Windows 7 reagiert extrem langsam nach Grafikkartenfehler

NOOBO · 23.09.2014, 13:15

Hallo!

Als ich vor einigen Tagen meinen Laptop(Win 7 Professional 64 Bit) einschalten wollte, zogen sich nachdem der "Starting Windwos.-Bildschirm" mit dem Win-Logo verschwunden war 3, ca 10 cm breite, pinke Balken vertikal über den Desktop, der Rest war schwarzweiß. Außerdem wurde nur die Hälfte des Desktops angezeigt und Uhzeit und Datum waren auf 00:00/ 1.1.1012 zurückgesetzt worden.
Als ich jedoch meinen Sharp-TV über HDMI anschloss, verhielt sich alles ganz normal: Farben normal, Desktop wird vollständig angezeigt.
Nachdem ich mehrere Virenscanner ausprobiert hatte, jedoch keiner was gefunden hatte, versuchte ich die Grafiktreiber zu deinstallieren, was auch funktionierte.
Jedoch musste ich Datum/Uhrzeit manuell ändern und der Laptop läuft seitdem extrem langsam.

Hier die log-Files der zu verwendenden Programme:

Defogger

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:31 on 23/09/2014 (Adrian)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

FRST

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2014 01
Ran by Adrian (administrator) on ADRIAN-PC on 23-09-2014 12:47:04
Running from C:\Users\Adrian\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Dropbox, Inc.) C:\Users\Adrian\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-08-19] (IDT, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PC Booster] => C:\Program Files (x86)\Inkline Global\PC Booster\PCBooster.exe [16318152 2011-03-14] (inKline Software Labs)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-08-19] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1470109500-3466023134-2998063465-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [1967616 2014-04-17] (AMD)
HKU\S-1-5-21-1470109500-3466023134-2998063465-1000\...\MountPoints2: {656d7350-2132-11e3-a0cb-806e6f6e6963} - E:\setup.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD8590A3738B5CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
SearchScopes: HKCU - DefaultScope {F813F595-1DA6-4476-915D-E3C2FDF0B758} URL = hxxp://www.google.com/cse?cx=partner-pub-6697027465779297:1722623130&ie=ISO-8859-1&sa=Search&q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3317742&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP6009984B-551A-472F-876C-C7F1870ABE41&q={searchTerms}&SSPV=
SearchScopes: HKCU - {F813F595-1DA6-4476-915D-E3C2FDF0B758} URL = hxxp://www.google.com/cse?cx=partner-pub-6697027465779297:1722623130&ie=ISO-8859-1&sa=Search&q={searchTerms}
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default
FF Homepage: https://www.google.at/
FF Keyword.URL: hxxp://www.google.com/cse?cx=partner-pub-6697027465779297:1722623130&ie=ISO-8859-1&sa=Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1211151.dll No File
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default\user.js
FF SearchPlugin: C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\inkline.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default\Extensions\abs@avira.com [2014-09-04]
FF Extension: HP Detect - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2013-09-19]
FF Extension: Cliqz Beta - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default\Extensions\cliqz@cliqz.com.xpi [2014-09-06]
FF Extension: MEGA - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default\Extensions\firefox@mega.co.nz.xpi [2014-03-17]
FF Extension: Adblock Plus - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-19]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Modul zum Sperren von gefährlichen Webseiten - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2012-01-02]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2012-01-02]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址過濾 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2012-01-02]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2012-01-02]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Sicherer Zahlungsverkehr - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2012-01-02]
FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Adrian\AppData\Roaming\Mozilla\Firefox\Profiles\b4ewrm2v.default\extensions\cliqz@cliqz.com

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho []

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1612552 2012-09-26] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [146184 2012-09-19] (IVT Corporation)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 MSSQL$ADK; c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [206424 2012-02-11] (Microsoft Corporation)
S4 SQLAgent$ADK; c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\SQLAGENT.EXE [438360 2012-02-11] (Microsoft Corporation)
S4 AntiVirWebService; "C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AESTAud; C:\Windows\System32\drivers\AESTAu64.sys [146048 2009-04-21] () [File not signed]
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48608 2012-10-02] (Ralink Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-21] (Intel Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [140352 2012-01-02] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [792128 2012-01-02] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\DRIVERS\rtbth.sys [692832 2012-10-02] (Ralink Technology, Corp.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated)
S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
U4 vsserv; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-23 12:44 - 2014-09-23 12:47 - 00019565 _____ () C:\Users\Adrian\Desktop\FRST.txt
2014-09-23 12:44 - 2014-09-23 12:44 - 00007647 _____ () C:\Users\Adrian\AppData\Local\Resmon.ResmonCfg
2014-09-23 12:31 - 2014-09-23 12:31 - 00000474 _____ () C:\Users\Adrian\Desktop\defogger_disable.log
2014-09-23 11:59 - 2014-09-23 11:59 - 00380416 _____ () C:\Users\Adrian\Desktop\Gmer-19357.exe
2014-09-23 11:57 - 2014-09-23 12:47 - 00000000 ____D () C:\FRST
2014-09-23 11:56 - 2014-09-23 11:57 - 02105856 _____ (Farbar) C:\Users\Adrian\Desktop\FRST64.exe
2014-09-23 11:56 - 2014-09-23 11:56 - 00000000 _____ () C:\Users\Adrian\defogger_reenable
2014-09-23 11:54 - 2014-09-23 11:54 - 00050477 _____ () C:\Users\Adrian\Desktop\Defogger.exe
2014-09-23 11:25 - 2014-09-23 11:29 - 131520402 _____ () C:\Users\Adrian\Downloads\Win64_152815.zip
2014-09-23 11:22 - 2014-09-23 11:22 - 01101648 _____ () C:\Users\Adrian\Downloads\Intel Treiber HD Graphics 64 Bit - CHIP-Installer.exe
2014-09-22 22:26 - 2014-09-22 22:26 - 00001203 _____ () C:\Users\Public\Desktop\PC Booster.lnk
2014-09-22 22:26 - 2014-09-22 22:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Booster
2014-09-22 22:26 - 2014-09-22 22:26 - 00000000 ____D () C:\Program Files (x86)\Inkline Global
2014-09-22 22:23 - 2014-09-22 22:24 - 02419808 _____ (inKline Global, Inc. ) C:\Users\Adrian\Desktop\pcb71.exe
2014-09-22 22:07 - 2014-09-22 22:07 - 00367448 _____ () C:\Users\Adrian\Downloads\SoftonicDownloader_fuer_pc-booster.exe
2014-09-22 21:53 - 2014-09-22 21:53 - 00000000 ____D () C:\Windows\pss
2014-09-22 21:39 - 2014-09-22 21:39 - 01678013 _____ () C:\Users\Adrian\Downloads\pc-decrapifier-2.3.1.exe
2014-09-22 21:24 - 2014-09-22 21:24 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-22 21:13 - 2014-09-22 21:13 - 01101648 _____ () C:\Users\Adrian\Downloads\344.11-desktop-win8-win7-winvista-64bit-international-whql - CHIP-Installer.exe
2014-09-22 20:06 - 2014-09-22 20:06 - 00378047 _____ () C:\ProgramData\1411408565.bdinstall.bin
2014-09-22 20:06 - 2014-09-22 20:06 - 00065201 _____ () C:\ProgramData\1411409189.bdinstall.bin
2014-09-22 20:06 - 2014-09-22 20:06 - 00000000 ____D () C:\Program Files\Bitdefender
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 ____D () C:\Users\Adrian\AppData\Roaming\QuickScan
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin.dll
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 _____ () C:\Windows\system32\BDSandBoxUH.dll
2014-09-22 19:55 - 2014-09-22 20:06 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-09-22 19:54 - 2014-09-22 19:54 - 07040424 _____ () C:\Users\Adrian\Downloads\bitdefender_isecurity_2015.exe
2014-09-22 17:36 - 2014-09-22 17:36 - 00002970 _____ () C:\Users\Adrian\Desktop\Windows-Kompatibilitätsbericht.htm
2014-09-22 16:43 - 2014-09-22 17:29 - 1821143969 _____ () C:\Users\Adrian\Downloads\X17-24209.iso
2014-09-22 16:31 - 2014-09-22 16:33 - 269338400 _____ (AMD Inc.) C:\Users\Adrian\Downloads\14-4-win7-win8-win8.1-64-dd-ccc-whql.exe
2014-09-22 12:50 - 2014-09-22 12:50 - 00000000 ____D () C:\ProgramData\ATI
2014-09-22 12:41 - 2014-09-22 12:41 - 00000000 ____D () C:\Users\Adrian\AppData\Roaming\library_dir
2014-09-22 12:40 - 2014-09-22 21:45 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-09-22 12:40 - 2014-09-22 12:40 - 00056100 _____ () C:\Windows\SysWOW64\CCCInstall_201409221240033096.log
2014-09-22 12:40 - 2014-09-22 12:40 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-09-22 12:39 - 2014-09-22 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-09-22 12:37 - 2014-09-22 12:37 - 00000000 ____D () C:\Program Files\AMD
2014-09-18 23:38 - 2014-09-22 22:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-18 18:59 - 2014-09-18 18:59 - 00000000 ____D () C:\Users\Adrian\Documents\Job
2014-09-18 18:37 - 2014-09-18 18:37 - 00003550 _____ () C:\Windows\System32\Tasks\HP AR Program Upload - 6a358dacead14f3a9b2be8568c91303f262821a21ae94e73b450f344f123f37e
2014-09-11 00:38 - 2014-09-11 00:39 - 28739584 _____ () C:\Users\Adrian\Downloads\VBoxGuestAdditions_2.2.0.iso
2014-09-11 00:34 - 2014-09-11 00:36 - 55379968 _____ () C:\Users\Adrian\Downloads\VBoxGuestAdditions_4.2.4.iso
2014-09-10 00:23 - 2014-09-10 00:23 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-08 19:47 - 2014-09-08 19:50 - 27578599 _____ () C:\Users\Adrian\Downloads\torbrowser-install-3.6.5_de.exe
2014-09-05 20:12 - 2014-09-05 20:12 - 00001076 _____ () C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2014-09-05 20:12 - 2014-09-05 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2014-09-05 20:12 - 2014-09-05 20:12 - 00000000 ____D () C:\Program Files\Oracle
2014-09-05 20:12 - 2014-07-15 16:16 - 00863528 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2014-09-05 20:12 - 2014-07-15 16:15 - 00129168 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2014-09-05 20:07 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-09-05 20:07 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-09-05 20:05 - 2014-09-05 20:05 - 01101648 _____ () C:\Users\Adrian\Downloads\VirtualBox - CHIP-Installer.exe
2014-09-02 12:38 - 2014-09-02 12:38 - 00001027 _____ () C:\Users\Public\Desktop\ManyCam.lnk
2014-09-02 12:38 - 2014-09-02 12:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam
2014-09-02 12:37 - 2014-09-02 12:37 - 00000000 ____D () C:\ProgramData\ManyCam
2014-09-01 22:06 - 2014-09-01 22:08 - 27572463 _____ () C:\Users\Adrian\Downloads\torbrowser-install-3.6.4_de.exe
2014-08-31 19:38 - 2014-08-31 19:38 - 00000000 ____D () C:\Users\Adrian\AppData\Local\Adobe
2014-08-24 11:18 - 2014-09-06 22:18 - 00000000 ____D () C:\Users\Adrian\VirtualBox VMs
2014-08-24 11:18 - 2012-01-01 04:41 - 00000000 ____D () C:\Users\Adrian\.VirtualBox
2014-08-24 11:16 - 2014-08-24 11:16 - 00000000 ____D () C:\ProgramData\Apple
2014-08-24 10:34 - 2014-09-01 13:43 - 00000000 ____D () C:\Program Files\Andy
2014-08-24 10:34 - 2014-08-24 10:34 - 01177208 _____ () C:\Users\Adrian\AppData\Roaming\AndyCleanupTool.exe
2014-08-24 10:34 - 2014-08-24 10:34 - 01176696 _____ () C:\Users\Adrian\AppData\Roaming\AndyCleanVM.exe
2014-08-24 10:33 - 2014-08-24 10:33 - 00336584 _____ (andyroid.net) C:\Users\Adrian\Downloads\Andy_v29.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-23 12:47 - 2014-09-23 12:44 - 00019565 _____ () C:\Users\Adrian\Desktop\FRST.txt
2014-09-23 12:47 - 2014-09-23 11:57 - 00000000 ____D () C:\FRST
2014-09-23 12:44 - 2014-09-23 12:44 - 00007647 _____ () C:\Users\Adrian\AppData\Local\Resmon.ResmonCfg
2014-09-23 12:31 - 2014-09-23 12:31 - 00000474 _____ () C:\Users\Adrian\Desktop\defogger_disable.log
2014-09-23 12:19 - 2009-07-14 06:45 - 00016880 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-23 12:19 - 2009-07-14 06:45 - 00016880 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-23 12:16 - 2013-09-19 15:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-23 11:59 - 2014-09-23 11:59 - 00380416 _____ () C:\Users\Adrian\Desktop\Gmer-19357.exe
2014-09-23 11:57 - 2014-09-23 11:56 - 02105856 _____ (Farbar) C:\Users\Adrian\Desktop\FRST64.exe
2014-09-23 11:56 - 2014-09-23 11:56 - 00000000 _____ () C:\Users\Adrian\defogger_reenable
2014-09-23 11:56 - 2013-09-19 13:34 - 00000000 ____D () C:\Users\Adrian
2014-09-23 11:55 - 2013-12-16 13:52 - 00000137 _____ () C:\Users\Adrian\Desktop\help.txt
2014-09-23 11:54 - 2014-09-23 11:54 - 00050477 _____ () C:\Users\Adrian\Desktop\Defogger.exe
2014-09-23 11:31 - 2009-07-14 06:51 - 00001925 _____ () C:\Windows\setupact.log
2014-09-23 11:29 - 2014-09-23 11:25 - 131520402 _____ () C:\Users\Adrian\Downloads\Win64_152815.zip
2014-09-23 11:22 - 2014-09-23 11:22 - 01101648 _____ () C:\Users\Adrian\Downloads\Intel Treiber HD Graphics 64 Bit - CHIP-Installer.exe
2014-09-22 23:51 - 2012-01-02 02:24 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-22 22:57 - 2009-07-14 04:34 - 00000231 _____ () C:\Windows\system.ini
2014-09-22 22:26 - 2014-09-22 22:26 - 00001203 _____ () C:\Users\Public\Desktop\PC Booster.lnk
2014-09-22 22:26 - 2014-09-22 22:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Booster
2014-09-22 22:26 - 2014-09-22 22:26 - 00000000 ____D () C:\Program Files (x86)\Inkline Global
2014-09-22 22:26 - 2014-09-18 23:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-22 22:24 - 2014-09-22 22:23 - 02419808 _____ (inKline Global, Inc. ) C:\Users\Adrian\Desktop\pcb71.exe
2014-09-22 22:07 - 2014-09-22 22:07 - 00367448 _____ () C:\Users\Adrian\Downloads\SoftonicDownloader_fuer_pc-booster.exe
2014-09-22 21:53 - 2014-09-22 21:53 - 00000000 ____D () C:\Windows\pss
2014-09-22 21:45 - 2014-09-22 12:40 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-09-22 21:45 - 2014-06-08 23:06 - 00000000 ____D () C:\Program Files (x86)\vMix
2014-09-22 21:44 - 2013-09-22 19:11 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-22 21:44 - 2013-09-19 21:47 - 00000000 ____D () C:\ProgramData\Avira
2014-09-22 21:44 - 2013-09-19 21:47 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-09-22 21:43 - 2013-09-19 13:19 - 01349124 _____ () C:\Windows\WindowsUpdate.log
2014-09-22 21:39 - 2014-09-22 21:39 - 01678013 _____ () C:\Users\Adrian\Downloads\pc-decrapifier-2.3.1.exe
2014-09-22 21:24 - 2014-09-22 21:24 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-22 21:13 - 2014-09-22 21:13 - 01101648 _____ () C:\Users\Adrian\Downloads\344.11-desktop-win8-win7-winvista-64bit-international-whql - CHIP-Installer.exe
2014-09-22 20:06 - 2014-09-22 20:06 - 00378047 _____ () C:\ProgramData\1411408565.bdinstall.bin
2014-09-22 20:06 - 2014-09-22 20:06 - 00065201 _____ () C:\ProgramData\1411409189.bdinstall.bin
2014-09-22 20:06 - 2014-09-22 20:06 - 00000000 ____D () C:\Program Files\Bitdefender
2014-09-22 20:06 - 2014-09-22 19:55 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 ____D () C:\Users\Adrian\AppData\Roaming\QuickScan
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 ____D () C:\ProgramData\Bitdefender
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin.dll
2014-09-22 19:56 - 2014-09-22 19:56 - 00000000 _____ () C:\Windows\system32\BDSandBoxUH.dll
2014-09-22 19:54 - 2014-09-22 19:54 - 07040424 _____ () C:\Users\Adrian\Downloads\bitdefender_isecurity_2015.exe
2014-09-22 19:39 - 2013-10-11 21:56 - 00000000 ___RD () C:\Users\Adrian\Dropbox
2014-09-22 19:39 - 2013-10-11 21:48 - 00000000 ____D () C:\Users\Adrian\AppData\Roaming\Dropbox
2014-09-22 19:35 - 2012-09-26 09:53 - 00000967 _____ () C:\Windows\SysWOW64\bscs.ini
2014-09-22 19:35 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-22 17:36 - 2014-09-22 17:36 - 00002970 _____ () C:\Users\Adrian\Desktop\Windows-Kompatibilitätsbericht.htm
2014-09-22 17:33 - 2013-12-30 15:23 - 00002544 _____ () C:\Windows\diagwrn.xml
2014-09-22 17:33 - 2013-12-30 15:23 - 00001890 _____ () C:\Windows\diagerr.xml
2014-09-22 17:33 - 2009-07-14 06:51 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-22 17:29 - 2014-09-22 16:43 - 1821143969 _____ () C:\Users\Adrian\Downloads\X17-24209.iso
2014-09-22 16:46 - 2011-04-12 09:43 - 00787542 _____ () C:\Windows\system32\perfh007.dat
2014-09-22 16:46 - 2011-04-12 09:43 - 00184326 _____ () C:\Windows\system32\perfc007.dat
2014-09-22 16:46 - 2009-07-14 07:13 - 01870680 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-22 16:33 - 2014-09-22 16:31 - 269338400 _____ (AMD Inc.) C:\Users\Adrian\Downloads\14-4-win7-win8-win8.1-64-dd-ccc-whql.exe
2014-09-22 13:09 - 2013-09-19 15:21 - 00000000 ____D () C:\Windows\Minidump
2014-09-22 13:09 - 2013-09-19 15:20 - 748638062 _____ () C:\Windows\MEMORY.DMP
2014-09-22 12:50 - 2014-09-22 12:50 - 00000000 ____D () C:\ProgramData\ATI
2014-09-22 12:49 - 2013-10-11 21:56 - 00001021 _____ () C:\Users\Adrian\Desktop\Dropbox.lnk
2014-09-22 12:49 - 2013-10-11 21:54 - 00000000 ____D () C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-22 12:41 - 2014-09-22 12:41 - 00000000 ____D () C:\Users\Adrian\AppData\Roaming\library_dir
2014-09-22 12:40 - 2014-09-22 12:40 - 00056100 _____ () C:\Windows\SysWOW64\CCCInstall_201409221240033096.log
2014-09-22 12:40 - 2014-09-22 12:40 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-09-22 12:40 - 2013-09-22 19:17 - 00000000 ____D () C:\ProgramData\AMD
2014-09-22 12:40 - 2013-09-19 15:40 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-09-22 12:39 - 2014-09-22 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-09-22 12:39 - 2013-09-19 15:40 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-09-22 12:37 - 2014-09-22 12:37 - 00000000 ____D () C:\Program Files\AMD
2014-09-19 23:07 - 2013-09-19 22:30 - 00000000 ____D () C:\Users\Adrian\AppData\Roaming\Skype
2014-09-19 19:21 - 2013-09-20 22:00 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-09-19 19:21 - 2013-09-20 13:27 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-09-19 12:56 - 2014-03-05 18:11 - 00000000 ____D () C:\Users\Adrian\AppData\Roaming\HpUpdate
2014-09-19 08:46 - 2014-03-27 12:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-18 18:59 - 2014-09-18 18:59 - 00000000 ____D () C:\Users\Adrian\Documents\Job
2014-09-18 18:37 - 2014-09-18 18:37 - 00003550 _____ () C:\Windows\System32\Tasks\HP AR Program Upload - 6a358dacead14f3a9b2be8568c91303f262821a21ae94e73b450f344f123f37e
2014-09-18 10:06 - 2013-09-29 13:33 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-09-13 17:12 - 2013-12-27 17:51 - 00000000 ____D () C:\Users\MSSQL$ADK
2014-09-11 00:39 - 2014-09-11 00:38 - 28739584 _____ () C:\Users\Adrian\Downloads\VBoxGuestAdditions_2.2.0.iso
2014-09-11 00:36 - 2014-09-11 00:34 - 55379968 _____ () C:\Users\Adrian\Downloads\VBoxGuestAdditions_4.2.4.iso
2014-09-10 00:23 - 2014-09-10 00:23 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-10 00:23 - 2013-09-19 15:08 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 00:23 - 2013-09-19 15:08 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-10 00:23 - 2013-09-19 15:08 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-08 19:50 - 2014-09-08 19:47 - 27578599 _____ () C:\Users\Adrian\Downloads\torbrowser-install-3.6.5_de.exe
2014-09-06 22:18 - 2014-08-24 11:18 - 00000000 ____D () C:\Users\Adrian\VirtualBox VMs
2014-09-05 20:12 - 2014-09-05 20:12 - 00001076 _____ () C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2014-09-05 20:12 - 2014-09-05 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2014-09-05 20:12 - 2014-09-05 20:12 - 00000000 ____D () C:\Program Files\Oracle
2014-09-05 20:05 - 2014-09-05 20:05 - 01101648 _____ () C:\Users\Adrian\Downloads\VirtualBox - CHIP-Installer.exe
2014-09-02 12:41 - 2014-02-18 11:01 - 00000000 ____D () C:\Users\Adrian\AppData\Local\ManyCam
2014-09-02 12:38 - 2014-09-02 12:38 - 00001027 _____ () C:\Users\Public\Desktop\ManyCam.lnk
2014-09-02 12:38 - 2014-09-02 12:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam
2014-09-02 12:38 - 2014-02-18 10:58 - 00000000 ____D () C:\Program Files (x86)\ManyCam
2014-09-02 12:37 - 2014-09-02 12:37 - 00000000 ____D () C:\ProgramData\ManyCam
2014-09-02 12:34 - 2014-06-08 00:15 - 00254056 _____ () C:\Users\Adrian\Downloads\ManyCamWebInstaller.exe
2014-09-01 22:08 - 2014-09-01 22:06 - 27572463 _____ () C:\Users\Adrian\Downloads\torbrowser-install-3.6.4_de.exe
2014-09-01 16:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-01 13:43 - 2014-08-24 10:34 - 00000000 ____D () C:\Program Files\Andy
2014-08-31 19:38 - 2014-08-31 19:38 - 00000000 ____D () C:\Users\Adrian\AppData\Local\Adobe
2014-08-24 11:16 - 2014-08-24 11:16 - 00000000 ____D () C:\ProgramData\Apple
2014-08-24 10:34 - 2014-08-24 10:34 - 01177208 _____ () C:\Users\Adrian\AppData\Roaming\AndyCleanupTool.exe
2014-08-24 10:34 - 2014-08-24 10:34 - 01176696 _____ () C:\Users\Adrian\AppData\Roaming\AndyCleanVM.exe
2014-08-24 10:33 - 2014-08-24 10:33 - 00336584 _____ (andyroid.net) C:\Users\Adrian\Downloads\Andy_v29.exe

Files to move or delete:
====================
C:\Users\Adrian\w7lxe.exe


Some content of TEMP:
====================
C:\Users\Adrian\AppData\Local\Temp\13-9_mobility_win7_win8_64_dd_ccc_whql.exe
C:\Users\Adrian\AppData\Local\Temp\14-4-mobility-win7-win8-win8.1-64-dd-ccc-whql.exe
C:\Users\Adrian\AppData\Local\Temp\1_Offer_9.exe
C:\Users\Adrian\AppData\Local\Temp\6_Offer_12.exe
C:\Users\Adrian\AppData\Local\Temp\avgnt.exe
C:\Users\Adrian\AppData\Local\Temp\DownloadManager.exe
C:\Users\Adrian\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyve2ll.dll
C:\Users\Adrian\AppData\Local\Temp\Extract.exe
C:\Users\Adrian\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Adrian\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Adrian\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Adrian\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Adrian\AppData\Local\Temp\msvcp110.dll
C:\Users\Adrian\AppData\Local\Temp\msvcr110.dll
C:\Users\Adrian\AppData\Local\Temp\nscC068.exe
C:\Users\Adrian\AppData\Local\Temp\nshC20E.exe
C:\Users\Adrian\AppData\Local\Temp\nshDABD.exe
C:\Users\Adrian\AppData\Local\Temp\nsmDCB1.exe
C:\Users\Adrian\AppData\Local\Temp\nsn34D9.exe
C:\Users\Adrian\AppData\Local\Temp\ochelper.exe
C:\Users\Adrian\AppData\Local\Temp\pc-decrapifier.exe
C:\Users\Adrian\AppData\Local\Temp\Product108.exe
C:\Users\Adrian\AppData\Local\Temp\raptrpatch.exe
C:\Users\Adrian\AppData\Local\Temp\raptr_stub.exe
C:\Users\Adrian\AppData\Local\Temp\SP56762.exe
C:\Users\Adrian\AppData\Local\Temp\SP62218.exe
C:\Users\Adrian\AppData\Local\Temp\SP62405.exe
C:\Users\Adrian\AppData\Local\Temp\SP63599.exe
C:\Users\Adrian\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-16 00:37

==================== End Of Log ============================

Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-09-2014 01
Ran by Adrian at 2014-09-23 12:47:22
Running from C:\Users\Adrian\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 3.3.0.29677 - BitTorrent Inc.)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.1.151 - Adobe Systems, Inc.)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.80830.1925 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
American Audio ASIO Driver 1.07 (HKLM\...\American Audio ASIO Driver 1.07) (Version: 1.07 - American Audio)
ANDY OS (HKLM\...\ANDY OS) (Version: 1.1 - andyroid.net)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
BCL easyConverter Desktop 3 (Word Version) (HKLM-x32\...\{8C5845B5-729F-40E3-A945-4454E67F65F4}) (Version: 3.0.18 - BCL Technologies)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Cochlear Simulation 2.1 (HKLM-x32\...\CochSim_is1) (Version:  - Phonetics and Linguistics, University College London)
Dropbox (HKCU\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)
Guitar Pro 5.0 (HKLM-x32\...\Guitar Pro 5_is1) (Version:  - Arobas Music)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Deskjet 3520 series - Grundlegende Software für das Gerät (HKLM\...\{15B2F0E3-3FAC-4495-B0FD-398EECFA4100}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3520 series Hilfe (HKLM-x32\...\{6B953497-169C-4929-9AA9-A9F510347468}) (Version: 27.0.0 - Hewlett Packard)
HP Deskjet 3520 series Setup Guide (HKLM-x32\...\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}) (Version: 27.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Product Detection (HKLM-x32\...\{8A9FC225-75F6-4B5D-911C-0ED230565643}) (Version: 11.15.0009 - HP)
HP Support Assistant (HKLM-x32\...\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}) (Version: 7.0.39.15 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Utility Center (HKLM-x32\...\{0C57987A-A03A-4B95-A309-D23F78F406CA}) (Version: 1.0.7 - Hewlett-Packard)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6425.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2857 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.2.1002 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden
ManyCam 4.0.109 (HKLM-x32\...\ManyCam) (Version: 4.0.109 - Visicom Media Inc.)
Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme (HKLM-x32\...\{90120000-00B2-0407-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files  (HKLM-x32\...\{D441BD04-E548-4F8E-97A4-1B66135BAAA8}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 (HKLM-x32\...\Microsoft SQL Server SQLServer2012) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2012 (x32 Version:  - ) Hidden
Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 RsFx Driver (x32 Version: 11.0.2100.60 - Microsoft Corporation) Hidden
Microsoft SQL Server 2012 Setup (English) (HKLM-x32\...\{CEA86648-87FA-4775-8F3B-A57F720BAE85}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft VSS Writer for SQL Server 2012 (HKLM\...\{3E0DD83F-BE4C-4478-86A0-AD0D79D1353E}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Windows 8 ESU (HKLM-x32\...\{E7E058CF-4638-49D4-936D-AC6DAE3B002E}) (Version: 1.1.1 - Hewlett-Packard)
Mozilla Firefox 32.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.2 (x86 de)) (Version: 32.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.6.1.1657 - Native Instruments)
Native Instruments Controller Editor (Version: 1.6.1.1657 - Native Instruments) Hidden
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.5.2.1549 - Native Instruments)
Native Instruments Service Center (Version: 2.5.2.1549 - Native Instruments) Hidden
Native Instruments Traktor 2 (HKLM-x32\...\Native Instruments Traktor 2) (Version: 2.6.7.337 - Native Instruments)
Native Instruments Traktor 2 (Version: 2.6.7.337 - Native Instruments) Hidden
Oracle VM VirtualBox 4.3.14 (HKLM\...\{8DD94059-60C6-42E3-AB59-8F37445ACC79}) (Version: 4.3.14 - Oracle Corporation)
PC Booster Version 7 (HKLM-x32\...\{889D7767-A186-4ED4-A7D9-FC6ECDG2A82C}_is1) (Version:  - inKline Global, Inc.) <==== ATTENTION
PDF Split And Merge Basic (HKLM\...\{C91B24F6-1629-11E2-B696-21676188709B}) (Version: 2.2.2 - Andrea Vacondio)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Ralink Bluetooth Stack64 (HKLM\...\{95DF815D-BE2D-9118-F549-39794C5869CF}) (Version: 9.0.725.0 - Ralink Corporation)
Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.5.0 - Ralink)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.)
Remote Control Server (HKLM-x32\...\{755C6515-9FEA-490C-B15E-22BB6519E57E}) (Version: 2.0.1.60 - Steppschuh)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
SQL Server 2012 Common Files (x32 Version: 11.0.2100.60 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Services (x32 Version: 11.0.2100.60 - Microsoft Corporation) Hidden
SQL Server 2012 Database Engine Shared (x32 Version: 11.0.2100.60 - Microsoft Corporation) Hidden
SQL Server Browser for SQL Server 2012 (HKLM-x32\...\{4B9E6EB0-0EED-4E74-9479-F982C3254F71}) (Version: 11.0.2100.60 - Microsoft Corporation)
Sql Server Customer Experience Improvement Program (x32 Version: 11.0.2100.60 - Microsoft Corporation) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.12 - Synaptics Incorporated)
Update for Microsoft .NET Framework 4.5 (KB2750147) (HKLM-x32\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2750147) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805221) (HKLM-x32\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2805221) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805226) (HKLM-x32\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB2805226) (Version: 1 - Microsoft Corporation)
VLC media player 2.0.8 (HKLM-x32\...\VLC media player) (Version: 2.0.8 - VideoLAN)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1470109500-3466023134-2998063465-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Adrian\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

13-09-2014 00:20:28 Geplanter Prüfpunkt
22-09-2014 10:30:34 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
22-09-2014 14:35:34 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
22-09-2014 16:29:38 Removed Bonjour
22-09-2014 19:40:42 PC Decrapifier Restore Point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {27366B57-4D2C-486C-A376-A659745D56F3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-10] (Adobe Systems Incorporated)
Task: {298CB98E-68D9-49F5-B455-9E04198ECE85} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-09-03] (Hewlett-Packard)
Task: {2AB10B3A-AC20-4DE1-A7DA-07CDF7A5F6B2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-09-03] (Hewlett-Packard)
Task: {4406750F-B65C-4740-A49B-2ACC01530621} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {5576EF7C-15F3-4C8A-B2AD-1E44C380CB66} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis Install => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {9278E889-44B9-41C9-A92B-B21B070B4A29} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {A1E898BC-7FE2-4E71-BE00-A1855E94C97D} - System32\Tasks\HP AR Program Upload - 2ed5752f548740d39dc9a1b34b5bc474c6a3893f11e64c92a824818347b0258a => C:\Program Files\HP\HP Deskjet 3520 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: {B999640C-E0E4-48AF-83CE-4107B60A64A6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {E04330D4-7B41-48FA-9FD2-A29B86A2A446} - System32\Tasks\HP AR Program Upload - 6a358dacead14f3a9b2be8568c91303f262821a21ae94e73b450f344f123f37e => C:\Program Files\HP\HP Deskjet 3520 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2012-09-19 18:37 - 2012-09-19 18:37 - 00017160 _____ () C:\Windows\system32\BsHelpCSps.dll
2012-09-19 18:37 - 2012-09-19 18:37 - 00029960 _____ () C:\Windows\system32\BsTrace.dll
2012-09-23 23:13 - 2012-09-23 23:13 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-03-06 16:00 - 2014-03-06 16:00 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\kpcengine.2.3.dll
2014-09-22 19:38 - 2014-09-22 19:38 - 00043008 _____ () c:\users\adrian\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyve2ll.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Adrian\AppData\Roaming\Dropbox\bin\libcef.dll
2012-09-19 18:37 - 2012-09-19 18:37 - 00079624 _____ () C:\Windows\system32\BsProfilefunc.dll
2012-09-19 18:37 - 2012-09-19 18:37 - 00363784 _____ () C:\Windows\system32\BsExtendFunc.dll
2013-09-24 21:57 - 2013-09-24 21:57 - 00017920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\3c2371da25cc36c8a40d38f3882871bd\PSIClient.ni.dll
2013-09-19 14:18 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-09-18 23:38 - 2014-09-18 23:38 - 03734640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-04-20 02:42 - 2014-04-20 02:42 - 00468672 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
2014-04-20 02:42 - 2014-04-20 02:42 - 00699072 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll
2014-04-20 02:42 - 2014-04-20 02:42 - 00347328 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com\nponlinebanking.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Adrian^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Adrian^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Andy => C:\Program Files\Andy\HandyAndy.exe
MSCONFIG\startupreg: BtTray => "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
MSCONFIG\startupreg: HP Deskjet 3520 series (NET) => "C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN3851C52P05SY:NW" -scfn "HP Deskjet 3520 series (NET)" -AutoStart 1
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe

==================== Faulty Device Manager Devices =============

Name: Ralink Bluetooth 4.0 Adapter
Description: Ralink Bluetooth 4.0 Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Ralink Corporation
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/23/2014 00:01:57 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (09/23/2014 11:59:26 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (09/23/2014 11:41:58 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (09/22/2014 10:21:53 PM) (Source: Windows Loader) (EventID: 1000) (User: )
Description: ------
Partition check v1 failed. Attempting v2
Data: 
Using volume ID (HarddiskVolume2)
Error finding your systems active partition (Read the read me file)
------

Error: (09/22/2014 10:18:13 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Fehler bei der Installation des Kaufnachweises. 0xC004F015
Teil-Pkey=3Q6C9
ACID=d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Genauer Fehler[?]

Error: (09/22/2014 10:08:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (09/22/2014 10:07:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (09/22/2014 07:37:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/22/2014 06:24:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/22/2014 05:28:20 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Fehler bei der Installation des Kaufnachweises. 0xC004F015
Teil-Pkey=CCYF4
ACID=5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f
Genauer Fehler[?]


System errors:
=============
Error: (09/22/2014 07:38:39 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.

Error: (09/22/2014 07:36:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WebcamMax, WDM Video Capture" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1058

Error: (09/22/2014 06:46:03 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/22/2014 06:29:21 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.

Error: (09/22/2014 06:23:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WebcamMax, WDM Video Capture" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1058

Error: (09/22/2014 05:45:44 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (09/22/2014 05:26:14 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.

Error: (09/22/2014 05:24:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WebcamMax, WDM Video Capture" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1058

Error: (09/22/2014 05:19:57 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/22/2014 05:19:57 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (10/27/2013 05:55:37 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1270 seconds with 720 seconds of active time.  This session ended with a crash.

Error: (10/27/2013 05:34:18 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 10277 seconds with 780 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-3632QM CPU @ 2.20GHz
Percentage of memory in use: 45%
Total physical RAM: 6036.28 MB
Available physical RAM: 3283.42 MB
Total Pagefile: 12070.74 MB
Available Pagefile: 8482.98 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:914.72 GB) (Free:288.4 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:16.02 GB) (Free:2.02 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 9EC65A10)

Partition: GPT Partition Type.

==================== End Of Log ============================

GMER

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-09-23 12:55:47
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000075 ATA_____ rev.1A01 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\Adrian\AppData\Local\Temp\uxdiqpod.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544                                                           fffff800037f7000 45 bytes [00, 00, 16, 02, 4E, 74, 66, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 591                                                           fffff800037f702f 29 bytes [00, 01, 00, 06, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 5                                   00000000775611f5 8 bytes {JMP 0xd}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 416                                 0000000077561390 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 159                        000000007756143f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 492                        000000007756158c 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 126                                000000007756191e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 636                                0000000077561b1c 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!_vsnwprintf_s + 204                               0000000077561bf0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 373                  0000000077561d75 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 691                  0000000077561eb3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!isalpha + 31                                      0000000077561edf 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!_ui64toa + 84                                     0000000077561f64 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!_strnicmp + 81                                    0000000077561fbd 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelf + 7                            0000000077561fd7 8 bytes {JMP 0xb}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 658                        0000000077562272 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 801                        0000000077562301 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlInstallFunctionTableCallback + 578             0000000077562792 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlIsGenericTableEmptyAvl + 16                    00000000775627b0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableAvl + 18                  00000000775627d2 8 bytes {JMP 0x10}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 79   000000007756282f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 176  0000000077562890 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     ...                                                                                                                          * 2
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 299          0000000077562d1b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 367          0000000077562d5f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     ...                                                                                                                          * 3
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlCutoverTimeToSystemTime + 483                  0000000077563023 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 523                      000000007756323b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 912                      00000000775633c0 16 bytes {JMP 0x4e}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 318                                     0000000077563a5e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 403                                     0000000077563ab3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 197         0000000077563b85 8 bytes [10, 6A, F8, 7E, 00, 00, 00, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 611         0000000077563d23 8 bytes [00, 6A, F8, 7E, 00, 00, 00, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!RtlpGetLCIDFromLangInfoNode + 80                  0000000077564190 8 bytes [A0, 69, F8, 7E, 00, 00, 00, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!NtSetInformationThread                            00000000775b1380 8 bytes {JMP QWORD [RIP-0x4d4cf]}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!NtQueryInformationThread                          00000000775b1500 8 bytes {JMP QWORD [RIP-0x4d498]}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!NtMapViewOfSection                                00000000775b1530 8 bytes {JMP QWORD [RIP-0x4d9b1]}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                              00000000775b1650 8 bytes {JMP QWORD [RIP-0x4d7a7]}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThread                                  00000000775b1700 8 bytes {JMP QWORD [RIP-0x4d9e3]}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx                                  00000000775b1d30 8 bytes {JMP QWORD [RIP-0x4dba6]}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!NtGetContextThread                                00000000775b1f80 8 bytes {JMP QWORD [RIP-0x4de55]}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread                                00000000775b27e0 8 bytes {JMP QWORD [RIP-0x4e770]}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 312              0000000073c713cc 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 471              0000000073c7146b 8 bytes {JMP 0xffffffffffffffb0}
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessInit + 611                           0000000073c716d7 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessTerm + 3                             0000000073c716e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuGetStackPointer + 23                        0000000073c719db 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetStackPointer + 23                        0000000073c719fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetInstructionPointer + 23                  0000000073c71a1b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuNotifyAffinityChange + 3                    0000000073c71a27 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuFlushInstructionCache + 23                  0000000073c71a63 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text     C:\Users\Adrian\Desktop\Gmer-19357.exe[8788] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessDebugEvent + 3                       0000000073c71a6f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]

---- Threads - GMER 2.1 ----

Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2668]                                  0000000077793e85
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2684]                                  0000000077792e65
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2744]                                  0000000077793e85
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2900]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2904]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2908]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2912]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2916]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2920]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2924]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2928]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2932]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2936]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2940]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2944]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2948]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2956]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2960]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2968]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2972]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2976]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2984]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2980]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2992]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2996]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3000]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3004]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3008]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3012]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3016]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3040]                                  0000000069671c2f
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3044]                                  000000006b43faa5
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3048]                                  000000006b4aeaa3
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3052]                                  000000006b4aeaa3
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3056]                                  000000006b4aeaa3
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3060]                                  000000006b4aeaa3
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3064]                                  000000006b4aeaa3
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3068]                                  000000006b4aeaa3
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:1088]                                  000000006b4aeaa3
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2072]                                  000000006b4aeaa3
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2092]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:1480]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2292]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2148]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2404]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2836]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:2840]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:9244]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:7592]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:9912]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:8360]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:11072]                                 000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:9868]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:11524]                                 000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:6172]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:10852]                                 000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:9840]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:9436]                                  000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:10508]                                 000000006f107a8c
Thread    c:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [2084:3892]                                  000000006f107a8c

---- Disk sectors - GMER 2.1 ----

Disk      \Device\Harddisk0\DR0                                                                                                        unknown MBR code

---- EOF - GMER 2.1 ----

Virenscanner logs hab ich leider keine, da ich wie gesagt verschiedene probiert habe und die sich gegenseitig deinstalliert haben.

Ich hoffe ihr könnt mir helfen

LG

Windows 7 reagiert extrem langsam nach Grafikkartenfehler

Log-Analyse und Auswertung: Windows 7 reagiert extrem langsam nach Grafikkartenfehler

Windows 7 reagiert extrem langsam nach Grafikkartenfehler

Ähnliche Themen: Windows 7 reagiert extrem langsam nach Grafikkartenfehler