE.zip 2014-09-18 17:37 - 2014-09-18 17:37 - 00707222 _____ () C:\Users\Patrick\Downloads\eddiemachado-bones-v1.06-654-ge832688.zip 2014-09-17 18:30 - 2014-09-17 18:29 - 00000000 ____D () C:\Program Files\Sublime Text 3 2014-09-17 18:30 - 2014-03-12 19:24 - 00000000 ____D () C:\Users\Patrick\AppData\Local\Sublime Text 3 2014-09-17 18:29 - 2014-09-17 18:29 - 00001119 _____ () C:\Users\Public\Desktop\Mixture.lnk 2014-09-17 18:29 - 2014-09-17 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mixture 2014-09-17 18:29 - 2014-09-17 18:29 - 00000000 ____D () C:\Program Files (x86)\Mixture Limited 2014-09-17 18:23 - 2014-09-17 18:23 - 05287216 _____ () C:\Users\Patrick\Downloads\pure_theme_download.zip 2014-09-17 18:23 - 2013-12-20 21:17 - 00000000 ___RD () C:\Users\Patrick\Creative Cloud Files 2014-09-16 19:49 - 2014-09-16 19:49 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-09-15 16:19 - 2014-07-13 17:08 - 00000000 ____D () C:\ProgramData\726a9a91e9097b86 2014-09-14 17:52 - 2014-09-14 17:52 - 00000000 ____D () C:\Windows\SysWOW64\%LOCALAPPDATA% 2014-09-14 17:41 - 2014-09-14 17:41 - 00000000 ____D () C:\Windows\SysWOW64\NV 2014-09-14 17:41 - 2014-09-14 17:41 - 00000000 ____D () C:\Windows\system32\NV 2014-09-14 17:41 - 2014-03-16 13:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-09-14 17:41 - 2012-06-08 20:38 - 00000000 ____D () C:\temp 2014-09-14 17:41 - 2012-02-05 22:41 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-09-14 17:39 - 2012-02-05 22:41 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-09-14 10:54 - 2012-06-17 13:15 - 00000000 ____D () C:\Users\Patrick\AppData\Local\CrashDumps 2014-09-11 19:28 - 2013-08-18 13:56 - 00000000 ____D () C:\Windows\rescache 2014-09-11 18:05 - 2012-09-09 19:36 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-09-11 18:04 - 2011-10-19 06:11 - 02027726 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-09-11 18:02 - 2013-07-28 10:32 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 17:31 - 2012-06-17 21:18 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-11 17:22 - 2014-05-01 09:38 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-11 17:14 - 2014-09-11 17:13 - 00262144 _____ () C:\Windows\Minidump\091114-165626-01.dmp 2014-09-11 17:13 - 2012-07-13 13:28 - 00000000 ____D () C:\Windows\Minidump 2014-09-10 19:08 - 2014-09-10 19:08 - 00001469 _____ () C:\Users\Patrick\Downloads\breezy_lightroom_preset___freebie_by_lady_tori-d4fuh8j.zip 2014-09-10 19:07 - 2014-09-10 19:07 - 00001184 _____ () C:\Users\Patrick\Downloads\Speakeasy.zip 2014-09-10 19:04 - 2014-09-10 19:04 - 00033690 _____ () C:\Users\Patrick\Downloads\free-cp-lr.zip 2014-09-10 19:04 - 2014-09-10 19:04 - 00001180 _____ () C:\Users\Patrick\Downloads\clean_vintage_lightroom_preset_by_welton_arruda-d5ox35u.rar 2014-09-10 19:03 - 2014-09-10 19:03 - 00003323 _____ () C:\Users\Patrick\Downloads\Free Hollywood Presets.zip 2014-09-10 19:03 - 2014-09-10 19:03 - 00001103 _____ () C:\Users\Patrick\Downloads\Blue-Pastel-Lightroom-Preset.zip 2014-09-10 19:02 - 2014-09-10 19:02 - 00001054 _____ () C:\Users\Patrick\Downloads\august_sunset_lightroom_preset_by_piximi-d5ezhf3.rar 2014-09-09 20:21 - 2014-09-09 20:21 - 00244742 _____ () C:\Users\Patrick\Downloads\vintage-2.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00224600 _____ () C:\Users\Patrick\Downloads\sommerstimmung.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00221865 _____ () C:\Users\Patrick\Downloads\vintage-1.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00218884 _____ () C:\Users\Patrick\Downloads\nebel-am-see.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00207700 _____ () C:\Users\Patrick\Downloads\sw-natur-2.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00179107 _____ () C:\Users\Patrick\Downloads\sw-natur.zip 2014-09-09 20:21 - 2014-09-09 20:21 - 00157442 _____ () C:\Users\Patrick\Downloads\nebel-kontrast.zip 2014-09-09 20:20 - 2014-09-09 20:20 - 00241196 _____ () C:\Users\Patrick\Downloads\dramatische-wolken.zip 2014-09-09 20:20 - 2014-09-09 20:20 - 00208788 _____ () C:\Users\Patrick\Downloads\hochzeit-details.zip 2014-09-09 20:20 - 2014-09-09 20:20 - 00180581 _____ () C:\Users\Patrick\Downloads\abenddaemmerung.zip 2014-09-09 20:20 - 2014-09-09 20:20 - 00156226 _____ () C:\Users\Patrick\Downloads\hochzeit-hell.zip 2014-09-09 19:31 - 2012-06-19 11:59 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-09 19:31 - 2012-06-19 11:59 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-09 19:31 - 2012-06-19 11:59 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-08 20:19 - 2014-09-08 20:18 - 07000091 _____ () C:\Users\Patrick\Downloads\Photos (1).zip 2014-09-08 20:16 - 2014-09-08 20:16 - 06760386 _____ () C:\Users\Patrick\Downloads\Photos.zip 2014-09-08 19:47 - 2012-07-04 11:40 - 00001704 _____ () C:\Users\Patrick\AppData\Local\Adobe Für Web speichern 13.0 Prefs 2014-09-08 18:10 - 2014-09-08 18:08 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\Yahoo! 2014-09-08 18:08 - 2014-09-08 18:08 - 00000000 ____D () C:\ProgramData\Yahoo! Companion 2014-09-08 18:08 - 2014-09-08 18:03 - 00000000 ____D () C:\Program Files (x86)\Yahoo! 2014-09-08 18:08 - 2013-12-07 16:08 - 00000000 ____D () C:\ProgramData\Yahoo! 2014-09-08 18:07 - 2014-09-08 18:07 - 00001143 _____ () C:\Users\Public\Desktop\Yahoo! Messenger.lnk 2014-09-08 18:07 - 2014-09-08 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger 2014-09-08 18:03 - 2014-09-08 18:03 - 00693424 _____ (Yahoo! Inc.) C:\Users\Patrick\Downloads\msgr11de.exe 2014-09-06 17:07 - 2012-06-08 17:33 - 00000000 ____D () C:\Users\Patrick\AppData\Local\Google 2014-09-06 11:49 - 2014-09-06 11:49 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-09-06 11:49 - 2014-09-06 11:49 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-09-06 11:49 - 2014-09-06 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-09-06 11:49 - 2012-06-08 18:14 - 00000000 ____D () C:\ProgramData\Skype 2014-09-06 11:48 - 2014-09-06 11:48 - 01678440 _____ (Skype Technologies S.A.) C:\Users\Patrick\Downloads\SkypeSetup.exe 2014-09-05 04:10 - 2014-09-10 16:43 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-05 04:05 - 2014-09-10 16:43 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-03 09:59 - 2012-12-26 22:15 - 07970120 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-03 09:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-09-01 18:57 - 2012-07-09 12:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-08-24 12:12 - 2014-08-24 12:12 - 00000000 ____D () C:\Users\Patrick\Desktop\Alte Firefox-Daten 2014-08-24 11:13 - 2012-07-01 21:10 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\vlc 2014-08-23 04:07 - 2014-09-02 20:57 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-23 03:45 - 2014-09-02 20:57 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-23 02:59 - 2014-09-02 20:57 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-22 17:20 - 2012-06-09 00:22 - 00000000 ____D () C:\Users\Patrick 2014-08-22 16:02 - 2012-06-08 17:30 - 00000000 ____D () C:\Users\Patrick\AppData\Local\Deployment ZeroAccess: C:\Windows\Installer\{3c42eb88-3e76-c42f-e757-e3ec8d556822} Some content of TEMP: ==================== C:\Users\Patrick\AppData\Local\Temp\AskSLib.dll C:\Users\Patrick\AppData\Local\Temp\BRSVC_2034609811_hlp.exe C:\Users\Patrick\AppData\Local\Temp\CMInstaller.exe C:\Users\Patrick\AppData\Local\Temp\Creative Cloud Helper.exe C:\Users\Patrick\AppData\Local\Temp\CreativeCloudSet-Up.exe C:\Users\Patrick\AppData\Local\Temp\detectionapi_rd.dll C:\Users\Patrick\AppData\Local\Temp\detectionui_r.exe C:\Users\Patrick\AppData\Local\Temp\directx10tests_rd.dll C:\Users\Patrick\AppData\Local\Temp\directx11tests_rd.dll C:\Users\Patrick\AppData\Local\Temp\directx9tests_rd.dll C:\Users\Patrick\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpv67iaw.dll C:\Users\Patrick\AppData\Local\Temp\Execute2App.exe C:\Users\Patrick\AppData\Local\Temp\FastDownload.exe C:\Users\Patrick\AppData\Local\Temp\i4jdel0.exe C:\Users\Patrick\AppData\Local\Temp\K-Lite_Codec_Pack_Basic.exe C:\Users\Patrick\AppData\Local\Temp\local.dll C:\Users\Patrick\AppData\Local\Temp\MSETUP4.EXE C:\Users\Patrick\AppData\Local\Temp\msvcp90.dll C:\Users\Patrick\AppData\Local\Temp\msvcr90.dll C:\Users\Patrick\AppData\Local\Temp\NGM.exe C:\Users\Patrick\AppData\Local\Temp\NGMDll.dll C:\Users\Patrick\AppData\Local\Temp\NGMResource.dll C:\Users\Patrick\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Patrick\AppData\Local\Temp\nvSCPAPISvr.exe C:\Users\Patrick\AppData\Local\Temp\nvStInst.exe C:\Users\Patrick\AppData\Local\Temp\pyl2542.tmp.exe C:\Users\Patrick\AppData\Local\Temp\pyl3161.tmp.exe C:\Users\Patrick\AppData\Local\Temp\pyl57C6.tmp.exe C:\Users\Patrick\AppData\Local\Temp\pyl85B9.tmp.exe C:\Users\Patrick\AppData\Local\Temp\pyl9707.tmp.exe C:\Users\Patrick\AppData\Local\Temp\pyl99F4.tmp.exe C:\Users\Patrick\AppData\Local\Temp\pylCC59.tmp.exe C:\Users\Patrick\AppData\Local\Temp\Quarantine.exe C:\Users\Patrick\AppData\Local\Temp\SendMsg.dll C:\Users\Patrick\AppData\Local\Temp\uninst1.exe C:\Users\Patrick\AppData\Local\Temp\VisualBeeTB_yh.exe C:\Users\Patrick\AppData\Local\Temp\vlc-2.0.7-win32.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe [2014-03-16 14:27] - [2011-10-19 04:54] - 2388992 ____A (Microsoft Corporation) 639C82380547F1C0A464D3EF78418FF2 C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-16 20:01 ==================== End Of Log ============================ |
21.09.2014, 19:24 | #4 |
| Werbeinblendungen und ungewollte UmleitungenCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-09-2014 Ran by Patrick at 2014-09-21 09:46:42 Running from C:\Users\Patrick\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1} AV: Trend Micro Titanium Internet Security (Disabled - Up to date) {68F968AC-2AA0-091D-848C-803E83E35902} AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C} AS: Trend Micro Titanium Internet Security (Disabled - Up to date) {D3988948-0C9A-0693-BE3C-BB4CF86413BF} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat XI Pro (HKLM-x32\...\{23D3F585-AE29-4670-8E3E-64A0EFB29240}) (Version: 11.0 - Adobe Systems Incorporated) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.00 - Adobe Systems) Adobe After Effects CC (HKLM-x32\...\{317243C1-6580-4F43-AED7-37D4438C3DD5}) (Version: 12.2.1 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden Adobe Bridge CC (64 Bit) (HKLM-x32\...\{359F8007-6486-429C-A8C5-D67F6897C88C}) (Version: 6.0 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.7.1.418 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated) Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.2 - Adobe Systems Incorporated) Hidden Adobe Dreamweaver CC 2014 (HKLM-x32\...\{766255CE-D156-11E3-8DBC-A136EB52ACCF}) (Version: 14.0.0 - Adobe Systems Incorporated) Adobe Edge Animate CC 2014 (HKLM-x32\...\{A3643DA2-AF8A-44E8-A56E-7FE001932D8B}) (Version: 4.0 - Adobe Systems Incorporated) Adobe Edge Code CC (HKLM-x32\...\{2033D10C-8B25-6EED-97C0-708693677BA6}) (Version: 0.98 - Adobe Systems Incorporated) Adobe Edge Inspect CC (HKLM-x32\...\{67D22EA0-4601-4450-9C99-042DABB0A315}) (Version: 1.0.408 - Adobe Systems Incorporated) Adobe Edge Reflow CC Preview (HKLM\...\{E23FC538-5890-43E8-932D-FC1DD8B1655B}) (Version: 0.47.17127 - Adobe Systems Incorporated) Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.2.1 - Adobe Systems Incorporated) Adobe Fireworks CS6 (HKLM-x32\...\{CA7C485C-7A89-11E1-B2C8-CD54B377BC52}) (Version: 12.0.1 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Flash Professional CC (HKLM-x32\...\{B56B95BF-7161-4166-8288-DB1BA9F6C9B8}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden Adobe Illustrator CC (HKLM-x32\...\{F2321021-08A2-44D6-B1DF-BDB415F23EC3}) (Version: 17.0 - Adobe Systems Incorporated) Adobe Illustrator CC 2014 (HKLM-x32\...\{2B4B4082-8043-4646-8334-B0A29E641211}) (Version: 18.0 - Adobe Systems Incorporated) Adobe InDesign CC (HKLM-x32\...\{BC448016-6F11-1014-B0EA-97CEE6E26CB6}) (Version: 9.0 - Adobe Systems Incorporated) Adobe Media Encoder CC 2014 (HKLM-x32\...\{663DEEEF-EF34-4DCB-8687-73A7AA146E02}) (Version: 8.0.1 - Adobe Systems Incorporated) Adobe Muse (HKLM-x32\...\{9A554C9D-E12D-4205-8101-9F4337CD5673}) (Version: 7.1 - Adobe Systems Incorporated) Adobe Muse CC 2014 (HKLM\...\{EC6FE191-AC85-4647-AE1E-8DE98D1E9737}) (Version: 2014.0.1.30 - Adobe Systems, Incorporated) Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated) Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.0 - Adobe Systems Incorporated) Adobe Photoshop Lightroom 5.5 64-bit (HKLM\...\{19BBD0F3-7A31-480D-8A23-19AE28035E9C}) (Version: 5.5.0 - Adobe Systems Incorporated) Adobe Reader X (10.1.4) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated) Adobe Touch App Plugins (HKLM-x32\...\{1EC083EE-5B76-4A2A-B95A-CAF460AA29D6}) (Version: 1.0 - Adobe Systems Incorporated) Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.) Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.2 - Adobe Systems, Incorporated) Adobe® Content Viewer (x32 Version: 3.4.2 - Adobe Systems, Incorporated) Hidden Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{878CADF7-5BD6-4A29-A6F4-AC51C0CE8068}) (Version: 1.8.17.26026 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.8.17.26026 - Alcor Micro Corp.) Hidden AllShare Framework DMS (HKLM\...\{C34E2E6F-6A24-40B8-8902-9960A4D42884}) (Version: 1.3.17 - Samsung) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.10 - Michael Tippach) ASUS AI Recovery (HKLM-x32\...\{D39F0676-163E-4595-A917-E28F99BBD4D2}) (Version: 1.0.24 - ASUS) ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.2 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.25 - ASUS) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.7 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.2.1 - ASUS) ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0011 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0040 - ASUS) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.23 - asus) ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 3.0.143.296 - ASUS Cloud Corporation) ASUS_Screensaver (HKLM-x32\...\ASUS_Screensaver) (Version: - ) AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0013 - ASUS) Battlefield Play4Free (HKLM-x32\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version: - EA Digital illusions) Battlefield Play4Free (PTE) (HKLM-x32\...\{705C125A-B7DA-470a-9536-708C0C8A7B4D}) (Version: - EA Digital illusions) BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC) bl (x32 Version: 1.0.0 - Your Company Name) Hidden Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.90 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Bubbletown (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115065740}) (Version: - Oberon Media) Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - ) Canon iP4800 series Benutzerregistrierung (HKLM-x32\...\Canon iP4800 series Benutzerregistrierung) (Version: - ) Canon iP4800 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4800_series) (Version: - ) Canon iP4900 series Benutzerregistrierung (HKLM-x32\...\Canon iP4900 series Benutzerregistrierung) (Version: - ) Canon iP4900 series On-screen Manual (HKLM-x32\...\Canon iP4900 series On-screen Manual) (Version: - ) Canon iP4900 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4900_series) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - ) Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.8.0.17 - Canon Inc.) CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - ) ChromecastApp (HKCU\...\{079ede36-133d-44b0-8053-c7c1fa8d2e0d}_is1) (Version: 1.5.316.0 - Google Inc.) CM Installer (HKLM-x32\...\{E8F42777-958D-4C14-9A42-8DCA1929FD26}) (Version: 1.0.0.0 - Cyanogen Inc.) Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) Counter-Strike (HKLM-x32\...\Steam App 10) (Version: - Valve) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - ) CPUID ROG CPU-Z 1.58 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.58 - CPUID, Inc.) Crunch (HKLM-x32\...\app.Crunch) (Version: 1.8.1 - UNKNOWN) Crunch (x32 Version: 1.8.1 - UNKNOWN) Hidden CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3624 - CyberLink Corp.) CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Deadtime Stories (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-118716773}) (Version: - Oberon Media) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version: - Microsoft) Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version: - Oberon Media) Dream Vacation Solitaire (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111249233}) (Version: - Oberon Media) Dropbox (HKCU\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.) Ekahau HeatMapper (HKLM\...\Heatmapper-1.1.4.39795) (Version: 1.1.4.39795 - Ekahau Inc.) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: - Steinberg Media Technologies GmbH) Evernote v. 5.0.2 (HKLM-x32\...\{C2EECB42-2C7F-11E3-8960-00163E98E7D0}) (Version: 5.0.2.1392 - Evernote Corp.) Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS) FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse) FormatFactory 2.96 (HKLM-x32\...\FormatFactory) (Version: 2.96 - Free Time) Free Fire Screensaver (HKLM-x32\...\Free Fire Screensaver) (Version: - Laconic Software) Galapago (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}) (Version: - Oberon Media) Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Go Go Gourmet Chef of the Year (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115290153}) (Version: - Oberon Media) Google Chrome (HKCU\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.) Google Drive (HKLM-x32\...\{75939021-3B68-419D-8DC1-E9823BFF9658}) (Version: 1.16.7009.9618 - Google, Inc.) Google Drive (HKLM-x32\...\{EACCC042-848D-4166-9D97-B13D1D108722}) (Version: 1.4.3365.1552 - Google, Inc.) Google Talk Plugin (HKLM-x32\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Google Web Designer (HKLM-x32\...\{811767F4-C586-4673-A41F-E9D767497222}) (Version: 1.0.1.0 - Google Inc.) Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.25.133 - Google, Inc.) Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) Guard.ICQ (HKLM-x32\...\Guard.Mail.ru) (Version: - Mail.ru) <==== ATTENTION Hotfix für Microsoft Visual Basic 2010 Express - DEU (KB2635973) (HKLM-x32\...\{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}.KB2635973) (Version: 1 - Microsoft Corporation) HWiNFO64 Version 4.00 (HKLM\...\HWiNFO64_is1) (Version: 4.00 - Martin Malík - REALiX) iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.) ICQ7M (HKLM-x32\...\{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}) (Version: 7.8 - ICQ) IETester v0.5 (remove only) (HKLM-x32\...\IETester) (Version: 0.5 - Core Services) inSSIDer (HKLM-x32\...\{F8A10A25-D8DD-4661-9A1E-7F6DBAAA3C5E}) (Version: 2.1.5 - MetaGeek) Intel(R) C++ Redistributables for Windows* on IA-64 (HKLM-x32\...\{5F7807CA-B1F1-4CB1-A519-A205D894A37D}) (Version: 11.1.048 - Intel Corporation) Intel(R) Chipset Device Software (Version: 10.0.13 - Intel Corporation) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.10.1550 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2462 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java 7 Update 7 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417007FF}) (Version: 7.0.70 - Oracle) Java 7 Update 7 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217007FF}) (Version: 7.0.70 - Oracle) Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) JPEGmini (HKCU\...\1e743bb8905c901f) (Version: 1.3.0.18 - ICVT Ltd) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden K-Lite Codec Pack 9.3.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.3.0 - ) LSHunterTVApp (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - LSHunter.TV) <==== ATTENTION Mahjong Memoirs (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117948443}) (Version: - Oberon Media) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Media Go (HKLM-x32\...\{362AB21A-E2C4-40CE-81C2-8C4D62B0635A}) (Version: 2.4.256 - Sony) Media Go Video Playback Engine 1.116.105.02020 (HKLM-x32\...\{54215B8A-6212-8DB8-39B4-98EE2BB98BD1}) (Version: 1.116.105.02020 - Sony) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation) Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden Microsoft Security Client (Version: 4.6.0305.0 - Microsoft Corporation) Hidden Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (Version: - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{E9089B6A-1FDE-47F3-8D29-175F5B7A0722}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Basic 2010 Express - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50701 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.50706 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.50701 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50701 - Microsoft Corporation) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Mixture (HKLM-x32\...\{DB47D399-B54E-49AA-ADB9-8C154CFA92DE}) (Version: 2.5.1.0 - Mixture Limited) Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mozilla Thunderbird 24.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.2.0 (x86 de)) (Version: 24.2.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: - ) Native Instruments Traktor 2 (Version: 2.0.1.10169 - Native Instruments) Hidden Nexon Game Manager (HKLM-x32\...\{289AC7E0-0AEE-4a7b-913C-709D9803D23E}) (Version: - ) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.5 - ) NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Optimus Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation) OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation) Opera Stable 20.0.1387.82 (HKLM-x32\...\Opera 20.0.1387.82) (Version: 20.0.1387.82 - Opera Software ASA) PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden ph (x32 Version: 1.0.0 - Your Company Name) Hidden Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) Plants vs Zombies (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117080787}) (Version: - Oberon Media) Pokki (HKCU\...\Pokki) (Version: 0.267.1.208 - Pokki) Protect Disc License Helper 1.0.118 (HKLM-x32\...\Protect Disc License Helper) (Version: 1.0.118 - Protect Disc) ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.11 - ProtectDisc Software GmbH) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.) Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 9.2 - Qualcomm Atheros) QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6418 - Realtek Semiconductor Corp.) Red AdBlocker (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - Red AdBlocker) <==== ATTENTION RegAlyzer (HKLM-x32\...\{296B2D8E-CE82-92AF-B2E8-A646E7CB78A2}_is1) (Version: 1.6.2.16 - Safer-Networking Ltd.) Ruby 2.0.0-p451-x64 (HKCU\...\{B5BD4615-7C8A-4E50-9179-71B593CA6B67}_is1) (Version: 2.0.0-p451 - RubyInstaller Team) Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14072.12 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14072.12 - Samsung Electronics Co., Ltd.) Hidden Samsung Link 1.7.0.1309031728 (HKLM\...\8474-7877-9059-0204) (Version: 1.7.0.1309031728 - Copyright 2013 SAMSUNG) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.) Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation) SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden SkyFonts™ (HKLM\...\{27C69949-B50B-422E-91B7-71C5E2FC92DF}) (Version: 3.0.3.6 - Monotype Inc.) Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.) Sonic Focus (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.0.0.4 - Synopsys ) Sony Ericsson Update Engine (HKLM-x32\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB) Spotify (HKCU\...\Spotify) (Version: 0.9.13.24.g5dbb3103 - Spotify AB) Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: 7.0.0.39 - Bioware/EA) Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Sublime Text Build 3059 (HKLM\...\Sublime Text 3_is1) (Version: - Sublime HQ Pty Ltd) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.11.7 - Synaptics Incorporated) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer) Trend Micro™ Titanium™ Internet Security (Version: 3.00 - Trend Micro Inc.) Hidden Ubuntu (HKLM-x32\...\Wubi) (Version: 14.04-rev286 - Ubuntu) Unterstützungsdateien für Microsoft SQL Server 2008-Setup (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation) Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft) USB/DVD-Downloadtool für Windows 7 (HKLM-x32\...\{7D6DDE45-FE2F-4D11-A7E7-BC2C2910536C}) (Version: 1.0.30 - Microsoft Corporation) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 3.6 - Bazis) Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.1 - ASUS) WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Wireless Console 3 (HKLM-x32\...\{8150221C-8F7E-4997-AD4E-AFDEE7F4B410}) (Version: 3.0.21 - ASUS) Xfire (remove only) (HKLM-x32\...\Xfire) (Version: - ) Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version: - Yahoo! Inc.) Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - ) Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version: - ) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Элемент управления Windows Live Mesh ActiveX для удаленных подключений (HKLM-x32\...\{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}) (Version: 15.4.5722.2 - Microsoft Corporation) גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (HKLM-x32\...\{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}) (Version: 15.4.5722.2 - Microsoft Corporation) بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة (HKLM-x32\...\{E18B30AA-6E2D-480C-B918-AF61009F4010}) (Version: 15.4.5722.2 - Microsoft Corporation) معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden 適用遠端連線的 Windows Live Mesh ActiveX 控制項 (HKLM-x32\...\{622DE1BE-9EDE-49D3-B349-29D64760342A}) (Version: 15.4.5722.2 - Microsoft Corporation) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{01E9FAE9-3819-4dd9-B1D9-998A1C62D1F8}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{4ED64402-CABA-4CD3-943E-B43E0F006016}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\Windows Sidebar\Gadgets\coremeter_v1.5.0.gadget\cm64.dll (-) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{6538FE62-139F-4136-AEA4-621D4883EB02}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\Windows Sidebar\Gadgets\coremeter_v1.5.0.gadget\CM64.dll (-) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}\InprocServer32 -> %LOCALAPPDATA%\Pokki\ocdeskband_0.dll No File CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Patrick\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1008409951-1812035238-1064759500-1002_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File ==================== Restore Points ========================= 17-09-2014 16:28:50 Installed Mixture 19-09-2014 16:34:55 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-11-29 19:26 - 2013-11-29 19:26 - 00000355 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {10244021-607C-40F1-9EFD-18F53116A8AB} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS) Task: {1C87819D-27FE-4F41-80E1-542B0884AAE7} - System32\Tasks\ASUS SmartLogon Console CPL => C:\Program Files (x86)\ASUS\SmartLogon\facemgr.exe [2010-11-15] (ASUS) Task: {340D5F2A-19C8-4D2E-A47C-C2638916EC4A} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe Task: {3D1D406B-8A07-4C0F-AECE-6BDB918AFFD1} - System32\Tasks\{24420C3A-E024-4E8F-A1E6-2B215BACDA2E} => V:\Install ReBirth RB-338.EXE Task: {3D2944E1-9446-41D9-A374-2A648B65DB2D} - System32\Tasks\{89367F1A-5261-4E12-AEDF-EC95D885B2AE} => V:\Install ReBirth RB-338.EXE Task: {4A4A6E86-6669-4522-8A2F-DCFCFF6D0A11} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-22] (ASUS) Task: {4AF95CA1-89B9-4FFF-9FC3-D3863AA1D810} - System32\Tasks\{6E704726-2786-4176-9C00-EE0B711E9270} => C:\Program Files (x86)\Common Files\DATA BECKER Shared\DATA BECKER Update Service.exe Task: {4C5087EC-4733-42A7-B8F2-363D7A0A58A1} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-02-15] (ASUS) Task: {6A594331-20AC-4E5F-A7E3-F407371EF8B3} - System32\Tasks\{7BCB10E3-9F15-4A89-BA7A-F4E696937836} => V:\Install ReBirth RB-338.EXE Task: {6DC4110A-1EF7-4C49-9BEC-20FB477208A3} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1008409951-1812035238-1064759500-1002UA => C:\Users\Patrick\AppData\Local\Google\Update\GoogleUpdate.exe Task: {704687A7-690F-411F-A6FB-B3A791DF2114} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {95089699-AC85-4DC8-ADFA-79B45597EF01} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {9ECA1EAF-525A-4386-AD4D-C3DC5C4C452F} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2012-09-27] () Task: {A0D4FDCD-5D8B-4DF7-9230-2D1396AC5704} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09] (Adobe Systems Incorporated) Task: {AE89776E-929D-4650-9DD3-1F85650DD471} - System32\Tasks\AdobeAAMUpdater-1.0-FRT-MBL-ASUS-Patrick => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated) Task: {CDE12D2E-1684-4080-8C36-FB27D8F7D2F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {CDF71E91-D77C-4D3F-8DDB-118B7C3A03F6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1008409951-1812035238-1064759500-1002Core => C:\Users\Patrick\AppData\Local\Google\Update\GoogleUpdate.exe Task: {D98B5301-9BE5-470E-B4EE-B67D76566561} - System32\Tasks\{7764ED31-7185-4C1A-B7A2-E5D83C0B2DF2} => V:\Install ReBirth RB-338.EXE Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1008409951-1812035238-1064759500-1002Core.job => C:\Users\Patrick\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1008409951-1812035238-1064759500-1002UA.job => C:\Users\Patrick\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-09-16 20:04 - 2010-09-17 10:52 - 00047104 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc80-mt-1_36.dll 2012-09-16 20:04 - 2010-09-17 10:52 - 00042496 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc80-mt-1_36.dll 2012-09-16 20:04 - 2010-09-17 10:52 - 00731136 _____ () C:\Program Files\Trend Micro\AMSP\sqlite3.dll 2011-10-13 03:37 - 2010-09-17 10:32 - 00288864 ____N () C:\Program Files\Trend Micro\UniClient\plugins\LUADLL.dll 2012-02-05 22:41 - 2014-07-02 22:48 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2012-02-05 22:42 - 2014-07-02 20:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-06-08 18:37 - 2012-11-28 16:51 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2013-09-14 22:43 - 2013-09-03 17:28 - 00012800 _____ () D:\programme_2\Samsung Link\JniSys.dll 2013-09-14 22:44 - 2013-09-14 22:44 - 00515584 _____ () C:\Windows\Temp\sqlite-3.7.2-sqlitejdbc.dll 2013-09-14 22:43 - 2013-09-03 17:28 - 01386496 _____ () D:\programme_2\Samsung Link\scone_proxy.dll 2013-09-14 22:43 - 2013-09-03 17:28 - 01427456 _____ () D:\programme_2\Samsung Link\scone_stub.dll 2013-08-23 15:30 - 2013-08-23 15:30 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\64bit\JNIInterface.dll 2013-08-23 15:31 - 2013-08-23 15:31 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\64bit\ASFAPI.dll 2013-08-23 15:33 - 2013-08-23 15:33 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\64bit\MediaDB_Manager.dll 2013-08-23 14:34 - 2013-08-23 14:34 - 00030720 _____ () C:\Windows\system32\MediaDB64.dll 2013-08-23 14:34 - 2013-08-23 14:34 - 00908800 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll 2013-08-23 15:33 - 2013-08-23 15:33 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\64bit\DMS_Manager.dll 2013-07-23 19:19 - 2013-07-23 19:19 - 00049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll 2013-07-23 19:19 - 2013-07-23 19:19 - 00016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll 2013-07-23 19:19 - 2013-07-23 19:19 - 00058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll 2013-07-23 19:19 - 2013-07-23 19:19 - 00299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll 2014-07-16 11:06 - 2014-07-16 11:06 - 00672416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll 2013-12-05 20:24 - 2013-12-05 20:24 - 02330440 _____ () C:\Users\Patrick\AppData\Local\Pokki\ocdeskband_0.dll 2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2010-07-14 16:11 - 2010-07-14 16:11 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2010-11-30 01:04 - 2010-11-30 01:04 - 00403968 _____ () C:\Program Files\Intel\TurboBoost\de\SignalIslandUi.resources.dll 2014-07-16 11:05 - 2014-07-16 11:05 - 05558432 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe 2013-08-23 14:34 - 2013-08-23 14:34 - 01112576 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\DMSManager.dll 2013-08-23 14:34 - 2013-08-23 14:34 - 00706560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\ContentDirectoryPresenter.dll 2013-08-23 14:34 - 2013-08-23 14:34 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\DCMCDP.dll 2013-08-23 14:34 - 2013-08-23 14:34 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\FolderCDP.dll 2013-08-23 14:34 - 2013-08-23 14:34 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\MetadataFramework.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\sqlite3.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\MoodExtractor.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\DCMImgExtractor.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\AutoChaptering.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\libexpat.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\VideoThumb.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\avcodec-52.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\avutil-50.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\avformat-52.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\swscale-0.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\AudioExtractor.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\ID3Driver.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\tag.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\libThumbnail.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\RichInfoDriver.dll 2013-08-23 14:34 - 2013-08-23 14:34 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\VideoExtractor.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\ThumbnailMaker.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 01033216 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\ImageMagickWrapper.dll 2013-08-23 14:34 - 2013-08-23 14:34 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\VideoMetadataDriver.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\libKeyFrame.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\SECMetaDriver.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\ImageExtractor.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\photoDriver.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\libexif-12.dll.dll 2013-08-14 08:29 - 2013-08-14 08:29 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\TextExtractor.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\Autobackup.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\RosettaAllShare.dll 2013-07-23 19:18 - 2013-07-23 19:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\boost_serialization-vc90-mt-1_47.dll 2013-07-23 19:18 - 2013-07-23 19:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\boost_date_time-vc90-mt-1_47.dll 2013-07-23 19:18 - 2013-07-23 19:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\boost_system-vc90-mt-1_47.dll 2013-07-23 19:18 - 2013-07-23 19:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\boost_thread-vc90-mt-1_47.dll 2013-07-23 19:30 - 2013-07-23 19:30 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.17\us.dll 2014-04-05 21:58 - 2013-05-31 13:30 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2014-03-16 13:05 - 2014-07-02 22:48 - 00013272 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2010-01-09 20:18 - 2010-01-09 20:18 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-01-21 01:34 - 2010-01-21 01:34 - 08793952 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2011-06-10 20:49 - 2011-06-10 20:49 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll 2014-07-27 15:49 - 2014-07-03 06:45 - 32733056 ____N () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll 2013-08-07 21:25 - 2013-08-07 21:25 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll 2012-09-23 21:43 - 2012-09-23 21:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu 2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-06 01:52 - 2014-02-06 01:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-09-07 04:11 - 2013-09-07 04:11 - 00569856 _____ () C:\Users\Patrick\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll 2013-09-07 04:11 - 2013-09-07 04:11 - 01400846 _____ () C:\Users\Patrick\AppData\Local\Pokki\Engine\avcodec-54.dll 2013-09-07 04:11 - 2013-09-07 04:11 - 00151054 _____ () C:\Users\Patrick\AppData\Local\Pokki\Engine\avutil-51.dll 2013-09-07 04:11 - 2013-09-07 04:11 - 00222734 _____ () C:\Users\Patrick\AppData\Local\Pokki\Engine\avformat-54.dll 2014-06-21 15:06 - 2014-06-05 15:58 - 00716616 _____ () C:\Users\Patrick\AppData\Local\Google\Chrome\Application\35.0.1916.153\libglesv2.dll 2014-06-21 15:06 - 2014-06-05 15:58 - 00126280 _____ () C:\Users\Patrick\AppData\Local\Google\Chrome\Application\35.0.1916.153\libegl.dll 2014-06-21 15:06 - 2014-06-05 15:58 - 04217672 _____ () C:\Users\Patrick\AppData\Local\Google\Chrome\Application\35.0.1916.153\pdf.dll 2014-06-21 15:06 - 2014-06-05 15:58 - 00414536 _____ () C:\Users\Patrick\AppData\Local\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll 2014-06-21 15:06 - 2014-06-05 15:58 - 01732424 _____ () C:\Users\Patrick\AppData\Local\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll 2014-07-27 15:49 - 2014-07-03 06:45 - 00742784 ____N () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll 2014-07-27 15:49 - 2014-07-03 06:45 - 00136576 ____N () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll 2011-08-18 01:37 - 2011-08-18 01:37 - 00204800 _____ () C:\Program Files (x86)\asus\VirtualCamera\virtualCamera.ax 2014-07-13 23:17 - 2014-07-08 08:18 - 14663856 _____ () C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\PepperFlash\14.0.0.145\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Patrick\AppData\Local\Temporary Internet Files:5tNdTyI9mqN4DpjO2QNkza5LK AlternateDataStreams: C:\Users\Patrick\AppData\Local\Temporary Internet Files:pppWeVKLqfPdAjinbnNYIKH5M AlternateDataStreams: C:\Users\Patrick\AppData\Local\Un1hKS5lwuI:P51BEj1pGac1QipR4 AlternateDataStreams: C:\Users\Public\.DS_Store:AFP_AfpInfo AlternateDataStreams: C:\Users\Public\fonts:AFP_AfpInfo ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^DeskDrive.lnk => C:\Windows\pss\DeskDrive.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Finderbar.lnk => C:\Windows\pss\Finderbar.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Refresh.lnk => C:\Windows\pss\Refresh.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RocketDock.lnk => C:\Windows\pss\RocketDock.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SkinPackMenu.lnk => C:\Windows\pss\SkinPackMenu.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SmartFlip.lnk => C:\Windows\pss\SmartFlip.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^UberIcon.lnk => C:\Windows\pss\UberIcon.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^VirtuaWin.lnk => C:\Windows\pss\VirtuaWin.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Winroll.lnk => C:\Windows\pss\Winroll.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Yodm3D.lnk => C:\Windows\pss\Yodm3D.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^YzShadow.lnk => C:\Windows\pss\YzShadow.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Patrick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupfolder: C:^Users^Patrick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EvernoteClipper.lnk => C:\Windows\pss\EvernoteClipper.lnk.Startup MSCONFIG\startupfolder: C:^Users^Patrick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Facebook Messenger.lnk => C:\Windows\pss\Facebook Messenger.lnk.Startup MSCONFIG\startupfolder: C:^Users^Patrick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup MSCONFIG\startupreg: ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: AllShareAgent => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe MSCONFIG\startupreg: AmIcoSinglun64 => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: ASUSWebStorage => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe /S MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon MSCONFIG\startupreg: ccleaner => "J:\Werkzeuge\CCleaner_3.23.1823\CCleaner64.exe" /AUTO MSCONFIG\startupreg: chromium => C:\Users\Patrick\AppData\Local\Google\Chrome\Application\chrome.exe --no-startup-window MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" MSCONFIG\startupreg: DriveShare => C:\Program Files (x86)\WebMaster\DriveShare\bin\wmfsui.exe /minimized MSCONFIG\startupreg: Facebook Update => "C:\Users\Patrick\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver MSCONFIG\startupreg: GIZMO2 => "C:\Program Files (x86)\GIZMO2\GIZMO.exe" -BootProcess MSCONFIG\startupreg: Google Update => "C:\Users\Patrick\AppData\Local\Google\Update\GoogleUpdate.exe" /c MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart MSCONFIG\startupreg: Guard.Mail.ru.gui => "C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4 MSCONFIG\startupreg: iLivid => "C:\Users\Patrick\AppData\Local\iLivid\iLivid.exe" -autorun MSCONFIG\startupreg: Iomami => C:\Users\Patrick\AppData\Roaming\Iomami.exe MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup MSCONFIG\startupreg: KiesPDLR => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe MSCONFIG\startupreg: LogMeIn GUI => "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe" MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet MSCONFIG\startupreg: Microsoft DLL Registration => C:\Users\Patrick\AppData\Roaming\regsrv32.exe MSCONFIG\startupreg: MobileDocuments => C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe MSCONFIG\startupreg: Monotype SkyFonts System Extension => D:\skyfonts\SkyFonts.exe MSCONFIG\startupreg: MSC => "C:\Program Files\Microsoft Security Client\mssecex.exe" -hide -runkey MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background MSCONFIG\startupreg: Nuance PDF Reader-reminder => "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini" MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RIMBBLaunchAgent.exe => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe MSCONFIG\startupreg: RocketDock => "C:\Program Files (x86)\RocketDock\RocketDock.exe" MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: Samsung Link => "D:\programme_2\Samsung Link\Samsung Link Tray Agent.exe" MSCONFIG\startupreg: sbitunesagent => D:\programme_2\songbird\songbirditunesagent.exe MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SmartFlip => C:\Windows\Gnome Skin Pack\SmartFlip\SmartFlip.exe MSCONFIG\startupreg: SonicMasterTray => C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe MSCONFIG\startupreg: SynAsusAcpi => %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi.exe MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe MSCONFIG\startupreg: VizorHtmlDialog.exe => "C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" "DEF" "EULA" "C:\Program Files\Trend Micro\Titanium\UI\Installer.cmpt\resources\preinstall_01_welcome_trial.html" "DEF" "DEF" "DEF" MSCONFIG\startupreg: WinampAgent => "C:\Program Files (x86)\Winamp\winampa.exe" MSCONFIG\startupreg: WinLess => C:\Program Files (x86)\Mark Lagendijk\WinLess\WinLess.exe MSCONFIG\startupreg: WINSXS32 => C:\Users\Patrick\AppData\Roaming\8B4D.exe MSCONFIG\startupreg: Wunderlist => "C:\Program Files (x86)\Wunderlist2\Wunderlist.exe" /silent MSCONFIG\startupreg: XLaunchPad => C:\Program Files (x86)\XLaunchPad\XLaunchPad.exe start MSCONFIG\startupreg: XWidget => C:\Program Files (x86)\XWidget\xwidget.exe MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe" ==================== Faulty Device Manager Devices ============= Name: LogMeIn Kernel Information Provider Description: LogMeIn Kernel Information Provider Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: LMIInfo Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (09/20/2014 09:05:54 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: FBAgent.exe, Version: 1.0.10.0, Zeitstempel: 0x4d6f576c Name des fehlerhaften Moduls: FBAgent.exe, Version: 1.0.10.0, Zeitstempel: 0x4d6f576c Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000002d802 ID des fehlerhaften Prozesses: 0x594 Startzeit der fehlerhaften Anwendung: 0xFBAgent.exe0 Pfad der fehlerhaften Anwendung: FBAgent.exe1 Pfad des fehlerhaften Moduls: FBAgent.exe2 Berichtskennung: FBAgent.exe3 Error: (09/20/2014 08:55:11 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (09/19/2014 08:11:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: FBAgent.exe, Version: 1.0.10.0, Zeitstempel: 0x4d6f576c Name des fehlerhaften Moduls: FBAgent.exe, Version: 1.0.10.0, Zeitstempel: 0x4d6f576c Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000002d802 ID des fehlerhaften Prozesses: 0x5ac Startzeit der fehlerhaften Anwendung: 0xFBAgent.exe0 Pfad der fehlerhaften Anwendung: FBAgent.exe1 Pfad des fehlerhaften Moduls: FBAgent.exe2 Berichtskennung: FBAgent.exe3 Error: (09/14/2014 05:49:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: FBAgent.exe, Version: 1.0.10.0, Zeitstempel: 0x4d6f576c Name des fehlerhaften Moduls: FBAgent.exe, Version: 1.0.10.0, Zeitstempel: 0x4d6f576c Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000002d802 ID des fehlerhaften Prozesses: 0x504 Startzeit der fehlerhaften Anwendung: 0xFBAgent.exe0 Pfad der fehlerhaften Anwendung: FBAgent.exe1 Pfad des fehlerhaften Moduls: FBAgent.exe2 Berichtskennung: FBAgent.exe3 Error: (09/14/2014 05:49:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: smartlogon.exe, Version: 1.0.9.1, Zeitstempel: 0x4cb6a1cb Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0150014 Fehleroffset: 0x0008480f ID des fehlerhaften Prozesses: 0x720 Startzeit der fehlerhaften Anwendung: 0xsmartlogon.exe0 Pfad der fehlerhaften Anwendung: smartlogon.exe1 Pfad des fehlerhaften Moduls: smartlogon.exe2 Berichtskennung: smartlogon.exe3 Error: (09/14/2014 10:54:55 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: BFP4f.exe, Version: 1.0.0.4, Zeitstempel: 0x5367ab01 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00038d45 ID des fehlerhaften Prozesses: 0x1f08 Startzeit der fehlerhaften Anwendung: 0xBFP4f.exe0 Pfad der fehlerhaften Anwendung: BFP4f.exe1 Pfad des fehlerhaften Moduls: BFP4f.exe2 Berichtskennung: BFP4f.exe3 Error: (09/11/2014 07:04:04 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: Microsoft.SqlServer.Management.SmoMetadataProvider, Version=10.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91 . Error code = 0x80070002 Error: (09/11/2014 07:04:04 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: Microsoft.SqlServer.Management.SmoMetadataProvider, Version=10.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91 . Error code = 0x80070002 Error: (09/11/2014 06:37:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: FBAgent.exe, Version: 1.0.10.0, Zeitstempel: 0x4d6f576c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000005382d ID des fehlerhaften Prozesses: 0x588 Startzeit der fehlerhaften Anwendung: 0xFBAgent.exe0 Pfad der fehlerhaften Anwendung: FBAgent.exe1 Pfad des fehlerhaften Moduls: FBAgent.exe2 Berichtskennung: FBAgent.exe3 Error: (09/11/2014 06:37:04 PM) (Source: .NET Runtime Optimization Service) (EventID: 1107) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to execute command from the offline queue: uninstall "SMSvcHost, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil". The error returned was Error: The specified assembly is not installed. . System errors: ============= Error: (09/20/2014 09:06:45 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (09/20/2014 09:06:01 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "AFBAgent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (09/20/2014 09:03:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (09/20/2014 08:59:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "LogMeIn Kernel Information Provider" wurde aufgrund folgenden Fehlers nicht gestartet: %%3 Error: (09/20/2014 08:56:56 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst EapHost erreicht. Error: (09/20/2014 08:56:17 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Amsp erreicht. Error: (09/19/2014 08:11:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "AFBAgent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (09/19/2014 08:02:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (09/19/2014 07:59:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "LogMeIn Kernel Information Provider" wurde aufgrund folgenden Fehlers nicht gestartet: %%3 Error: (09/19/2014 06:13:45 PM) (Source: BTHUSB) (EventID: 17) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Microsoft Office Sessions: ========================= Error: (09/20/2014 09:05:54 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: FBAgent.exe1.0.10.04d6f576cFBAgent.exe1.0.10.04d6f576cc0000005000000000002d80259401cfd4a061a19622C:\Windows\system32\FBAgent.exeC:\Windows\system32\FBAgent.exe8fa2d815-4094-11e4-b1a6-0008ca84e168 Error: (09/20/2014 08:55:11 AM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (09/19/2014 08:11:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: FBAgent.exe1.0.10.04d6f576cFBAgent.exe1.0.10.04d6f576cc0000005000000000002d8025ac01cfd433568c9a22C:\Windows\system32\FBAgent.exeC:\Windows\system32\FBAgent.exe57aa24a4-4028-11e4-b1b0-0008ca84e168 Error: (09/14/2014 05:49:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: FBAgent.exe1.0.10.04d6f576cFBAgent.exe1.0.10.04d6f576cc0000005000000000002d80250401cfd03353c57ce1C:\Windows\system32\FBAgent.exeC:\Windows\system32\FBAgent.exec6f7df19-3c26-11e4-b02f-0008ca84e168 Error: (09/14/2014 05:49:15 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: smartlogon.exe1.0.9.14cb6a1cbntdll.dll6.1.7601.18247521ea8e7c01500140008480f72001cfd033596147efC:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exeC:\Windows\SysWOW64\ntdll.dllad8fbc46-3c26-11e4-b02f-0008ca84e168 Error: (09/14/2014 10:54:55 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: BFP4f.exe1.0.0.45367ab01ntdll.dll6.1.7601.18247521ea8e7c000000500038d451f0801cfcff986acebcbC:\Program Files (x86)\EA Games\Battlefield Play4Free\BFP4f.exeC:\Windows\SysWOW64\ntdll.dllcbbb4800-3bec-11e4-816e-0008ca84e168 Error: (09/11/2014 07:04:04 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: Microsoft.SqlServer.Management.SmoMetadataProvider, Version=10.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91 . Error code = 0x80070002 Microsoft.SqlServer.Management.SmoMetadataProvider, Version=10.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91 Error: (09/11/2014 07:04:04 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - 1>Failed to compile: Microsoft.SqlServer.Management.SmoMetadataProvider, Version=10.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91 . Error code = 0x80070002 Microsoft.SqlServer.Management.SmoMetadataProvider, Version=10.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91 Error: (09/11/2014 06:37:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: FBAgent.exe1.0.10.04d6f576cntdll.dll6.1.7601.18247521eaf24c0000005000000000005382d58801cfcdde630a9312C:\Windows\system32\FBAgent.exeC:\Windows\SYSTEM32\ntdll.dllee8c3e12-39d1-11e4-816e-0008ca84e168 Error: (09/11/2014 06:37:04 PM) (Source: .NET Runtime Optimization Service) (EventID: 1107) (User: ) Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to execute command from the offline queue: uninstall "SMSvcHost, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil". The error returned was Error: The specified assembly is not installed. . CodeIntegrity Errors: =================================== Date: 2012-06-08 17:39:54.714 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Patrick\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-06-08 17:39:54.143 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Patrick\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-06-08 17:39:53.503 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Patrick\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-06-08 17:39:52.943 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Patrick\Documents\boot\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-06-08 17:38:44.477 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Patrick\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-06-08 17:38:42.923 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Patrick\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-06-08 17:38:41.708 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Patrick\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2012-06-08 17:38:41.095 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Patrick\Documents\boot\Windows\System32\fveapibase.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz Percentage of memory in use: 43% Total physical RAM: 8098.14 MB Available physical RAM: 4546.99 MB Total Pagefile: 16194.47 MB Available Pagefile: 10870.3 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:5.2 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (DATA) (Fixed) (Total:254.45 GB) (Free:9.79 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: E3102A4B) Partition 1: (Not Active) - (Size=25 GB) - (Type=1C) Partition 2: (Active) - (Size=186.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=254.5 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
22.09.2014, 14:37 | #5 |
/// Malwareteam | Werbeinblendungen und ungewollte Umleitungen Ok, dann bitte so weiter: Schritt 1 Bitte deinstalliere folgende Programme:
Windows XP: Start -> Systemsteuerung -> Kategorieansicht auswählen (falls nicht voreingestellt) -> Softwareund wähle die angegeben Programme aus. Drücke Entfernen (Windows XP) oder Deinstallieren (Windows Vista/7/8). Schritt 2 Scan mit Combofix
Poste folgende Logfiles in deiner nächsten Antwort:
__________________ Gruß, Jonas |
25.09.2014, 19:37 | #6 |
/// Malwareteam | Werbeinblendungen und ungewollte Umleitungen Hi, ich hab schon länger keine Antwort mehr von dir erhalten. Brauchst du weiterhin noch Hilfe? Hinweis: Wir sind noch nicht fertig! Auch wenn die Symptome verschwunden sein sollten, kann dein System weiterhin infiziert sein und über Sicherheitslücken verfügen, welche eine erneute Infektion ermöglichen.
__________________ --> Werbeinblendungen und ungewollte Umleitungen |
28.09.2014, 11:00 | #7 |
/// Malwareteam | Werbeinblendungen und ungewollte Umleitungen Fehlende Rückmeldung Dieses Thema wurde aus meinen Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. Falls du weitermachen willst, schicke mir bitte eine private Nachricht. Jeder andere bitte folgendes lesen: http://www.trojaner-board.de/69886-a...-beachten.html und einen eigenen Thread erstellen.
__________________ Gruß, Jonas |
Themen zu Werbeinblendungen und ungewollte Umleitungen |
fehlercode 0xc0000005, fehlercode 0xc0150014, fenster, gen, java-version, kurzem, modus, neue, probleme, schließe, schließen, seiten, surfe, surfen, umleitungen, ungewollte, versuche, werbeeinblendungen, öffnet |