![]() |
|
Log-Analyse und Auswertung: Windows 7: Pc Startet sehr langsam mit langem BlackscreenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() | ![]() Windows 7: Pc Startet sehr langsam mit langem Blackscreen Hallo, mein haupt PC startet seit ca. 3 Tagen nur noch sehr langsam und hat dabei einen langen Blackscreen (1-2 Minuten Blackscreen und insgesamt dauert das hochfahren 3-4 Minuten). Dies hat mich etwas überrascht und ich habe bei den Autostartoptionen etwas herumgetestet, jedoch ohne erfolg. Daher wollte ich zur Sicherheit hier noch mal nachfragen. Es könnte evtl. an einem Grafikkartentreiber-Update liegen (die einzige nennenswerte Änderung in den letzten Tagen.), jedoch weiß ich nicht wie ich das überprüfen kann. Schon einmal Danke im Vorraus ![]() Daten zu meinem PC: Win7 Home Premium Service Pack 1 8 GB RAM 64 Bit-System ACHTUNG: Ich habe GMER-Logfile und Addition-Logfile als Zip-Datei angehängt, wie es in der Anleitung steht, da es zu viele Zeichen hatte. Logfiles: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 17:04 on 27/09/2014 (Tim) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2014 Ran by Tim (administrator) on TIM-PC on 27-09-2014 17:05:24 Running from C:\Users\Tim\Desktop Loaded Profile: Tim (Available profiles: Tim) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\System32\alg.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AvkBap64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Google Inc.) C:\Users\Tim\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Tim\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Tim\AppData\Local\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Users\Tim\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Tim\AppData\Local\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1756792 2014-05-20] (G Data Software AG) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-21-3296676736-3360328921-4261957284-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-18\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ATTENTION AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [174856 2014-09-14] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [156840 2014-09-14] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Status Monitor.lnk ShortcutTarget: Status Monitor.lnk -> C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - No Name - {4D594333-0076-A76A-76A7-7A786E7484D7} - No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll No File FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll No File FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Tim\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Tim\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tim\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () Chrome: ======= CHR Profile: C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (ProxFlow) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-03-02] CHR Extension: (Google Docs) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-19] CHR Extension: (Google Drive) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-19] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-03] CHR Extension: (YouTube) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-19] CHR Extension: (Google Search) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-19] CHR Extension: (AdBlock) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-16] CHR Extension: (Google Wallet) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26] CHR Extension: (Gmail) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-19] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2250360 2014-07-30] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2683760 2014-05-20] (G Data Software AG) S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [345984 2014-07-22] () R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3228136 2014-08-21] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700536 2014-05-20] (G Data Software AG) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-17] (NVIDIA Corporation) R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-17] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-05-03] () S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation) S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 Bulk1528; C:\Windows\System32\Drivers\Bulk1528.sys [14848 2008-06-27] (SunPlus) S2 Ca1528av; C:\Windows\System32\Drivers\Ca1528av.sys [531584 2008-07-30] (Digital Camera) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [55808 2014-07-02] (G Data Software AG) R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2014-07-02] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [142336 2014-08-12] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64000 2014-07-02] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2014-09-26] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-04-12] (G Data Software) R1 GRD; C:\Windows\SysWOW64\drivers\GRD.sys [106224 2012-12-12] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [61440 2014-07-02] (G Data Software AG) S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC) S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation) S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X] S3 X6va008; \??\C:\Windows\SysWOW64\Drivers\X6va008 [X] S3 X6va009; \??\C:\Windows\SysWOW64\Drivers\X6va009 [X] S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-27 17:05 - 2014-09-27 17:06 - 00017754 _____ () C:\Users\Tim\Desktop\FRST.txt 2014-09-27 17:05 - 2014-09-27 17:05 - 00000000 ____D () C:\FRST 2014-09-27 17:04 - 2014-09-27 17:04 - 00000468 _____ () C:\Users\Tim\Desktop\defogger_disable.log 2014-09-27 17:04 - 2014-09-27 17:04 - 00000000 _____ () C:\Users\Tim\defogger_reenable 2014-09-27 17:02 - 2014-09-27 17:02 - 02108928 _____ (Farbar) C:\Users\Tim\Desktop\FRST64.exe 2014-09-27 17:02 - 2014-09-27 17:02 - 00380416 _____ () C:\Users\Tim\Desktop\Gmer-19357.exe 2014-09-27 17:02 - 2014-09-27 17:02 - 00050477 _____ () C:\Users\Tim\Desktop\Defogger.exe 2014-09-26 16:22 - 2014-09-26 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY 2014-09-26 15:49 - 2014-09-26 15:49 - 00001479 _____ () C:\Users\Tim\AppData\Local\recently-used.xbel 2014-09-25 16:27 - 2014-09-25 16:27 - 00002575 _____ () C:\Users\Tim\Desktop\Camtasia Studio.lnk 2014-09-24 17:12 - 2014-09-24 17:23 - 00000000 ____D () C:\Users\Tim\AppData\Local\Temporary Projects 2014-09-24 15:54 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-09-24 15:54 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-09-22 12:34 - 2014-09-22 12:34 - 00001373 _____ () C:\Users\Tim\Desktop\GeForce Experience.lnk 2014-09-21 21:49 - 2014-09-21 21:49 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-09-21 21:48 - 2014-09-13 22:13 - 00613696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-09-21 21:45 - 2014-09-17 06:51 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-09-21 21:45 - 2014-09-17 06:51 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 31887680 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 24552592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 20922512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 18106152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 14026304 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 13939272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 13157696 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-09-21 21:45 - 2014-09-14 01:48 - 11392576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 11330776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 04287296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 04008592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434411.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434411.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00957584 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00925896 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00919240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00894096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00867528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00501064 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00393024 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00348304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-09-21 21:45 - 2014-09-14 01:48 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-09-21 21:37 - 2014-09-04 21:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-09-21 21:37 - 2014-09-04 21:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-09-21 16:10 - 2014-09-21 16:14 - 00000000 ____D () C:\Users\Tim\Desktop\oma 2014-09-21 12:26 - 2014-09-21 12:26 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\java 2014-09-19 17:36 - 2014-09-19 17:36 - 00001237 _____ () C:\Users\Tim\Desktop\test.XML 2014-09-19 14:07 - 2014-09-19 14:09 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\FFsplit 2014-09-19 14:05 - 2014-09-19 14:05 - 00000999 _____ () C:\Users\Public\Desktop\FFsplit.lnk 2014-09-19 14:05 - 2014-09-19 14:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FFsplit 2014-09-19 14:05 - 2014-09-19 14:05 - 00000000 ____D () C:\Program Files (x86)\FFsplit 2014-09-19 13:40 - 2014-09-19 13:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit 2014-09-19 13:40 - 2014-09-19 13:40 - 00000000 ____D () C:\Program Files (x86)\SplitMediaLabs 2014-09-19 13:05 - 2014-09-19 13:05 - 00001909 _____ () C:\Users\Public\Desktop\LOL Recorder.lnk 2014-09-19 13:05 - 2014-09-19 13:05 - 00000000 ____D () C:\Program Files (x86)\LOLReplay 2014-09-18 21:40 - 2014-09-24 16:40 - 00000000 ____D () C:\Users\Tim\workspace 2014-09-18 21:37 - 2014-09-18 21:37 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-09-18 21:36 - 2014-09-18 21:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2014-09-18 21:28 - 2014-09-24 16:21 - 00000000 ____D () C:\Users\Tim\Desktop\eclipse 2014-09-16 18:04 - 2014-09-16 18:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-09-15 17:30 - 2014-09-15 17:30 - 00000000 ____D () C:\Users\Tim\AppData\Local\{501252E7-5C31-4C1E-B5FC-450EAF3F5593} 2014-09-15 16:39 - 2014-09-15 16:39 - 00000000 ____D () C:\Users\Tim\Desktop\gc 2014-09-11 14:45 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-11 14:45 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-11 14:45 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-11 14:45 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-11 14:45 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-11 14:45 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-11 14:45 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-11 14:45 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-11 14:45 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-11 14:45 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-11 14:45 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-11 14:45 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-11 14:45 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-11 14:45 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-11 14:45 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-11 14:45 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-11 14:45 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-11 14:45 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-11 14:45 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-11 14:45 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-11 14:45 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-09-11 14:45 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-11 14:45 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-11 14:45 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-11 14:45 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-11 14:45 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-09-11 14:45 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-09-11 14:45 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-11 14:45 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-11 14:45 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-11 14:45 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-11 14:45 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-11 14:45 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-11 14:45 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-09-11 14:45 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-11 14:45 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-09-11 14:45 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-11 14:45 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-11 14:45 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-11 14:45 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-11 14:45 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-09-11 14:45 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-09-11 14:45 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-11 14:45 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-11 14:45 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-11 14:45 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-11 14:45 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-11 14:45 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-11 14:45 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-11 14:45 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-11 14:45 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-09-11 14:45 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-11 14:45 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-11 14:45 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-11 14:45 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-11 14:45 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-09-11 14:36 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-11 14:36 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-09-11 11:36 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-11 11:36 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-09-11 11:36 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-11 11:35 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-11 11:35 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-11 11:35 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-11 11:35 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-11 11:35 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-09-11 11:35 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-09-11 11:35 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-09-11 11:35 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-08 14:53 - 1998-01-23 04:20 - 00305664 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe 2014-09-07 17:12 - 2014-09-07 17:12 - 00000000 ____D () C:\Users\Tim\Documents\Fax 2014-09-05 11:39 - 2014-09-05 11:43 - 00000000 ____D () C:\Users\Tim\Documents\My Recorded Scripts 2014-09-05 11:39 - 2014-09-05 11:41 - 00000000 ____D () C:\Users\Tim\AppData\Local\Nemex 2014-09-05 11:39 - 2014-09-05 11:39 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Mouse Recorder Pro 2014-09-05 11:39 - 2014-09-05 11:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mouse Recorder Pro 2 2014-09-05 11:39 - 2014-09-05 11:39 - 00000000 ____D () C:\Program Files (x86)\Nemex 2014-08-28 20:07 - 2014-09-23 17:26 - 00000000 ____D () C:\Users\Tim\Desktop\BOS 2014-08-28 20:07 - 2014-09-18 21:31 - 00000000 ____D () C:\Users\Tim\Desktop\Programmieren 2014-08-28 15:00 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-28 15:00 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-28 15:00 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-27 17:04 - 2012-06-07 08:16 - 00000000 ____D () C:\Users\Tim 2014-09-27 17:04 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-27 17:04 - 2009-07-14 06:45 - 00024800 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-27 17:00 - 2012-06-07 08:12 - 01472303 _____ () C:\Windows\WindowsUpdate.log 2014-09-27 16:56 - 2014-04-03 14:24 - 00053902 _____ () C:\Windows\setupact.log 2014-09-27 16:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-27 16:55 - 2013-02-16 20:54 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-09-27 16:49 - 2014-04-12 22:32 - 00000000 ____D () C:\Windows\pss 2014-09-27 16:49 - 2012-11-18 20:45 - 00000000 ___RD () C:\Users\Tim\Dropbox 2014-09-27 16:42 - 2012-06-14 20:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-27 16:40 - 2013-10-19 16:57 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3296676736-3360328921-4261957284-1000UA.job 2014-09-27 16:26 - 2012-11-18 20:44 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Dropbox 2014-09-27 15:46 - 2013-10-05 13:38 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins 2014-09-27 15:44 - 2014-07-30 21:02 - 00000000 ____D () C:\Users\Tim\AppData\Local\LogMeIn Hamachi 2014-09-27 15:40 - 2013-10-19 16:57 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3296676736-3360328921-4261957284-1000Core.job 2014-09-26 23:49 - 2012-09-28 19:19 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\TS3Client 2014-09-26 19:21 - 2014-04-04 15:04 - 00239820 _____ () C:\Windows\PFRO.log 2014-09-26 19:06 - 2011-05-16 16:04 - 00776218 _____ () C:\Windows\system32\perfh007.dat 2014-09-26 19:06 - 2011-05-16 16:04 - 00179744 _____ () C:\Windows\system32\perfc007.dat 2014-09-26 19:06 - 2009-07-14 07:13 - 01836810 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-26 19:03 - 2012-06-07 23:15 - 00000000 ____D () C:\Users\Tim\Desktop\hOVHLADEN 2014-09-26 16:28 - 2013-12-25 01:17 - 00000000 ____D () C:\Users\Tim\Documents\Movie Studio Platinum 12.0 Projekte 2014-09-26 16:22 - 2012-06-07 12:39 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-09-26 16:21 - 2014-04-12 22:20 - 00008226 _____ () C:\Windows\DPINST.LOG 2014-09-26 15:49 - 2013-10-19 14:43 - 00000000 ____D () C:\Users\Tim\AppData\Local\gtk-2.0 2014-09-26 15:49 - 2012-07-23 13:13 - 00000000 ____D () C:\Users\Tim\.gimp-2.8 2014-09-26 14:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-09-24 18:00 - 2012-06-23 21:56 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Audacity 2014-09-24 17:56 - 2012-06-18 19:57 - 00000000 ____D () C:\Users\Tim\Desktop\jhk 2014-09-24 17:23 - 2014-03-07 19:01 - 00000000 ____D () C:\Users\Tim\Documents\Visual Studio 2010 2014-09-24 16:42 - 2012-06-14 20:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-24 16:42 - 2012-06-14 20:00 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 16:42 - 2011-12-01 23:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-21 22:07 - 2014-03-08 21:10 - 00007634 _____ () C:\Users\Tim\AppData\Local\Resmon.ResmonCfg 2014-09-21 21:48 - 2013-02-16 21:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-09-21 21:48 - 2012-10-28 11:22 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-09-21 21:38 - 2013-02-16 20:52 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-09-21 20:40 - 2012-07-04 20:39 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Skype 2014-09-21 12:47 - 2012-06-07 15:26 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\.minecraft 2014-09-19 14:37 - 2014-08-19 22:44 - 00000000 ____D () C:\Users\Tim\Desktop\Sonstiges 2014-09-19 14:06 - 2012-09-15 19:16 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-09-19 13:40 - 2014-07-10 22:01 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-09-19 13:05 - 2014-07-28 01:02 - 00001921 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk 2014-09-19 12:35 - 2014-07-28 01:02 - 00000000 ____D () C:\Users\Tim\Documents\LOLReplay 2014-09-19 12:27 - 2012-11-18 20:44 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-09-18 21:37 - 2013-10-21 18:26 - 00000000 ____D () C:\ProgramData\Oracle 2014-09-18 21:37 - 2012-03-06 23:13 - 00000000 ____D () C:\Program Files\Java 2014-09-18 21:36 - 2013-10-21 17:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-09-17 18:19 - 2012-06-23 21:18 - 00000000 ____D () C:\Program Files\Unlocker 2014-09-17 16:47 - 2014-05-18 00:12 - 00000000 ____D () C:\Users\Tim\AppData\Local\Windows Live 2014-09-17 15:03 - 2014-07-06 00:19 - 00000000 ____D () C:\Program Files (x86)\WarThunder 2014-09-17 14:40 - 2011-07-18 23:07 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-09-17 06:51 - 2014-03-20 23:02 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-09-17 04:13 - 2014-07-26 12:32 - 02193560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-09-17 04:13 - 2014-07-26 12:32 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2014-09-17 04:12 - 2014-07-26 12:32 - 02799784 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-09-17 04:12 - 2014-07-26 12:32 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2014-09-16 18:04 - 2014-02-28 17:07 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-09-16 18:04 - 2012-07-04 20:39 - 00000000 ____D () C:\ProgramData\Skype 2014-09-16 13:57 - 2012-06-17 17:24 - 00000000 ____D () C:\Users\Tim\Desktop\Youtube 2014-09-15 09:06 - 2010-11-21 05:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-09-14 13:08 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-09-14 01:48 - 2014-07-02 17:03 - 19954520 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-09-14 01:48 - 2014-03-20 23:02 - 02838424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-09-14 01:48 - 2013-02-26 00:32 - 20589536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-09-14 01:48 - 2013-02-26 00:32 - 16875856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-09-14 01:48 - 2013-02-26 00:32 - 03223120 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-09-14 01:48 - 2013-02-26 00:32 - 00984424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-09-14 01:48 - 2013-02-16 20:53 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-09-14 01:48 - 2013-02-16 20:53 - 00026956 _____ () C:\Windows\system32\nvinfo.pb 2014-09-13 23:53 - 2013-02-16 20:54 - 06890696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-09-13 23:53 - 2013-02-16 20:54 - 03529872 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-09-13 23:53 - 2013-02-16 20:54 - 02557640 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-09-13 23:53 - 2013-02-16 20:54 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-09-13 23:53 - 2013-02-16 20:54 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-09-13 23:53 - 2013-02-16 20:54 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-09-11 17:37 - 2013-02-16 20:54 - 03961833 _____ () C:\Windows\system32\nvcoproc.bin 2014-09-11 14:45 - 2012-06-08 20:24 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-09-11 14:44 - 2012-09-02 01:34 - 01810154 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-09-11 14:43 - 2013-08-16 03:03 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 14:37 - 2011-07-18 22:31 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-11 14:36 - 2014-05-06 23:02 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-08 15:03 - 2012-08-26 19:08 - 00000000 ____D () C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-09-08 14:58 - 2013-01-15 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxis 2014-09-08 14:55 - 2013-01-14 22:50 - 00000000 ____D () C:\Program Files (x86)\Maxis 2014-09-07 10:03 - 2014-07-03 11:52 - 00000000 ____D () C:\Users\Tim\AppData\Local\Adobe 2014-09-04 21:14 - 2014-07-26 12:32 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-09-04 12:18 - 2013-04-29 21:33 - 00000000 ____D () C:\Users\Tim\Desktop\Entschuldigung 2014-08-29 14:36 - 2009-07-14 06:45 - 05258768 _____ () C:\Windows\system32\FNTCACHE.DAT Files to move or delete: ==================== C:\Users\Tim\DarkShot2.exe Some content of TEMP: ==================== C:\Users\Tim\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpswzm7n.dll C:\Users\Tim\AppData\Local\Temp\dxwebsetup.exe C:\Users\Tim\AppData\Local\Temp\GdiPlus.dll C:\Users\Tim\AppData\Local\Temp\InstallerMessageBox.exe C:\Users\Tim\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe C:\Users\Tim\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe C:\Users\Tim\AppData\Local\Temp\NPSInstallerProxy.exe C:\Users\Tim\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll C:\Users\Tim\AppData\Local\Temp\nsiEC73.tmp.exe C:\Users\Tim\AppData\Local\Temp\nsw2C31.tmp.exe C:\Users\Tim\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Tim\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\Tim\AppData\Local\Temp\nvStInst.exe C:\Users\Tim\AppData\Local\Temp\Quarantine.exe C:\Users\Tim\AppData\Local\Temp\s12glb3n.dll C:\Users\Tim\AppData\Local\Temp\safeguard.exe C:\Users\Tim\AppData\Local\Temp\SkypeSetup.exe C:\Users\Tim\AppData\Local\Temp\uuvr1zzu.dll C:\Users\Tim\AppData\Local\Temp\vcredist_x86.exe C:\Users\Tim\AppData\Local\Temp\vlc-2.1.3-win32.exe C:\Users\Tim\AppData\Local\Temp\vqpy5jfu.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-26 14:14 ==================== End Of Log ============================ |
Themen zu Windows 7: Pc Startet sehr langsam mit langem Blackscreen |
administrator, adobe flash player, combofix, fehlercode 0xc0000005, fehlercode 0xc000041d, fehlercode windows, firewall, flash player, grafikkarte, iexplore.exe, langsam, microsoft, security, services.exe, sicherheit, software, svchost.exe, this device cannot start. (code10), vcredist, windows, winlogon.exe |