|
Plagegeister aller Art und deren Bekämpfung: PC startet von selbst neu / Fehlermeldungen / Bluescreen.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
06.10.2014, 20:32 | #1 |
| PC startet von selbst neu / Fehlermeldungen / Bluescreen. Hallo, Seit heute Spinnt mein Pc extrem rum, heute im normalbetrieb kamen aufeinmal zig Fehlermeldungen, direkt danach versuchte er selbständing herunterzufahren. Als ich dann auf Abbrechen klickte kam ein Bluescreen. Nun kann ich ihn im Normalmodus garnicht mehr starten. entweder kommt ein Bluescreen oder er startet sofort neu/hängt sich auf. er braucht auch beim starten eine ewigkeit. Allein im Abgesichertem modus gehts so einigermaßen. Hoffentlich kann man das irgendwie hinbiegen. |
06.10.2014, 20:39 | #2 |
/// the machine /// TB-Ausbilder | PC startet von selbst neu / Fehlermeldungen / Bluescreen. hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
06.10.2014, 20:57 | #3 |
| PC startet von selbst neu / Fehlermeldungen / Bluescreen.FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-09-2014 Ran by cletze (administrator) on CLETZE-PC on 06-10-2014 21:13:06 Running from C:\Users\cletze\Desktop Loaded Profile: cletze (Available profiles: cletze) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Safe Mode (with Networking) Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2461504 2014-09-17] (NVIDIA Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7575768 2014-09-25] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-09-25] (Realtek Semiconductor) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.) HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe [10151688 2014-09-22] (Corsair Components, Inc.) HKLM-x32\...\RunOnce: [DXTempFolder] => rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\cletze\AppData\Local\Temp\DX26E2.tmp\" HKU\S-1-5-21-3258100427-268387496-3373938871-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600216 2014-09-19] (Electronic Arts) HKU\S-1-5-21-3258100427-268387496-3373938871-1000\...\Run: [Akamai NetSession Interface] => C:\Users\cletze\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.) HKU\S-1-5-21-3258100427-268387496-3373938871-1000\...\Run: [NvLedServiceHost] => C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe [86344 2014-09-17] () HKU\S-1-5-18\...\Run: [Advanced SystemCare 7] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA3100 Genie.lnk ShortcutTarget: NETGEAR WNA3100 Genie.lnk -> C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1A6005D34B82CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation) BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation) BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB) FF Plugin: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-14] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-14] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-14] Chrome: ======= CHR StartupUrls: Default -> "hxxp://google.at/" CHR Profile: C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-07] CHR Extension: (Google Drive) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-07] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06] CHR Extension: (Kaspersky Protection) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-06-14] CHR Extension: (YouTube) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-07] CHR Extension: (Last updated at $time$ on $date$) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-29] CHR Extension: (Google Search) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-07] CHR Extension: (Kaspersky URL Advisor) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-06-14] CHR Extension: (Google Wallet) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-07] CHR Extension: (Gmail) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-07] CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [] CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx [2013-10-17] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit) S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) S4 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation) S4 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation) S2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240576 2014-09-25] (DTS, Inc) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [614624 2014-09-02] (Futuremark) S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-09-17] (NVIDIA Corporation) S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2012-02-01] (Intel Corporation) [File not signed] S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit) S2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.) S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5268336 2014-03-25] (INCA Internet Co., Ltd.) S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-09-17] (NVIDIA Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-09-17] (NVIDIA Corporation) S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-02] () S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-10-06] () S2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [281688 2014-10-06] () S2 WSWNA3100; C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [307928 2013-11-11] () S2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2013-12-17] (Wacom Technology, Corp.) S2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-01-17] (Intel(R) Corporation) S2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49048 2014-09-25] (Asmedia Technology) R3 CorsairVBusDriver; C:\Windows\System32\DRIVERS\CorsairVBusDriver.sys [48296 2014-09-19] (Corsair) R3 CorsairVHidDriver; C:\Windows\System32\DRIVERS\CorsairVHidDriver.sys [22184 2014-09-19] (Corsair) S3 GPUZ; C:\Windows\TEMP\GPUZ.sys [27008 2014-09-29] () S2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-01-17] (Intel Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-14] (Kaspersky Lab ZAO) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-06-14] (Kaspersky Lab ZAO) S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-06-14] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO) S3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-06-14] (Kaspersky Lab ZAO) S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) S1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO) S1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-06-14] (Kaspersky Lab ZAO) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-10-02] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation) S3 NPF; C:\Windows\System32\DRIVERS\npf.sys [47632 2010-02-03] (CACE Technologies, Inc.) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-09-17] (NVIDIA Corporation) S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.) S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X] S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-06 21:13 - 2014-10-06 21:13 - 00000000 _____ () C:\Users\cletze\Desktop\FRST.txt 2014-10-06 14:15 - 2014-10-06 14:18 - 00000000 ____D () C:\Users\cletze\Desktop\paysafefails 2014-10-06 09:54 - 2014-10-06 20:40 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-10-06 09:54 - 2014-10-06 09:54 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-10-06 01:05 - 2014-10-06 01:05 - 00000232 _____ () C:\Users\Public\Desktop\Far Cry 3.url 2014-10-03 11:12 - 2014-10-03 11:12 - 00021988 _____ () C:\Users\cletze\Downloads\K95RGB.zip 2014-10-03 11:12 - 2014-09-09 11:13 - 00036152 _____ () C:\Users\cletze\Desktop\K95RGB_app112.bin 2014-10-03 11:11 - 2014-10-03 11:11 - 00000000 ____D () C:\Users\cletze\AppData\Local\Corsair 2014-10-03 11:08 - 2014-10-03 11:08 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Corsair 2014-10-03 11:08 - 2014-10-03 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Corsair Utility Engine 2014-10-03 11:08 - 2014-10-03 11:08 - 00000000 ____D () C:\Program Files (x86)\Corsair 2014-10-03 11:04 - 2014-10-03 11:07 - 47154981 _____ () C:\Users\cletze\Downloads\Corsair-Utility-Engine-v1.1.48.zip 2014-10-02 19:52 - 2014-10-02 19:52 - 00753688 _____ () C:\Windows\Minidump\100214-13431-01.dmp 2014-10-02 14:49 - 2014-10-06 20:58 - 525108190 _____ () C:\Windows\MEMORY.DMP 2014-10-02 11:56 - 2014-10-02 11:56 - 00000193 _____ () C:\Windows\WORDPAD.INI 2014-10-01 16:28 - 2014-10-01 16:40 - 96138664 _____ (Oracle Corporation) C:\Users\cletze\Downloads\jre-8u20-windows-x64.exe 2014-10-01 16:27 - 2014-10-01 16:27 - 00000000 ____D () C:\Windows\Sun 2014-10-01 16:27 - 2014-10-01 16:27 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Oracle 2014-10-01 16:25 - 2014-10-01 16:25 - 00918440 _____ (Oracle Corporation) C:\Users\cletze\Downloads\chromeinstall-7u67 (1).exe 2014-10-01 16:21 - 2014-10-01 16:21 - 00004361 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log 2014-10-01 16:20 - 2014-10-01 16:20 - 00918440 _____ (Oracle Corporation) C:\Users\cletze\Downloads\chromeinstall-7u67.exe 2014-10-01 15:50 - 2014-10-01 15:50 - 00000000 ____D () C:\Users\cletze\Desktop\Neuer Ordner (2) 2014-10-01 11:55 - 2014-10-06 16:30 - 00061930 _____ () C:\Windows\DirectX.log 2014-10-01 10:39 - 2014-10-01 10:39 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\089F5BA2.sys 2014-10-01 10:08 - 2014-10-06 21:09 - 00004471 _____ () C:\Windows\setupact.log 2014-10-01 10:08 - 2014-10-01 10:08 - 00000584 _____ () C:\Windows\PFRO.log 2014-10-01 10:08 - 2014-10-01 10:08 - 00000000 _____ () C:\Windows\setuperr.log 2014-10-01 10:02 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-10-01 10:02 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-09-29 20:01 - 2014-09-29 20:59 - 00000000 ____D () C:\Users\cletze\Valley 2014-09-29 20:01 - 2014-09-29 20:01 - 00002113 _____ () C:\Users\Public\Desktop\Valley Benchmark 1.0.lnk 2014-09-29 20:01 - 2014-09-29 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unigine 2014-09-29 20:00 - 2014-09-29 20:00 - 00000000 ____D () C:\Program Files (x86)\Unigine 2014-09-29 19:03 - 2014-09-29 19:36 - 358226169 _____ (Unigine Corp. ) C:\Users\cletze\Downloads\Unigine_Valley-1.0 (1).exe 2014-09-29 18:46 - 2014-09-29 19:02 - 178557748 _____ (Unigine Corp. ) C:\Users\cletze\Downloads\Unigine_Valley-1.0.exe 2014-09-28 15:53 - 2014-09-28 15:53 - 01424839 _____ () C:\Users\cletze\Downloads\FTool Extended.rar 2014-09-28 15:53 - 2008-12-29 21:29 - 00000000 ____D () C:\Users\cletze\Desktop\FTool Extended 2014-09-28 13:09 - 2014-10-06 20:40 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-09-28 12:50 - 2014-09-28 12:50 - 02347384 _____ (ESET) C:\Users\cletze\Downloads\esetsmartinstaller_deu.exe 2014-09-27 17:30 - 2014-09-27 17:30 - 00034477 _____ () C:\Users\cletze\Desktop\Addition.txt 2014-09-27 10:33 - 2014-09-27 10:33 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-09-27 10:33 - 2014-09-13 22:13 - 00613696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-09-27 10:32 - 2014-09-17 06:51 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-09-27 10:32 - 2014-09-17 06:51 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 31887680 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 24552592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 20922512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 19954520 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 14026304 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 13939272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 13157696 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-09-27 10:32 - 2014-09-14 01:48 - 11392576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 11330776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 04287296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 04008592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434411.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434411.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00957584 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00925896 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00919240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00894096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00867528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00501064 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00393024 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00348304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-09-26 22:18 - 2014-09-26 22:35 - 319671744 _____ (NVIDIA Corporation) C:\Users\cletze\Downloads\344.11-desktop-win8-win7-winvista-64bit-international-whql.exe 2014-09-26 21:32 - 2014-09-26 21:34 - 31646288 _____ (NVIDIA Corporation) C:\Users\cletze\Downloads\GeForce_Experience_v2.1.2.0.exe 2014-09-26 21:00 - 2014-09-26 21:02 - 01699118 _____ (Thisisu) C:\Users\cletze\Downloads\JRT.exe 2014-09-26 20:53 - 2014-09-26 20:53 - 00000000 ____D () C:\Windows\ERUNT 2014-09-26 20:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-09-26 20:48 - 2014-09-26 20:49 - 00000000 ____D () C:\AdwCleaner 2014-09-26 20:47 - 2014-09-26 20:48 - 01373475 _____ () C:\Users\cletze\Downloads\AdwCleaner_3.310.exe 2014-09-26 20:18 - 2014-10-02 19:53 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-26 20:18 - 2014-09-26 20:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-26 20:18 - 2014-09-26 20:18 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-26 20:18 - 2014-09-26 20:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-26 20:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-26 20:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-26 20:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-26 20:17 - 2014-09-26 20:17 - 00321848 _____ (Malwarebytes Corporation) C:\Users\cletze\Downloads\mbam-clean-2.1.1.1001 (1).exe 2014-09-26 20:14 - 2014-09-26 20:14 - 00321848 _____ (Malwarebytes Corporation) C:\Users\cletze\Downloads\mbam-clean-2.1.1.1001.exe 2014-09-26 15:49 - 2014-09-26 15:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\cletze\Downloads\mbam-setup-2.0.2.1012 (1).exe 2014-09-26 15:43 - 2014-09-26 15:45 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\cletze\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-26 15:17 - 2014-09-26 15:17 - 00014857 _____ () C:\Users\cletze\Downloads\Addition.txt 2014-09-26 15:16 - 2014-09-26 15:17 - 00055395 _____ () C:\Users\cletze\Downloads\FRST.txt 2014-09-26 15:13 - 2014-10-06 21:13 - 00000000 ____D () C:\FRST 2014-09-26 15:13 - 2014-09-26 15:13 - 02108928 _____ (Farbar) C:\Users\cletze\Desktop\FRST64.exe 2014-09-25 21:55 - 2014-09-25 21:55 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-09-25 21:51 - 2014-09-25 21:51 - 60636160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-09-25 21:51 - 2014-09-25 21:51 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 03962840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-09-25 21:51 - 2014-09-25 21:51 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02117424 _____ () C:\Windows\system32\SStudio.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-09-25 21:51 - 2014-09-25 21:51 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00494864 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1c62x64.sys 2014-09-25 21:51 - 2014-09-25 21:51 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00089888 _____ (Intel Corporation) C:\Windows\system32\NicInstC.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1cmsg.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00049048 _____ (Asmedia Technology) C:\Windows\system32\Drivers\asahci64.sys 2014-09-25 21:51 - 2014-09-25 21:51 - 00048736 _____ (Asmedia Technology) C:\Windows\system32\ahcipp64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00003114 _____ () C:\Windows\system32\e1c62x64.din 2014-09-25 21:42 - 2014-09-25 21:42 - 00002860 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (SYSTEM) 2014-09-24 18:16 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-09-24 18:16 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-09-19 09:19 - 2014-09-04 21:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-09-19 09:19 - 2014-09-04 21:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-09-19 08:34 - 2014-09-19 08:34 - 00048296 _____ (Corsair) C:\Windows\system32\Drivers\CorsairVBusDriver.sys 2014-09-19 08:34 - 2014-09-19 08:34 - 00022184 _____ (Corsair) C:\Windows\system32\Drivers\CorsairVHidDriver.sys 2014-09-18 23:26 - 2014-09-18 23:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-09-17 16:04 - 2014-09-17 16:04 - 00000000 ____D () C:\Users\cletze\Documents\3DMark 11 2014-09-17 16:00 - 2014-09-19 09:46 - 00001853 _____ () C:\Users\Public\Desktop\3DMark 11.lnk 2014-09-17 16:00 - 2014-09-17 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Futuremark 2014-09-17 16:00 - 2014-09-17 16:00 - 00000000 ____D () C:\Program Files\Futuremark 2014-09-17 15:41 - 2014-09-17 15:55 - 284180392 _____ (Futuremark Corporation) C:\Users\cletze\Downloads\3DMark_11_v105_installer.exe 2014-09-13 20:32 - 2014-09-13 20:32 - 00774931 _____ () C:\Users\cletze\Downloads\macrogamer_v275_setup.exe 2014-09-13 20:32 - 2014-09-13 20:32 - 00001031 _____ () C:\Users\cletze\Desktop\MacroGamer.lnk 2014-09-13 20:32 - 2014-09-13 20:32 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MacroGamer 2014-09-13 20:32 - 2014-09-13 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MacroGamer 2014-09-13 20:32 - 2014-09-13 20:32 - 00000000 ____D () C:\Program Files (x86)\MacroGamer 2014-09-13 20:30 - 2014-09-13 20:30 - 00146002 _____ () C:\Users\cletze\Downloads\MacroGamer_v275_Source.zip 2014-09-13 18:40 - 2014-09-13 18:40 - 00024051 _____ () C:\Users\cletze\Desktop\defineAttribute.h 2014-09-13 18:40 - 2014-09-13 18:40 - 00016959 _____ () C:\Users\cletze\Desktop\defineItemkind.h 2014-09-13 17:50 - 2014-09-13 17:51 - 1430399323 _____ () C:\Users\cletze\Downloads\Exult Flyff v2.exe 2014-09-11 16:09 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-11 16:09 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-11 16:09 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-11 16:09 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-11 16:09 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-11 16:09 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-11 16:09 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-11 16:09 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-11 16:09 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-11 16:09 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-11 16:09 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-11 16:09 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-11 16:09 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-11 16:09 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-11 16:09 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-11 16:09 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-11 16:09 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-11 16:09 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-11 16:09 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-11 16:09 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-11 16:09 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-09-11 16:09 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-11 16:09 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-11 16:09 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-11 16:09 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-11 16:09 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-09-11 16:09 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-09-11 16:09 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-11 16:09 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-11 16:09 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-11 16:09 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-11 16:09 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-11 16:09 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-11 16:09 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-09-11 16:09 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-11 16:09 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-09-11 16:09 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-11 16:09 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-11 16:09 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-11 16:09 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-11 16:09 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-09-11 16:09 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-09-11 16:09 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-11 16:09 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-11 16:09 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-11 16:09 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-11 16:09 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-11 16:09 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-11 16:09 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-11 16:09 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-11 16:09 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-09-11 16:09 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-11 16:09 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-11 16:09 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-11 16:09 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-11 16:09 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-09-10 23:06 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-10 23:06 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-09-10 22:53 - 2014-09-10 22:53 - 31766208 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\Windows-KB890830-x64-V5.16.exe 2014-09-10 22:53 - 2014-09-10 22:53 - 00292184 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\dxwebsetup.exe 2014-09-10 22:44 - 2014-09-10 22:44 - 02214544 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\DefaultPack.EXE 2014-09-10 22:01 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-10 22:01 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-10 22:01 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-10 22:01 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-09-10 22:01 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-10 22:01 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-10 22:01 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-09-10 22:01 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-09-10 22:01 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-09-10 22:01 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-10 22:01 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-10 15:01 - 2014-09-24 19:01 - 03675824 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-09-08 23:44 - 2014-09-08 23:44 - 00390716 _____ () C:\Users\cletze\Documents\ts3_clientui-win64-1394624943-2014-09-08 23_44_40.267660.dmp 2014-09-08 14:32 - 2014-09-08 14:33 - 01402920 _____ () C:\Users\cletze\Downloads\battlelog-web-plugins_2.5.1_149 (3).exe 2014-09-08 12:10 - 2014-09-19 10:17 - 00000000 ____D () C:\Users\cletze\Desktop\CrossFire EU 2014-09-08 12:10 - 2014-09-08 12:10 - 00000179 _____ () C:\console.log 2014-09-08 12:08 - 2014-09-08 12:08 - 02156048 _____ (Reloaded Technologies) C:\Users\cletze\Downloads\Crossfire_downloader.exe 2014-09-08 11:23 - 2014-09-19 09:45 - 00000000 ____D () C:\Users\cletze\Desktop\flyff files 2014-09-08 11:01 - 2014-09-08 11:01 - 00748246 _____ ( ) C:\Users\cletze\Downloads\reshack_setup.exe 2014-09-06 13:57 - 2014-09-06 13:58 - 01402920 _____ () C:\Users\cletze\Downloads\battlelog-web-plugins_2.5.1_149 (2).exe 2014-09-06 13:55 - 2014-09-06 13:55 - 01402920 _____ () C:\Users\cletze\Downloads\battlelog-web-plugins_2.5.1_149.exe 2014-09-06 13:55 - 2014-09-06 13:55 - 01402920 _____ () C:\Users\cletze\Downloads\battlelog-web-plugins_2.5.1_149 (1).exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-06 21:09 - 2014-06-14 14:40 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-10-06 21:09 - 2014-06-07 16:04 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-10-06 21:09 - 2014-06-07 15:29 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-10-06 21:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-10-06 20:43 - 2014-06-07 23:34 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Skype 2014-10-06 20:43 - 2014-06-07 15:29 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-10-06 20:27 - 2014-06-07 18:40 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-10-06 20:20 - 2014-06-07 15:42 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\TS3Client 2014-10-06 20:01 - 2014-06-07 14:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-10-06 15:13 - 2014-07-06 19:55 - 00000000 ____D () C:\Users\cletze\AppData\Local\PMB Files 2014-10-06 13:21 - 2014-06-07 16:10 - 00000000 ____D () C:\Program Files (x86)\Origin 2014-10-06 13:02 - 2009-07-14 06:45 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-10-06 13:02 - 2009-07-14 06:45 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-10-06 13:00 - 2011-04-12 09:43 - 00658824 _____ () C:\Windows\system32\perfh007.dat 2014-10-06 13:00 - 2011-04-12 09:43 - 00134702 _____ () C:\Windows\system32\perfc007.dat 2014-10-06 13:00 - 2009-07-14 07:13 - 01516610 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-10-06 12:57 - 2014-07-19 17:13 - 00000000 ____D () C:\Users\cletze\AppData\Local\LogMeIn Hamachi 2014-10-06 12:56 - 2014-06-07 14:16 - 02090771 _____ () C:\Windows\WindowsUpdate.log 2014-10-06 12:55 - 2014-08-17 08:09 - 00000000 ____D () C:\ProgramData\ProductData 2014-10-06 12:55 - 2014-06-25 23:56 - 00003026 _____ () C:\Windows\System32\Tasks\EVGAPrecision 2014-10-06 09:54 - 2014-06-08 14:35 - 00000000 ____D () C:\Users\cletze\Documents\My Games 2014-10-06 09:54 - 2014-06-07 22:39 - 00000000 ____D () C:\Users\cletze\AppData\Local\PunkBuster 2014-10-06 09:54 - 2014-06-07 18:40 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-10-06 09:28 - 2014-08-09 18:36 - 02128896 _____ () C:\Users\cletze\AppData\Local\file__0.localstorage 2014-10-05 23:10 - 2014-06-07 16:11 - 00000000 ____D () C:\ProgramData\Origin 2014-10-05 21:04 - 2014-06-07 19:03 - 00000000 ____D () C:\Program Files (x86)\osu! 2014-10-03 10:38 - 2014-08-17 08:09 - 00002133 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk 2014-10-03 00:46 - 2014-07-06 19:55 - 00000000 ____D () C:\ProgramData\PMB Files 2014-10-02 20:17 - 2014-06-25 20:45 - 00000000 ____D () C:\Program Files (x86)\EVGA Precision X 2014-10-02 19:52 - 2014-06-25 21:26 - 00000000 ____D () C:\Windows\Minidump 2014-10-01 16:27 - 2014-06-21 14:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-01 16:26 - 2014-06-21 14:39 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-29 20:01 - 2014-06-07 14:22 - 00000000 ____D () C:\Users\cletze 2014-09-29 14:28 - 2014-06-25 19:40 - 00000022 _____ () C:\Windows\GPU-Z.INI 2014-09-27 10:34 - 2014-06-25 20:52 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-09-27 10:33 - 2014-06-25 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-09-27 10:33 - 2014-06-07 16:04 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-09-27 10:33 - 2014-06-07 16:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-09-26 21:47 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-09-26 08:44 - 2014-07-04 22:40 - 00000000 ____D () C:\Users\cletze\Desktop\Flux Flyff Client 2014-09-25 21:51 - 2014-08-31 09:27 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-09-25 21:51 - 2014-08-31 09:26 - 01099203 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-09-25 21:42 - 2014-08-17 08:18 - 00001098 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-09-25 21:42 - 2014-08-17 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-09-25 20:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-09-25 18:48 - 2014-06-07 15:32 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-09-24 19:02 - 2014-06-07 14:29 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 19:01 - 2014-06-07 14:29 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-24 19:01 - 2014-06-07 14:29 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-23 22:17 - 2014-06-21 14:44 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\.minecraft 2014-09-18 23:26 - 2014-06-07 23:34 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-09-18 23:26 - 2014-06-07 23:34 - 00000000 ____D () C:\ProgramData\Skype 2014-09-17 16:03 - 2014-06-25 19:40 - 00000000 ____D () C:\Users\cletze\AppData\Local\Futuremark 2014-09-17 16:00 - 2014-06-07 14:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-09-17 15:29 - 2014-06-27 20:00 - 00000000 ____D () C:\Program Files (x86)\Futuremark 2014-09-17 15:29 - 2014-06-08 23:48 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-17 06:51 - 2014-06-07 16:02 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-09-17 04:10 - 2014-06-25 21:04 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2014-09-17 04:10 - 2014-06-25 21:04 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2014-09-17 04:10 - 2014-06-25 20:52 - 02799784 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-09-17 04:10 - 2014-06-25 20:52 - 02193560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-09-16 13:44 - 2014-08-11 23:27 - 00000000 ____D () C:\Users\cletze\Desktop\Exult Flyff v2 2014-09-15 09:06 - 2010-11-21 05:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-09-14 01:48 - 2014-07-06 15:19 - 18106152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-09-14 01:48 - 2014-06-07 16:04 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-09-14 01:48 - 2014-06-07 16:04 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-09-14 01:48 - 2014-06-07 16:02 - 20589536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-09-14 01:48 - 2014-06-07 16:02 - 16875856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-09-14 01:48 - 2014-06-07 16:02 - 03223120 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-09-14 01:48 - 2014-06-07 16:02 - 02838424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-09-14 01:48 - 2014-06-07 16:02 - 00984424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-09-14 01:48 - 2014-06-07 16:02 - 00026956 _____ () C:\Windows\system32\nvinfo.pb 2014-09-13 23:53 - 2014-06-07 16:04 - 06890696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-09-13 23:53 - 2014-06-07 16:04 - 03529872 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-09-13 23:53 - 2014-06-07 16:04 - 02557640 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-09-13 23:53 - 2014-06-07 16:04 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-09-13 23:53 - 2014-06-07 16:04 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-09-13 23:53 - 2014-06-07 16:04 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-09-11 17:37 - 2014-06-07 16:04 - 03961833 _____ () C:\Windows\system32\nvcoproc.bin 2014-09-11 16:07 - 2014-07-18 19:14 - 00000000 ____D () C:\Program Files (x86)\Razer 2014-09-10 23:06 - 2014-06-09 04:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-10 22:54 - 2014-07-20 07:14 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-09-10 22:53 - 2014-07-20 07:14 - 00000000 ___HD () C:\Windows\msdownld.tmp 2014-09-10 22:53 - 2014-06-25 19:40 - 00000000 ____D () C:\Temp 2014-09-09 23:14 - 2014-08-31 15:24 - 00000000 ____D () C:\Program Files\Webzen 2014-09-08 14:33 - 2014-06-07 18:41 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins 2014-09-08 11:01 - 2014-07-19 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resource Hacker 2014-09-08 11:01 - 2014-06-29 16:53 - 00007605 _____ () C:\Users\cletze\AppData\Local\Resmon.ResmonCfg 2014-09-06 13:56 - 2014-06-14 04:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield Hardline Beta ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-27 15:31 ==================== End Of Log ============================ |
07.10.2014, 20:24 | #4 |
/// the machine /// TB-Ausbilder | PC startet von selbst neu / Fehlermeldungen / Bluescreen. Fehlt noch die Addition.txt von FRST
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.10.2014, 16:18 | #5 |
| PC startet von selbst neu / Fehlermeldungen / Bluescreen.Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-09-2014 Ran by cletze at 2014-09-27 17:30:45 Running from C:\Users\cletze\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Anti-Virus (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Anti-Virus (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 3DMark 11 (HKLM-x32\...\{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}) (Version: 1.0.5 - Futuremark Corporation) 3DMark Demo (HKLM-x32\...\Steam App 231350) (Version: - Futuremark) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\{755DDD59-9690-4F1A-BE9C-D39BDCFA77C9}) (Version: 12.1.3.153 - Adobe Systems, Inc) Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.3.1 - IObit) Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc) Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft) Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.3825 - Electronic Arts) Battlefield™ Hardline Beta (HKLM-x32\...\{599276A7-F45D-40B1-A0B6-CF132A1CAD49}) (Version: 1.0.0.5 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB) Bing Bar (HKLM-x32\...\{16793295-2366-40F7-A045-A3E42A81365E}) (Version: 7.1.362.0 - Microsoft Corporation) CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.5 - IObit) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) EVGA OC Scanner X 3.5.0.2 (64-bit) (HKLM\...\{CC520CF6-B02E-49AA-8192-C1DDC159E0AA}}_is1) (Version: - EVGA) EVGA Precision X 4.2.1 (HKLM-x32\...\PrecisionX) (Version: 4.2.1 - EVGA Corporation) Flyff (HKLM-x32\...\{4DBCA6DE-6F3E-44A9-8CF2-863525AC1A33}_is1) (Version: Flyff - Gala-Net) Flyff (HKLM-x32\...\{7E210E1C-52A1-40E3-817B-D504E9F64DFA}_is1) (Version: Flyff - WEBZEN Inc) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Futuremark SystemInfo (HKLM-x32\...\{E114E635-F06E-43B4-A800-74A22536B1B0}) (Version: 4.30.472.0 - Futuremark) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Intel Extreme Tuning Utility (HKLM-x32\...\{7f636816-2460-4ae7-92ee-e56ddfdff3b0}) (Version: 4.3.0.11 - Intel Corporation) Intel Extreme Tuning Utility (x32 Version: 4.3.0.11 - Intel Corporation) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.10.1658 - Intel Corporation) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\3FD0C489-0F02-481a-A3E1-9754CD396761) (Version: - Intel Corporation) Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle) Java 8 Update 5 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418005FF}) (Version: 8.0.50 - Oracle Corporation) Java 8 Update 5 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218005FF}) (Version: 8.0.50 - Oracle Corporation) Java Auto Updater (x32 Version: 2.8.05.13 - Oracle, Inc.) Hidden Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab) Kaspersky Anti-Virus (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.227 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.227 - LogMeIn, Inc.) Hidden MacroGamer 2.7.5 (HKLM-x32\...\MacroGamer) (Version: - ) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{26784146-6E05-3FF9-9335-786C7C0FB5BE}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM-x32\...\{3F7D7ED5-979A-4F96-AE25-DDA54B3E2D2B}) (Version: 10.0.1794.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (x32 Version: 3.5.8080.0 - Microsoft Corporation) Hidden Microsoft SQL Server Compact 3.5 SP2 x64 ENU (Version: 3.5.8080.0 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60830 (HKLM-x32\...\{c7ed0d4c-89c5-47fc-9e89-1088affe63f3}) (Version: 11.0.60830.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60830 (Version: 11.0.60830 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60830 (Version: 11.0.60830 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728 - Microsoft Corporation) Hidden Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts) NETGEAR WNA3100 wireless USB 2.0 adapter (HKLM-x32\...\{C2425F91-1F7B-4037-9A05-9F290184798D}) (Version: 2.2.0.2 - NETGEAR) No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 4.1.0 - Vitalwerks Internet Solutions LLC) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.7 - Notepad++ Team) NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation) NVIDIA GeForce Experience Service (Version: 16.13.42 - NVIDIA Corporation) Hidden NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.162.1274 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 2.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.14.0702 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) NVIDIA ShadowPlay 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 344.11 (Version: 344.11 - NVIDIA Corporation) Hidden NVIDIA Update 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 16.13.42 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.25 (Version: 1.2.25 - NVIDIA Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.) osu! (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.) Resource Hacker Version 3.6.0 (HKLM-x32\...\ResourceHacker_is1) (Version: - ) SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation) Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.2 - IObit) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit) TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH) Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.3-2 - Wacom Technology Corp.) Warsow 1.51 (HKLM-x32\...\{24508D50-EB8F-4FE6-B69D-E5035D8745EF}_is1) (Version: 1.51 - Chasseur de bots) Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft) WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.) WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.) WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH) WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E3}) (Version: 18.5.11111 - WinZip Computing, S.L. ) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-3258100427-268387496-3373938871-1000_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) ==================== Restore Points ========================= 26-09-2014 15:35:39 Windows Update 26-09-2014 15:36:51 Removed League of Legends 26-09-2014 15:37:05 Removed Google Talk Plugin 26-09-2014 15:37:17 Removed MoodTuner 26-09-2014 15:37:29 Steam wird entfernt 26-09-2014 15:40:36 Removed Razer Mamba. 26-09-2014 15:47:47 Windows Update 27-09-2014 08:33:53 DirectX wurde installiert ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2014-07-06 15:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {115AE9C3-3A00-433B-970D-286534A9EE85} - System32\Tasks\{CF9E17B1-47CA-4DB7-BC2F-8874369179F4} => C:\Program Files\Futuremark\3DMark 11\bin\x64\3DMark11.exe Task: {33A3E045-FEB1-4B37-9965-7D6B104B9E97} - System32\Tasks\{DECB2AC6-7DD4-4CF3-9023-ABCDB2C8BA17} => C:\Program Files\Futuremark\3DMark 11\bin\x64\3DMark11.exe Task: {449F3AFD-118D-4F5D-8EDF-C91CF3CA2FFC} - System32\Tasks\EVGAPrecision => C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe [2013-07-18] () Task: {461991F5-6591-4137-B7C4-C3E3A97A4AF7} - System32\Tasks\{07F85F04-850C-4AB1-9287-75B3756E4771} => C:\Program Files\Futuremark\3DMark 11\bin\x64\3DMark11.exe Task: {59AD9BB5-EA9B-4686-9C2B-B32838EF6621} - System32\Tasks\Driver Booster SkipUAC (SYSTEM) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-08-06] (IObit) Task: {5B10CBC3-4412-4D78-B342-90B384ABA888} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-07] (Google Inc.) Task: {6A51ACEB-73D2-4A24-B221-535F8F781A1C} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {7FE2861F-4266-43D2-9E6B-ADDC68E6AD5B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated) Task: {91C8E749-0231-4979-B98C-C126297041BC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-07] (Google Inc.) Task: {9B55FC84-E7CF-4D30-952A-761ECD2792F8} - System32\Tasks\Driver Booster SkipUAC (cletze) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-08-06] (IObit) Task: {DBECB46D-15DB-4230-AE44-791B42EE60CC} - System32\Tasks\{536E6D96-7E71-4615-B860-4E67B3F73774} => C:\Users\cletze\Downloads\DragonCross2014.exe Task: {E074E4EA-289B-4118-86CE-58C8094C25CB} - System32\Tasks\ASC7_SkipUac_cletze => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-05-29] (IObit) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-06-29 10:11 - 2014-08-02 21:31 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe 2014-06-07 14:25 - 2013-11-22 19:34 - 08266456 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe 2014-08-31 12:52 - 2013-11-11 15:10 - 00307928 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe 2014-06-07 19:11 - 2013-12-17 03:17 - 01356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll 2014-05-03 00:55 - 2014-05-03 00:55 - 00346624 _____ () C:\Program Files (x86)\No-IP\DUC40.exe 2014-06-07 16:04 - 2014-09-13 23:53 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-08-31 15:29 - 2014-08-31 15:29 - 00745472 _____ () C:\Program Files\Webzen\FlyFF\Flyff.exe 2014-08-17 08:09 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll 2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\dblite.dll 2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\kpcengine.2.3.dll 2014-06-07 14:25 - 2013-11-01 17:31 - 00278528 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvcLib.dll 2014-08-31 12:52 - 2013-10-30 19:06 - 00380928 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WifiLib.dll 2014-05-03 00:55 - 2014-05-03 00:55 - 00071680 _____ () C:\Program Files (x86)\No-IP\ducapi.dll 2014-09-25 18:48 - 2014-09-23 06:06 - 01098056 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libglesv2.dll 2014-09-25 18:48 - 2014-09-23 06:06 - 00174408 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libegl.dll 2014-09-25 18:48 - 2014-09-23 06:07 - 08577864 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll 2014-09-25 18:48 - 2014-09-23 06:07 - 00331592 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll 2014-09-25 18:48 - 2014-09-23 06:06 - 01660232 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ffmpegsumo.dll 2014-09-25 18:48 - 2014-09-23 06:07 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\Services: BDESVC => 3 MSCONFIG\Services: BITS => 3 MSCONFIG\Services: c2cautoupdatesvc => 2 MSCONFIG\Services: c2cpnrsvc => 2 MSCONFIG\Services: CertPropSvc => 3 MSCONFIG\Services: COMSysApp => 3 MSCONFIG\Services: defragsvc => 3 MSCONFIG\Services: EFS => 3 MSCONFIG\Services: ehRecvr => 3 MSCONFIG\Services: ehSched => 3 MSCONFIG\Services: Fax => 3 MSCONFIG\Services: fdPHost => 3 MSCONFIG\Services: FDResPub => 3 MSCONFIG\Services: FontCache => 2 MSCONFIG\Services: FontCache3.0.0.0 => 3 MSCONFIG\Services: Futuremark SystemInfo Service => 3 MSCONFIG\Services: Hamachi2Svc => 2 MSCONFIG\Services: IPBusEnum => 3 MSCONFIG\Services: PNRPAutoReg => 3 MSCONFIG\Services: PNRPsvc => 3 MSCONFIG\Services: PolicyAgent => 3 MSCONFIG\Services: SNMPTRAP => 3 MSCONFIG\Services: Spooler => 2 MSCONFIG\Services: sppuinotify => 3 MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\Services: SysMain => 3 MSCONFIG\Services: TeamViewer9 => 2 ========================= Accounts: ========================== Administrator (S-1-5-21-3258100427-268387496-3373938871-500 - Disabled - Status: Degraded) cletze (S-1-5-21-3258100427-268387496-3373938871-1000 - Enabled - Status: OK) => C:\Users\cletze Gast (S-1-5-21-3258100427-268387496-3373938871-501 - Disabled - Status: Degraded) ==================== Faulty Device Manager Devices ============= Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: USB (Universal Serial Bus)-Controller Description: USB (Universal Serial Bus)-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (09/27/2014 03:32:01 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (09/27/2014 10:33:54 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System Error: Falscher Parameter. . Error: (09/27/2014 10:33:23 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (09/27/2014 10:33:23 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (09/27/2014 10:33:08 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (09/27/2014 10:33:08 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (09/27/2014 10:30:52 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (09/27/2014 10:13:04 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/27/2014 10:11:28 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (09/27/2014 10:11:28 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. System errors: ============= Error: (09/27/2014 00:58:12 PM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 00:58:12 PM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 00:58:12 PM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 00:58:12 PM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 00:58:12 PM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 10:37:41 AM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 10:37:41 AM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 10:37:41 AM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 10:37:41 AM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/27/2014 10:37:41 AM) (Source: atapi) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Microsoft Office Sessions: ========================= Error: (09/27/2014 03:32:01 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe Error: (09/27/2014 10:33:54 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System Error: Falscher Parameter. Error: (09/27/2014 10:33:23 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exeC:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe.Config0 Error: (09/27/2014 10:33:23 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exeC:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe.Config0 Error: (09/27/2014 10:33:08 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exeC:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe.Config0 Error: (09/27/2014 10:33:08 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exeC:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe.Config0 Error: (09/27/2014 10:30:52 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exeC:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe.Config0 Error: (09/27/2014 10:13:04 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/27/2014 10:11:28 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exeC:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe.Config0 Error: (09/27/2014 10:11:28 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exeC:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe.Config0 CodeIntegrity Errors: =================================== Date: 2014-09-27 15:32:07.304 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-27 15:32:07.304 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-27 15:32:07.304 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-27 15:32:07.294 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-27 15:32:07.294 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-27 15:32:07.294 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-27 15:32:07.294 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-27 15:32:07.294 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-27 15:32:07.284 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-09-25 21:10:52.596 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz Percentage of memory in use: 17% Total physical RAM: 16325.9 MB Available physical RAM: 13532.46 MB Total Pagefile: 32649.98 MB Available Pagefile: 29223.52 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:232.79 GB) (Free:6.93 GB) NTFS Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive e: (SSD_WIN7) (Fixed) (Total:119.14 GB) (Free:46.36 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 18994658) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: CA676AD4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
09.10.2014, 10:51 | #6 |
/// the machine /// TB-Ausbilder | PC startet von selbst neu / Fehlermeldungen / Bluescreen. hi, Scan mit Combofix
__________________ --> PC startet von selbst neu / Fehlermeldungen / Bluescreen. |
09.10.2014, 16:32 | #7 |
| PC startet von selbst neu / Fehlermeldungen / Bluescreen.Code:
ATTFilter ComboFix 14-10-04.01 - cletze 09.10.2014 17:26:05.2.8 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.43.1031.18.16326.13001 [GMT 2:00] ausgeführt von:: c:\users\cletze\Downloads\ComboFix.exe AV: Kaspersky Anti-Virus *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886} SP: Kaspersky Anti-Virus *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Vorheriger Suchlauf ------- . c:\users\cletze\AppData\Roaming\Microsoft\Windows\Recent\Assassin's Creed IV Black Flag.url c:\windows\SysWow64\g c:\windows\SysWow64\Packet.dll c:\windows\SysWow64\pthreadVC.dll c:\windows\SysWow64\wpcap.dll . . ((((((((((((((((((((((( Dateien erstellt von 2014-09-09 bis 2014-10-09 )))))))))))))))))))))))))))))) . . 2014-10-09 15:29 . 2014-10-09 15:29 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-10-09 15:25 . 2014-10-09 15:25 330 ----a-w- C:\Start_.cmd 2014-10-08 06:03 . 2014-09-09 02:05 11578928 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{147ED5EB-C688-4586-9630-DB1CB08771A3}\mpengine.dll 2014-10-06 07:54 . 2014-10-09 11:06 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2014-10-03 09:11 . 2014-10-03 09:11 -------- d-----w- c:\users\cletze\AppData\Local\Corsair 2014-10-03 09:08 . 2014-10-03 09:08 -------- d-----w- c:\users\cletze\AppData\Roaming\Corsair 2014-10-03 09:08 . 2014-10-03 09:08 -------- d-----w- c:\program files (x86)\Corsair 2014-10-01 14:27 . 2014-10-01 14:27 -------- d-----w- c:\users\cletze\AppData\Roaming\Oracle 2014-10-01 14:27 . 2014-10-01 14:27 -------- d-----w- c:\windows\Sun 2014-10-01 08:39 . 2014-10-01 08:39 122584 ----a-w- c:\windows\system32\drivers\089F5BA2.sys 2014-10-01 08:02 . 2014-09-25 02:08 371712 ----a-w- c:\windows\system32\qdvd.dll 2014-10-01 08:02 . 2014-09-25 01:40 519680 ----a-w- c:\windows\SysWow64\qdvd.dll 2014-09-29 18:01 . 2014-09-29 18:59 -------- d-----w- c:\users\cletze\Valley 2014-09-29 18:00 . 2014-09-29 18:00 -------- d-----w- c:\program files (x86)\Unigine 2014-09-28 11:09 . 2014-10-09 11:06 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2014-09-27 08:33 . 2014-09-27 08:33 -------- d-----w- c:\program files (x86)\AGEIA Technologies 2014-09-27 08:33 . 2014-09-13 20:13 613696 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2014-09-26 18:53 . 2014-09-26 18:53 -------- d-----w- c:\windows\ERUNT 2014-09-26 18:49 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll 2014-09-26 18:48 . 2014-09-26 18:49 -------- d-----w- C:\AdwCleaner 2014-09-26 18:18 . 2014-10-02 17:53 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys 2014-09-26 18:18 . 2014-05-12 05:26 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2014-09-26 18:18 . 2014-09-26 18:18 -------- d-----w- c:\program files (x86)\ Malwarebytes Anti-Malware 2014-09-26 18:18 . 2014-09-26 18:18 -------- d-----w- c:\programdata\Malwarebytes 2014-09-26 18:18 . 2014-05-12 05:26 63704 ----a-w- c:\windows\system32\drivers\mwac.sys 2014-09-26 18:18 . 2014-05-12 05:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys 2014-09-26 13:13 . 2014-10-06 19:13 -------- d-----w- C:\FRST 2014-09-25 19:55 . 2014-09-25 19:55 -------- d-----w- c:\windows\SysWow64\RTCOM 2014-09-24 16:16 . 2014-09-09 22:11 2048 ----a-w- c:\windows\system32\tzres.dll 2014-09-24 16:16 . 2014-09-09 21:47 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2014-09-19 07:19 . 2014-09-04 19:14 38048 ----a-w- c:\windows\system32\drivers\nvvad64v.sys 2014-09-19 07:19 . 2014-09-04 19:14 32416 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll 2014-09-19 06:34 . 2014-09-19 06:34 48296 ----a-w- c:\windows\system32\drivers\CorsairVBusDriver.sys 2014-09-19 06:34 . 2014-09-19 06:34 22184 ----a-w- c:\windows\system32\drivers\CorsairVHidDriver.sys 2014-09-18 21:26 . 2014-09-18 21:26 -------- d-----w- c:\program files (x86)\Common Files\Skype 2014-09-17 14:00 . 2014-09-17 14:00 -------- d-----w- c:\program files\Futuremark 2014-09-13 18:32 . 2014-09-13 18:32 -------- d-----w- c:\program files (x86)\MacroGamer 2014-09-10 21:06 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll 2014-09-10 21:06 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll 2014-09-10 20:53 . 2014-09-10 20:53 -------- d-----w- c:\program files (x86)\Microsoft 2014-09-10 20:01 . 2014-08-01 11:53 1031168 ----a-w- c:\windows\system32\TSWorkspace.dll 2014-09-10 20:01 . 2014-08-01 11:35 793600 ----a-w- c:\windows\SysWow64\TSWorkspace.dll 2014-09-10 20:01 . 2014-06-24 03:29 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2014-09-10 20:01 . 2014-06-24 02:59 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll 2014-09-10 20:01 . 2014-07-07 02:06 728064 ----a-w- c:\windows\system32\kerberos.dll 2014-09-10 20:01 . 2014-07-07 02:06 1460736 ----a-w- c:\windows\system32\lsasrv.dll 2014-09-10 20:01 . 2014-07-07 01:40 22016 ----a-w- c:\windows\SysWow64\secur32.dll 2014-09-10 20:01 . 2014-07-07 01:40 550912 ----a-w- c:\windows\SysWow64\kerberos.dll 2014-09-10 20:01 . 2014-07-07 01:39 96768 ----a-w- c:\windows\SysWow64\sspicli.dll 2014-09-10 20:01 . 2014-09-05 02:10 578048 ----a-w- c:\windows\system32\aepdu.dll 2014-09-10 20:01 . 2014-09-05 02:05 424448 ----a-w- c:\windows\system32\aeinv.dll 2014-09-10 13:01 . 2014-09-24 17:01 3675824 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-10-09 07:38 . 2014-06-07 16:40 281688 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2014-10-08 07:38 . 2014-06-29 08:11 76152 ----a-w- c:\windows\system32\PnkBstrA.exe 2014-10-06 07:54 . 2014-06-07 16:40 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2014-09-24 17:01 . 2014-06-07 12:29 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-09-24 17:01 . 2014-06-07 12:29 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-09-17 04:51 . 2014-06-07 14:02 1538880 ----a-w- c:\windows\system32\nvhdagenco6420103.dll 2014-09-17 02:10 . 2014-06-25 19:04 1291280 ----a-w- c:\windows\SysWow64\nvspbridge.dll 2014-09-17 02:10 . 2014-06-25 18:52 2193560 ----a-w- c:\windows\SysWow64\nvspcap.dll 2014-09-17 02:10 . 2014-06-25 19:04 1715224 ----a-w- c:\windows\system32\nvspbridge64.dll 2014-09-17 02:10 . 2014-06-25 18:52 2799784 ----a-w- c:\windows\system32\nvspcap64.dll 2014-09-15 07:06 . 2010-11-21 03:27 278152 ------w- c:\windows\system32\MpSigStub.exe 2014-09-13 23:48 . 2014-07-06 13:19 18106152 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2014-09-13 23:48 . 2014-06-07 14:04 73872 ----a-w- c:\windows\system32\OpenCL.dll 2014-09-13 23:48 . 2014-06-07 14:04 60560 ----a-w- c:\windows\SysWow64\OpenCL.dll 2014-09-13 23:48 . 2014-06-07 14:02 984424 ----a-w- c:\windows\system32\nvumdshimx.dll 2014-09-13 23:48 . 2014-06-07 14:02 3223120 ----a-w- c:\windows\system32\nvapi64.dll 2014-09-13 23:48 . 2014-06-07 14:02 2838424 ----a-w- c:\windows\SysWow64\nvapi.dll 2014-09-13 23:48 . 2014-06-07 14:02 20589536 ----a-w- c:\windows\system32\nvwgf2umx.dll 2014-09-13 23:48 . 2014-06-07 14:02 16875856 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2014-09-13 21:53 . 2014-06-07 14:04 6890696 ----a-w- c:\windows\system32\nvcpl.dll 2014-09-13 21:53 . 2014-06-07 14:04 3529872 ----a-w- c:\windows\system32\nvsvc64.dll 2014-09-13 21:53 . 2014-06-07 14:04 934216 ----a-w- c:\windows\system32\nvvsvc.exe 2014-09-13 21:53 . 2014-06-07 14:04 62608 ----a-w- c:\windows\system32\nvshext.dll 2014-09-13 21:53 . 2014-06-07 14:04 385168 ----a-w- c:\windows\system32\nvmctray.dll 2014-09-13 21:53 . 2014-06-07 14:04 2557640 ----a-w- c:\windows\system32\nvsvcr.dll 2014-09-11 15:37 . 2014-06-07 14:04 3961833 ----a-w- c:\windows\system32\nvcoproc.bin 2014-09-04 19:14 . 2014-06-25 18:33 34976 ----a-w- c:\windows\system32\nvaudcap64v.dll 2014-08-29 11:01 . 2014-06-09 10:22 101694776 ----a-w- c:\windows\system32\MRT.exe 2014-08-23 02:07 . 2014-08-28 11:48 404480 ----a-w- c:\windows\system32\gdi32.dll 2014-08-23 01:45 . 2014-08-28 11:48 311808 ----a-w- c:\windows\SysWow64\gdi32.dll 2014-08-23 00:59 . 2014-08-28 11:48 3163648 ----a-w- c:\windows\system32\win32k.sys 2014-07-22 22:12 . 2014-07-22 22:12 875680 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll 2014-07-22 19:10 . 2014-07-22 19:10 869536 ----a-w- c:\windows\system32\msvcr120_clr0400.dll 2014-07-20 07:01 . 2014-07-20 07:01 313256 ----a-w- c:\windows\system32\javaws.exe 2014-07-20 07:01 . 2014-07-20 07:01 191400 ----a-w- c:\windows\system32\javaw.exe 2014-07-20 07:01 . 2014-07-20 07:01 190888 ----a-w- c:\windows\system32\java.exe 2014-07-20 07:01 . 2014-07-20 07:01 111016 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll 2014-07-20 07:01 . 2014-06-21 12:40 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2014-07-14 02:02 . 2014-08-14 11:14 1216000 ----a-w- c:\windows\system32\rpcrt4.dll 2014-07-14 01:40 . 2014-08-14 11:14 664064 ----a-w- c:\windows\SysWow64\rpcrt4.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "EADM"="c:\program files (x86)\Origin\Origin.exe" [2014-09-19 3600216] "Akamai NetSession Interface"="c:\users\cletze\AppData\Local\Akamai\netsession_win.exe" [2014-04-17 4672920] "NvLedServiceHost"="c:\program files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe" [2014-09-17 86344] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-07-21 3816784] "Corsair Utility Engine"="c:\program files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe" [2014-09-22 10151688] "IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2014-05-23 1601856] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Advanced SystemCare 7"="c:\program files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" [2014-04-21 2295584] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ NETGEAR WNA3100 Genie.lnk - c:\program files (x86)\NETGEAR\WNA3100\WNA3100.exe [2014-6-7 8266456] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice] @="Service" . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x] R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [x] R2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R2 WSWNA3100;WSWNA3100;c:\program files (x86)\NETGEAR\WNA3100\WifiSvc.exe;c:\program files (x86)\NETGEAR\WNA3100\WifiSvc.exe [x] R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe [x] R3 cpuz136;cpuz136;c:\windows\TEMP\cpuz136\cpuz136_x64.sys;c:\windows\TEMP\cpuz136\cpuz136_x64.sys [x] R3 cpuz137;cpuz137;c:\windows\TEMP\cpuz137\cpuz137_x64.sys;c:\windows\TEMP\cpuz137\cpuz137_x64.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\SystemInfo\FMSISvc.exe [x] R3 GPUZ;GPUZ;c:\windows\TEMP\GPUZ.sys;c:\windows\TEMP\GPUZ.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x] R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x] R4 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x] R4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x] R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys;c:\windows\SYSNATIVE\DRIVERS\klflt.sys [x] S0 asahci64;asahci64;c:\windows\system32\DRIVERS\asahci64.sys;c:\windows\SYSNATIVE\DRIVERS\asahci64.sys [x] S0 SCMNdisP;General NDIS Protocol Driver;c:\windows\system32\DRIVERS\scmndisp.sys;c:\windows\SYSNATIVE\DRIVERS\scmndisp.sys [x] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x] S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x] S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [x] S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe [x] S2 DTSAudioSvc;DTSAudioSvc;c:\program files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe;c:\program files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [x] S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x] S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [x] S2 iocbios2;iocbios2;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [x] S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 WTabletServiceCon;Wacom Consumer Service;c:\program files\Tablet\Pen\WTabletServiceCon.exe;c:\program files\Tablet\Pen\WTabletServiceCon.exe [x] S2 XTU3SERVICE;Intel(R) Extreme Tuning Utility Service;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [x] S3 BCMH43XX;Treiber für Broadcom 802.11-USB-Netzwerkadapter;c:\windows\system32\DRIVERS\bcmwlhigh664.sys;c:\windows\SYSNATIVE\DRIVERS\bcmwlhigh664.sys [x] S3 CorsairVBusDriver;Corsair Bus;c:\windows\system32\DRIVERS\CorsairVBusDriver.sys;c:\windows\SYSNATIVE\DRIVERS\CorsairVBusDriver.sys [x] S3 CorsairVHidDriver;Corsair virtual device;c:\windows\system32\DRIVERS\CorsairVHidDriver.sys;c:\windows\SYSNATIVE\DRIVERS\CorsairVHidDriver.sys [x] S3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x] S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x] S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x] S3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-09-25 16:44 1096520 ----a-w- c:\program files (x86)\Google\Chrome\Application\37.0.2062.124\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2014-10-09 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-07 17:02] . 2014-10-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-07 13:29] . 2014-10-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-07 13:29] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-09-17 2799784] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-09-17 2461504] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2014-09-25 7575768] "RtHDVBg_DTS"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2014-09-25 1387376] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = <-loopback>;;localhost;127.0.0.1;<local> TCP: DhcpNameServer = 10.0.0.138 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . AddRemove-ResourceHacker_is1 - c:\program files (x86)\Resource Hacker\unins000.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,07,93,3f,13,09,d2,27,40,bf,39,31,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,07,93,3f,13,09,d2,27,40,bf,39,31,\ . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}] @Denied: (A 2) (Everyone) @="IFlashBroker6" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.15" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}] @Denied: (A 2) (Everyone) @="IFlashBroker6" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-10-09 17:31:10 ComboFix-quarantined-files.txt 2014-10-09 15:31 . Vor Suchlauf: 21 Verzeichnis(se), 13.236.699.136 Bytes frei Nach Suchlauf: 22 Verzeichnis(se), 13.056.557.056 Bytes frei . - - End Of File - - 19CCCC286A5ED30E9EE93434691EB348 A36C5E4F47E84449FF07ED3517B43A31 |
10.10.2014, 11:39 | #8 |
/// the machine /// TB-Ausbilder | PC startet von selbst neu / Fehlermeldungen / Bluescreen. Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
10.10.2014, 14:24 | #9 |
| PC startet von selbst neu / Fehlermeldungen / Bluescreen. Malwarebytes will bei mir nicht starten... habs nochmal deinstalliert und so. geht aber trotzdem auch nach einem Neustart nicht |
11.10.2014, 11:28 | #10 |
/// the machine /// TB-Ausbilder | PC startet von selbst neu / Fehlermeldungen / Bluescreen. Dann lass MBAM weg
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.10.2014, 17:33 | #11 |
| PC startet von selbst neu / Fehlermeldungen / Bluescreen. Sorry war die letzten 10 tage nicht da. Hier der Inhalt der txt Dateien. Code:
ATTFilter # AdwCleaner v4.001 - Bericht erstellt am 21/10/2014 um 18:24:05 # DB v2014-10-20.3 # Aktualisiert 20/10/2014 von Xplode # Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits) # Benutzername : cletze - CLETZE-PC # Gestartet von : C:\Users\cletze\Downloads\AdwCleaner_4.001.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\hotspot shield ***** [ Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{06E58E5E-F8CB-4049-991E-A41C03BD419E} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{43D9E6F0-1776-4897-AE14-ECEDECBAFEC0} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5A074B29-F830-49DE-A31B-5BB9D7F6B407} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{C451C08A-EC37-45DF-AAAD-18B51AB5E837} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{DCC70A83-E184-40A3-906B-779AF5E941C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{06E58E5E-F8CB-4049-991E-A41C03BD419E} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{43D9E6F0-1776-4897-AE14-ECEDECBAFEC0} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5A074B29-F830-49DE-A31B-5BB9D7F6B407} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{C451C08A-EC37-45DF-AAAD-18B51AB5E837} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{DCC70A83-E184-40A3-906B-779AF5E941C4} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{EF99BD32-C1FB-11D2-892F-0090271D4F88} ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17344 -\\ Google Chrome v38.0.2125.104 ************************* AdwCleaner[R0].txt - [1769 octets] - [26/09/2014 20:49:26] AdwCleaner[R1].txt - [6281 octets] - [21/10/2014 18:22:35] AdwCleaner[S0].txt - [1680 octets] - [26/09/2014 20:49:54] AdwCleaner[S1].txt - [6114 octets] - [21/10/2014 18:24:05] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6174 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.3.3 (10.14.2014:1) OS: Windows 7 Professional x64 Ran by cletze on 21.10.2014 at 18:28:05,30 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 21.10.2014 at 18:30:52,62 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
22.10.2014, 12:17 | #12 |
/// the machine /// TB-Ausbilder | PC startet von selbst neu / Fehlermeldungen / Bluescreen.ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
23.10.2014, 16:52 | #13 |
| PC startet von selbst neu / Fehlermeldungen / Bluescreen.Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=dbd00dae2759e34ebdbdfa303715655e # engine=20741 # end=stopped # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-10-23 01:59:14 # local_time=2014-10-23 03:59:14 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='Kaspersky Anti-Virus' # compatibility_mode=1293 16777214 100 100 12788 45550776 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 150432 165702604 0 0 # scanned=297982 # found=0 # cleaned=0 # scan_time=1438 ESETSmartInstaller@High as downloader log: Can not extract cabC:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScanner.cabErr:Eine Datei kann nicht erstellt werden, wenn sie bereits vorhanden ist. ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=dbd00dae2759e34ebdbdfa303715655e # engine=20747 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-10-23 03:31:16 # local_time=2014-10-23 05:31:16 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='Kaspersky Anti-Virus' # compatibility_mode=1293 16777214 100 100 3909 45556298 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 8452 165708126 0 0 # scanned=460538 # found=0 # cleaned=0 # scan_time=2057 Code:
ATTFilter Results of screen317's Security Check version 0.99.89 Windows 7 Service Pack 1 x64 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Kaspersky Anti-Virus Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Java 7 Update 67 Java 8 Update 5 Adobe Flash Player 15.0.0.152 Google Chrome 37.0.2062.124 Google Chrome 38.0.2125.104 ````````Process Check: objlist.exe by Laurent```````` IObit IObit Malware Fighter IMFsrv.exe IObit IObit Malware Fighter IMF.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-10-2014 Ran by cletze (administrator) on CLETZE-PC on 23-10-2014 17:51:47 Running from C:\Users\cletze\Desktop Loaded Profile: cletze (Available profiles: cletze) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\System32\PnkBstrA.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Akamai Technologies, Inc.) C:\Users\cletze\AppData\Local\Akamai\netsession_win.exe () C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe () C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe (Corsair Components, Inc.) C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe (Akamai Technologies, Inc.) C:\Users\cletze\AppData\Local\Akamai\netsession_win.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe (Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (TeamSpeak Systems GmbH) C:\Users\cletze\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2463552 2014-10-04] (NVIDIA Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7575768 2014-09-25] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-09-25] (Realtek Semiconductor) HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816784 2014-07-21] (LogMeIn Inc.) HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe [10151688 2014-09-22] (Corsair Components, Inc.) HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1601856 2014-05-23] (IObit) HKU\S-1-5-21-3258100427-268387496-3373938871-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3600216 2014-09-19] (Electronic Arts) HKU\S-1-5-21-3258100427-268387496-3373938871-1000\...\Run: [Akamai NetSession Interface] => C:\Users\cletze\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.) HKU\S-1-5-21-3258100427-268387496-3373938871-1000\...\Run: [NvLedServiceHost] => C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe [86344 2014-10-04] () HKU\S-1-5-18\...\Run: [Advanced SystemCare 7] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2281248 2014-08-22] (IObit) AppInit_DLLs: => File Not Found Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA3100 Genie.lnk ShortcutTarget: NETGEAR WNA3100 Genie.lnk -> C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1A6005D34B82CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation) BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation) BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll (Microsoft Corporation.) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB) FF Plugin: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-14] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-14] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-14] Chrome: ======= CHR HomePage: Default -> hxxp://at.msn.com/?pc=U270&ocid=U270DHP CHR StartupUrls: Default -> "hxxp://google.at/" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-07] CHR Extension: (Google Drive) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-07] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06] CHR Extension: (Kaspersky Protection) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-06-14] CHR Extension: (YouTube) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-07] CHR Extension: (Adblock Plus) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-29] CHR Extension: (Google-Suche) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-07] CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-06-14] CHR Extension: (Google Wallet) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-07] CHR Extension: (Google Mail) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-07] CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [] CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx [2013-10-17] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [893216 2014-08-18] (IObit) S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) S4 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation) S4 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation) R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240576 2014-09-25] (DTS, Inc) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-10-04] (NVIDIA Corporation) R3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2012-02-01] (Intel Corporation) [File not signed] R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-05-15] (IObit) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2283296 2014-10-21] (IObit) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.) S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5268336 2014-03-25] (INCA Internet Co., Ltd.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-10-04] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-10-04] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-10-08] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-10-06] () S2 WSWNA3100; C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [307928 2013-11-11] () R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2013-12-17] (Wacom Technology, Corp.) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-01-17] (Intel(R) Corporation) S3 Futuremark SystemInfo Service; "C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49048 2014-09-25] (Asmedia Technology) R3 CorsairVBusDriver; C:\Windows\System32\DRIVERS\CorsairVBusDriver.sys [48296 2014-09-19] (Corsair) R3 CorsairVHidDriver; C:\Windows\System32\DRIVERS\CorsairVHidDriver.sys [22184 2014-09-19] (Corsair) R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-01-17] (Intel Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-06-14] (Kaspersky Lab ZAO) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-06-14] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-06-14] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-06-14] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-06-14] (Kaspersky Lab ZAO) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-07-26] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-10-04] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation) R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X] S3 cpuz137; \??\C:\Windows\TEMP\cpuz137\cpuz137_x64.sys [X] S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-23 17:51 - 2014-10-23 17:51 - 00000000 ____D () C:\Users\cletze\Desktop\FRST-OlderVersion 2014-10-23 17:49 - 2014-10-23 17:49 - 00854448 _____ () C:\Users\cletze\Downloads\SecurityCheck.exe 2014-10-23 15:12 - 2014-10-16 14:27 - 00614544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-10-23 15:10 - 2014-10-16 18:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-10-23 15:10 - 2014-10-16 18:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00870112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00500880 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00418112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00392008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00348488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-10-23 15:10 - 2014-10-16 18:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-10-23 12:28 - 2014-10-23 12:28 - 02347384 _____ (ESET) C:\Users\cletze\Downloads\esetsmartinstaller_deu.exe 2014-10-23 12:28 - 2014-10-23 12:28 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-10-23 10:57 - 2014-10-23 10:57 - 00297560 _____ () C:\Windows\Minidump\102314-21122-01.dmp 2014-10-23 00:29 - 2014-10-23 00:29 - 00318536 _____ () C:\Windows\Minidump\102314-103600-01.dmp 2014-10-21 23:31 - 2014-10-21 23:31 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\NVIDIA 2014-10-21 22:46 - 2014-09-17 06:51 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-10-21 22:46 - 2014-09-17 06:51 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-10-21 21:04 - 2014-10-16 18:54 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-10-21 21:04 - 2014-10-16 18:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-10-21 21:04 - 2014-10-16 18:54 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-10-21 21:04 - 2014-10-16 18:54 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-10-21 21:04 - 2014-10-16 18:54 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-10-21 21:04 - 2014-10-16 18:54 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-10-21 21:04 - 2014-10-16 18:54 - 00987008 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-10-21 21:04 - 2014-09-04 21:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-10-21 21:04 - 2014-09-04 21:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-10-21 20:35 - 2014-10-21 20:46 - 210746952 _____ (NVIDIA Corporation) C:\Users\cletze\Downloads\331.65-desktop-win8-win7-winvista-64bit-english-whql.exe 2014-10-21 19:52 - 2014-10-21 19:52 - 00013824 _____ () C:\Users\cletze\Downloads\[www.OldSchoolHack.de]_BF4_No_Recoil.exe 2014-10-21 18:21 - 2014-10-21 18:22 - 01705698 _____ (Thisisu) C:\Users\cletze\Downloads\JRT.exe 2014-10-21 18:21 - 2014-10-21 18:21 - 01962496 _____ () C:\Users\cletze\Downloads\AdwCleaner_4.001.exe 2014-10-21 18:17 - 2014-10-21 18:17 - 00582120 _____ () C:\Windows\Minidump\102114-16426-01.dmp 2014-10-21 17:24 - 2014-10-21 17:24 - 00380584 _____ () C:\Windows\Minidump\102114-28095-01.dmp 2014-10-21 17:21 - 2014-10-23 16:26 - 00005967 _____ () C:\Windows\setupact.log 2014-10-21 17:21 - 2014-10-23 16:03 - 00001788 _____ () C:\Windows\PFRO.log 2014-10-21 17:21 - 2014-10-21 17:21 - 00000000 _____ () C:\Windows\setuperr.log 2014-10-21 17:09 - 2014-10-21 17:09 - 00002892 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_cletze 2014-10-21 17:09 - 2014-10-21 17:09 - 00002892 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-10-21 17:09 - 2014-10-21 17:09 - 00001180 _____ () C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-10-21 17:09 - 2014-10-21 17:09 - 00001156 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk 2014-10-20 10:29 - 2014-10-20 10:29 - 00086016 _____ (Vista Software, Inc. (www.vista-software.com)) C:\Users\cletze\Downloads\qwikmark.exe 2014-10-19 16:15 - 2014-10-19 16:16 - 1430399323 _____ () C:\Users\cletze\Downloads\Exult Flyff v2.exe 2014-10-19 04:27 - 2014-10-19 04:27 - 00001080 _____ () C:\Users\cletze\Desktop\TERA.lnk 2014-10-19 04:24 - 2014-10-19 04:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live 2014-10-19 04:24 - 2014-10-19 04:24 - 00001067 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk 2014-10-19 04:24 - 2014-10-19 04:24 - 00000000 ____D () C:\Users\cletze\Downloads\Gameforge Live 2014-10-19 04:24 - 2014-10-19 04:24 - 00000000 ____D () C:\Users\cletze\AppData\Local\Gameforge4d 2014-10-19 04:24 - 2014-10-19 04:24 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive 2014-10-19 04:20 - 2014-10-19 04:21 - 20201072 _____ (Gameforge ) C:\Users\cletze\Downloads\TERA_GameforgeLiveSetup.exe 2014-10-18 21:16 - 2014-10-18 21:23 - 93047830 _____ () C:\Users\cletze\Downloads\Caliente's Beautiful Bodies Edition v3.3-2666-3-3.7z 2014-10-18 20:53 - 2014-09-29 16:06 - 00036164 _____ () C:\Users\cletze\Desktop\K95RGB_app113.bin 2014-10-18 20:51 - 2014-10-18 20:51 - 00021989 _____ () C:\Users\cletze\Downloads\K95RGB.zip 2014-10-18 20:51 - 2014-10-18 20:51 - 00021989 _____ () C:\Users\cletze\Downloads\K95RGB (2).zip 2014-10-18 20:51 - 2014-10-18 20:51 - 00021989 _____ () C:\Users\cletze\Downloads\K95RGB (1).zip 2014-10-17 14:23 - 2014-08-12 05:00 - 00000000 ____D () C:\Users\cletze\Downloads\EWIs High SkyrimPrefs and inis v06 2014-10-17 14:21 - 2014-10-17 14:21 - 00004255 _____ () C:\Users\cletze\Downloads\EWIs High SkyrimPrefs and inis v06-51033-v06.rar 2014-10-17 14:13 - 2014-10-17 14:14 - 09582139 _____ () C:\Users\cletze\Downloads\RealVision ENB 262c-30936-262c (1).7z 2014-10-17 14:11 - 2014-10-17 14:11 - 02978304 _____ () C:\Users\cletze\Downloads\Realistic Lighting Overhaul 4_0_8_01 NMM-BAINWizard Installer-30450-4-0-8-01 (1).7z 2014-10-15 22:30 - 2014-10-10 04:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-10-15 22:30 - 2014-10-10 04:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-10-15 22:30 - 2014-10-10 04:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-10-15 22:30 - 2014-10-07 04:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-10-15 22:30 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-10-15 22:30 - 2014-09-29 02:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-10-15 22:30 - 2014-09-26 00:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-10-15 22:30 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-10-15 22:30 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-10-15 22:30 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-10-15 22:30 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-10-15 22:30 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-10-15 22:30 - 2014-09-26 00:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-10-15 22:30 - 2014-09-19 04:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-10-15 22:30 - 2014-09-19 03:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-10-15 22:30 - 2014-09-19 03:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-10-15 22:30 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-10-15 22:30 - 2014-09-19 03:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-10-15 22:30 - 2014-09-19 03:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-10-15 22:30 - 2014-09-19 03:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-10-15 22:30 - 2014-09-19 03:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-10-15 22:30 - 2014-09-19 03:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-10-15 22:30 - 2014-09-19 03:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-10-15 22:30 - 2014-09-19 03:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-10-15 22:30 - 2014-09-19 03:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-10-15 22:30 - 2014-09-19 03:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-10-15 22:30 - 2014-09-19 03:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-10-15 22:30 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-10-15 22:30 - 2014-09-19 03:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-10-15 22:30 - 2014-09-19 03:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-10-15 22:30 - 2014-09-19 03:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-10-15 22:30 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-10-15 22:30 - 2014-09-19 03:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-10-15 22:30 - 2014-09-19 03:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-10-15 22:30 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-10-15 22:30 - 2014-09-19 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-10-15 22:30 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-10-15 22:30 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-10-15 22:30 - 2014-09-19 03:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-10-15 22:30 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-10-15 22:30 - 2014-09-19 02:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-10-15 22:30 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-10-15 22:30 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-10-15 22:30 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-10-15 22:30 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-10-15 22:30 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-10-15 22:30 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-10-15 22:30 - 2014-09-19 02:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-10-15 22:30 - 2014-09-19 02:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-10-15 22:30 - 2014-09-19 02:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-10-15 22:30 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-10-15 22:30 - 2014-09-19 02:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-10-15 22:30 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-10-15 22:30 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-10-15 22:30 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-10-15 22:30 - 2014-09-19 02:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-10-15 22:30 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-10-15 22:30 - 2014-09-19 01:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-10-15 22:30 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-10-15 22:30 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-10-15 22:30 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-10-15 22:30 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-10-15 22:30 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2014-10-15 22:30 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2014-10-15 22:30 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2014-10-15 22:30 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2014-10-15 22:27 - 2014-09-18 04:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-10-15 22:27 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-10-15 22:27 - 2014-09-13 03:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-10-15 22:27 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-10-15 22:27 - 2014-09-05 04:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-10-15 22:27 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-10-15 22:27 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-10-15 22:27 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2014-10-15 22:27 - 2014-08-29 04:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-10-15 22:27 - 2014-07-17 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-10-15 22:27 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-10-15 22:27 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2014-10-15 22:27 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-10-15 22:27 - 2014-07-17 04:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-10-15 22:27 - 2014-07-17 04:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-10-15 22:27 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2014-10-15 22:27 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-10-15 22:27 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-10-15 22:27 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-10-15 22:27 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-10-15 19:56 - 2014-10-15 19:57 - 09582139 _____ () C:\Users\cletze\Downloads\RealVision ENB 262c-30936-262c.7z 2014-10-15 19:51 - 2014-10-15 19:51 - 02427852 _____ () C:\Users\cletze\Downloads\enbseries_skyrim_v0262.zip 2014-10-15 19:45 - 2014-10-15 19:46 - 02978304 _____ () C:\Users\cletze\Downloads\Realistic Lighting Overhaul 4_0_8_01 NMM-BAINWizard Installer-30450-4-0-8-01.7z 2014-10-15 19:12 - 2014-10-15 19:12 - 00000119 _____ () C:\Users\cletze\Downloads\Serenity ENB - NEW VERSION-39799-251.rar 2014-10-15 19:11 - 2014-10-15 19:34 - 107551867 _____ () C:\Users\cletze\Downloads\Climates Of Tamriel - V3-1-17802-3-1.zip 2014-10-15 19:11 - 2014-10-15 19:11 - 00019809 _____ () C:\Users\cletze\Downloads\Supreme Storms-27022-1-2.rar 2014-10-15 18:32 - 2014-10-15 18:55 - 173786412 _____ () C:\Users\cletze\Downloads\EWIs Whiterun-58445-V1-2.rar 2014-10-14 21:39 - 2014-10-14 21:39 - 00000000 ____D () C:\Users\cletze\Desktop\nicht installiert 2014-10-13 19:54 - 2014-10-15 18:47 - 00000000 ____D () C:\Users\cletze\Desktop\Neuer Ordner (3) 2014-10-13 15:22 - 2014-10-13 15:22 - 00000000 ____D () C:\Games 2014-10-13 15:21 - 2014-10-15 19:39 - 00000000 ____D () C:\Users\cletze\Documents\Nexus Mod Manager 2014-10-13 15:21 - 2014-10-15 13:45 - 00000934 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk 2014-10-13 15:21 - 2014-10-13 15:21 - 00000000 ____D () C:\Users\cletze\AppData\Local\Black_Tree_Gaming 2014-10-13 15:21 - 2014-10-13 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager 2014-10-13 15:21 - 2014-10-13 15:21 - 00000000 ____D () C:\Program Files\Nexus Mod Manager 2014-10-13 14:48 - 2014-10-13 14:48 - 00000221 _____ () C:\Users\cletze\Desktop\The Elder Scrolls V Skyrim.url 2014-10-13 14:13 - 2014-10-18 21:23 - 00000000 ____D () C:\Users\cletze\AppData\Local\Skyrim 2014-10-10 15:18 - 2014-10-10 15:18 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-10-10 15:18 - 2014-10-10 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-10-10 15:18 - 2014-10-10 15:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-10-10 15:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-10-10 15:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-10-10 15:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-10-09 21:18 - 2014-10-23 12:07 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-10-09 20:12 - 2014-10-09 20:12 - 08171600 _____ () C:\Users\cletze\Desktop\ts3_recording_14_10_09_20_11_57.wav 2014-10-09 17:31 - 2014-10-09 17:31 - 00027176 _____ () C:\ComboFix.txt 2014-10-09 17:25 - 2014-10-09 17:31 - 00000000 ____D () C:\ComboFix 2014-10-09 17:12 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-10-09 17:12 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-10-09 17:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-10-09 17:12 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-10-09 17:12 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-10-09 17:12 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-10-09 17:12 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-10-09 17:12 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-10-09 17:11 - 2014-10-09 17:31 - 00000000 ____D () C:\Qoobox 2014-10-09 17:11 - 2014-10-09 17:21 - 00000000 ____D () C:\Windows\erdnt 2014-10-09 10:59 - 2014-09-29 05:06 - 00000000 ____D () C:\Users\cletze\Desktop\x64 2014-10-08 22:16 - 2014-10-08 22:19 - 00478764 _____ () C:\Users\cletze\Desktop\HitSpeedEng.exe 2014-10-08 07:11 - 2014-10-08 07:11 - 00000517 _____ () C:\Users\Public\Desktop\Age of Wulin (DE).lnk 2014-10-08 07:11 - 2014-10-08 07:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webzen 2014-10-07 11:53 - 2014-10-07 11:53 - 00001173 _____ () C:\Users\Public\Desktop\IObit Malware Fighter.lnk 2014-10-07 11:53 - 2014-10-07 11:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter 2014-10-06 21:13 - 2014-10-23 17:51 - 00021888 _____ () C:\Users\cletze\Desktop\FRST.txt 2014-10-06 21:13 - 2014-10-06 21:13 - 00046621 _____ () C:\Users\cletze\Desktop\Shortcut.txt 2014-10-06 14:15 - 2014-10-06 14:18 - 00000000 ____D () C:\Users\cletze\Desktop\paysafefails 2014-10-06 09:54 - 2014-10-19 15:25 - 00281688 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-10-06 09:54 - 2014-10-06 09:54 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-10-06 01:05 - 2014-10-06 01:05 - 00000232 _____ () C:\Users\Public\Desktop\Far Cry 3.url 2014-10-03 11:12 - 2014-09-09 11:13 - 00036152 _____ () C:\Users\cletze\Desktop\K95RGB_app112.bin 2014-10-03 11:11 - 2014-10-03 11:11 - 00000000 ____D () C:\Users\cletze\AppData\Local\Corsair 2014-10-03 11:08 - 2014-10-03 11:08 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Corsair 2014-10-03 11:08 - 2014-10-03 11:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Corsair Utility Engine 2014-10-03 11:08 - 2014-10-03 11:08 - 00000000 ____D () C:\Program Files (x86)\Corsair 2014-10-02 11:56 - 2014-10-02 11:56 - 00000193 _____ () C:\Windows\WORDPAD.INI 2014-10-01 16:27 - 2014-10-01 16:27 - 00000000 ____D () C:\Windows\Sun 2014-10-01 16:27 - 2014-10-01 16:27 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Oracle 2014-10-01 16:21 - 2014-10-01 16:21 - 00004361 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log 2014-10-01 15:50 - 2014-10-14 00:18 - 00000000 ____D () C:\Users\cletze\Desktop\Neuer Ordner (2) 2014-10-01 15:29 - 2014-09-10 23:27 - 00024056 _____ () C:\Users\cletze\Desktop\defineAttribute.h 2014-10-01 15:29 - 2014-09-10 23:24 - 00016920 _____ () C:\Users\cletze\Desktop\defineItemkind.h 2014-10-01 10:39 - 2014-10-01 10:39 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\089F5BA2.sys 2014-10-01 10:02 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-10-01 10:02 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-09-29 20:01 - 2014-09-29 20:59 - 00000000 ____D () C:\Users\cletze\Valley 2014-09-29 20:01 - 2014-09-29 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unigine 2014-09-28 15:53 - 2008-12-29 21:29 - 00000000 ____D () C:\Users\cletze\Desktop\FTool Extended 2014-09-27 17:30 - 2014-09-27 17:30 - 00034477 _____ () C:\Users\cletze\Desktop\Addition.txt 2014-09-27 10:33 - 2014-09-27 10:33 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-09-27 10:32 - 2014-09-14 01:48 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434411.dll 2014-09-27 10:32 - 2014-09-14 01:48 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434411.dll 2014-09-26 20:53 - 2014-09-26 20:53 - 00000000 ____D () C:\Windows\ERUNT 2014-09-26 20:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-09-26 20:48 - 2014-10-21 18:24 - 00000000 ____D () C:\AdwCleaner 2014-09-26 20:18 - 2014-09-26 20:18 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-26 15:13 - 2014-10-23 17:51 - 02112000 _____ (Farbar) C:\Users\cletze\Desktop\FRST64.exe 2014-09-26 15:13 - 2014-10-23 17:51 - 00000000 ____D () C:\FRST 2014-09-25 21:55 - 2014-09-25 21:55 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-09-25 21:51 - 2014-09-25 21:51 - 60636160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-09-25 21:51 - 2014-09-25 21:51 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 03962840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-09-25 21:51 - 2014-09-25 21:51 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02117424 _____ () C:\Windows\system32\SStudio.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-09-25 21:51 - 2014-09-25 21:51 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00494864 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1c62x64.sys 2014-09-25 21:51 - 2014-09-25 21:51 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00089888 _____ (Intel Corporation) C:\Windows\system32\NicInstC.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1cmsg.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00049048 _____ (Asmedia Technology) C:\Windows\system32\Drivers\asahci64.sys 2014-09-25 21:51 - 2014-09-25 21:51 - 00048736 _____ (Asmedia Technology) C:\Windows\system32\ahcipp64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-09-25 21:51 - 2014-09-25 21:51 - 00003114 _____ () C:\Windows\system32\e1c62x64.din 2014-09-25 21:42 - 2014-09-25 21:42 - 00002860 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (SYSTEM) 2014-09-24 18:16 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-09-24 18:16 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-23 17:51 - 2014-08-09 08:24 - 00000000 ____D () C:\Users\cletze\Desktop\txt und anderes 2014-10-23 17:48 - 2014-06-07 15:42 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\TS3Client 2014-10-23 17:43 - 2014-06-07 15:29 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-10-23 17:01 - 2014-06-07 14:29 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-10-23 16:33 - 2009-07-14 06:45 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-10-23 16:33 - 2009-07-14 06:45 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-10-23 16:32 - 2011-04-12 09:43 - 00664286 _____ () C:\Windows\system32\perfh007.dat 2014-10-23 16:32 - 2011-04-12 09:43 - 00135778 _____ () C:\Windows\system32\perfc007.dat 2014-10-23 16:32 - 2009-07-14 07:13 - 01529032 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-10-23 16:29 - 2014-07-19 17:13 - 00000000 ____D () C:\Users\cletze\AppData\Local\LogMeIn Hamachi 2014-10-23 16:29 - 2014-06-07 14:16 - 01856546 _____ () C:\Windows\WindowsUpdate.log 2014-10-23 16:26 - 2014-08-17 08:09 - 00002133 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk 2014-10-23 16:26 - 2014-06-25 23:56 - 00003026 _____ () C:\Windows\System32\Tasks\EVGAPrecision 2014-10-23 16:26 - 2014-06-14 14:40 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-10-23 16:26 - 2014-06-07 16:11 - 00000000 ____D () C:\ProgramData\Origin 2014-10-23 16:26 - 2014-06-07 16:04 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-10-23 16:26 - 2014-06-07 15:29 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-10-23 16:26 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-10-23 16:07 - 2014-06-07 16:10 - 00000000 ____D () C:\Program Files (x86)\Origin 2014-10-23 15:15 - 2014-06-07 19:03 - 00000000 ____D () C:\Program Files (x86)\osu! 2014-10-23 15:12 - 2014-06-25 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-10-23 15:12 - 2014-06-07 16:04 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-10-23 12:27 - 2014-08-17 08:09 - 00000000 ____D () C:\ProgramData\ProductData 2014-10-23 12:22 - 2014-06-07 23:34 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\Skype 2014-10-23 12:07 - 2014-06-07 18:40 - 00215416 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-10-23 10:57 - 2014-06-25 21:26 - 00000000 ____D () C:\Windows\Minidump 2014-10-23 01:06 - 2014-06-08 23:48 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-10-22 14:07 - 2014-08-11 23:27 - 00000000 ____D () C:\Users\cletze\Downloads\Exult Flyff v2 2014-10-21 22:47 - 2014-06-07 16:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-10-21 22:02 - 2014-06-25 21:04 - 00000000 ____D () C:\Users\cletze\AppData\Local\NVIDIA 2014-10-21 22:02 - 2014-06-07 16:04 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-10-21 21:28 - 2014-08-17 08:10 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\ProductData 2014-10-21 21:28 - 2014-07-20 21:52 - 00000000 ____D () C:\Users\cletze\AppData\Local\Akamai 2014-10-21 21:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security 2014-10-21 21:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-10-21 21:27 - 2014-08-09 22:48 - 00000000 ____D () C:\ProgramData\IObit 2014-10-21 21:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help 2014-10-21 21:06 - 2014-06-25 20:52 - 00001347 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-10-21 20:30 - 2014-06-07 16:05 - 00000000 ____D () C:\Users\cletze\AppData\Local\NVIDIA Corporation 2014-10-21 20:29 - 2014-06-07 14:22 - 00000000 ____D () C:\Users\cletze 2014-10-21 17:09 - 2014-08-17 08:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7 2014-10-21 16:15 - 2014-07-19 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resource Hacker 2014-10-21 16:15 - 2014-06-22 14:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps 2014-10-20 20:38 - 2014-07-23 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-10-17 20:50 - 2014-06-07 15:32 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-10-16 18:54 - 2014-06-07 16:04 - 00072904 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-10-16 18:54 - 2014-06-07 16:04 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-10-16 18:54 - 2014-06-07 16:02 - 00027024 _____ () C:\Windows\system32\nvinfo.pb 2014-10-16 16:50 - 2009-07-14 06:45 - 00267816 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-10-16 16:49 - 2014-06-09 04:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-10-16 16:11 - 2014-06-07 16:04 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-10-16 16:11 - 2014-06-07 16:04 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-10-16 16:11 - 2014-06-07 16:04 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-10-16 16:11 - 2014-06-07 16:04 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-10-16 16:11 - 2014-06-07 16:04 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-10-16 16:11 - 2014-06-07 16:04 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-10-15 23:40 - 2014-06-09 12:22 - 00000000 ____D () C:\Windows\system32\MRT 2014-10-15 23:36 - 2014-06-09 12:22 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-10-15 02:48 - 2014-06-07 16:04 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin 2014-10-14 00:17 - 2014-09-08 11:23 - 00000000 ____D () C:\Users\cletze\Desktop\flyff files 2014-10-13 14:13 - 2014-06-08 14:35 - 00000000 ____D () C:\Users\cletze\Documents\My Games 2014-10-13 14:13 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-10-09 17:29 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-10-09 17:19 - 2009-07-14 04:34 - 76283904 _____ () C:\Windows\system32\config\software.bak 2014-10-09 17:19 - 2009-07-14 04:34 - 22282240 _____ () C:\Windows\system32\config\system.bak 2014-10-09 17:14 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-10-09 16:12 - 2009-07-14 04:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2014-10-09 16:11 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-10-08 09:38 - 2014-06-29 10:11 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe 2014-10-08 07:11 - 2014-06-07 14:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-10-07 22:11 - 2014-06-07 18:03 - 00000000 ____D () C:\ProgramData\WEBZEN 2014-10-06 09:54 - 2014-06-07 22:39 - 00000000 ____D () C:\Users\cletze\AppData\Local\PunkBuster 2014-10-06 09:54 - 2014-06-07 18:40 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-10-06 09:28 - 2014-08-09 18:36 - 02128896 _____ () C:\Users\cletze\AppData\Local\file__0.localstorage 2014-10-04 08:42 - 2014-06-25 21:04 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2014-10-04 08:42 - 2014-06-25 20:52 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-10-04 08:41 - 2014-06-25 21:04 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2014-10-04 08:41 - 2014-06-25 20:52 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-10-02 20:17 - 2014-06-25 20:45 - 00000000 ____D () C:\Program Files (x86)\EVGA Precision X 2014-10-02 15:53 - 2010-11-21 05:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-10-01 16:27 - 2014-06-21 14:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-01 16:26 - 2014-06-21 14:39 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-29 14:28 - 2014-06-25 19:40 - 00000022 _____ () C:\Windows\GPU-Z.INI 2014-09-26 21:47 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-09-26 08:44 - 2014-07-04 22:40 - 00000000 ____D () C:\Users\cletze\Desktop\Flux Flyff Client 2014-09-25 21:51 - 2014-08-31 09:27 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-09-25 21:51 - 2014-08-31 09:26 - 01099203 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-09-25 21:42 - 2014-08-17 08:18 - 00001098 _____ () C:\Users\Public\Desktop\Driver Booster.lnk 2014-09-25 21:42 - 2014-08-17 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2014-09-24 19:02 - 2014-06-07 14:29 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-24 19:01 - 2014-09-10 15:01 - 03675824 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-09-24 19:01 - 2014-06-07 14:29 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-24 19:01 - 2014-06-07 14:29 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-23 22:17 - 2014-06-21 14:44 - 00000000 ____D () C:\Users\cletze\AppData\Roaming\.minecraft Some content of TEMP: ==================== C:\Users\cletze\AppData\Local\Temp\nvSCPAPI.dll C:\Users\cletze\AppData\Local\Temp\nvSCPAPI64.dll C:\Users\cletze\AppData\Local\Temp\nvStInst.exe C:\Users\cletze\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-16 18:14 ==================== End Of Log ============================ --- --- --- |
24.10.2014, 08:15 | #14 |
/// the machine /// TB-Ausbilder | PC startet von selbst neu / Fehlermeldungen / Bluescreen. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter AppInit_DLLs: => File Not Found Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
24.10.2014, 19:57 | #15 |
| PC startet von selbst neu / Fehlermeldungen / Bluescreen.Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-10-2014 Ran by cletze at 2014-10-24 20:53:28 Run:2 Running from C:\Users\cletze\Desktop Loaded Profile: cletze (Available profiles: cletze) Boot Mode: Normal ============================================== Content of fixlist: ***************** AppInit_DLLs: => File Not Found ***************** "" => Value Data removed successfully. ==== End of Fixlog ==== |
Themen zu PC startet von selbst neu / Fehlermeldungen / Bluescreen. |
abbrechen, aufeinmal, beim starten, bluescree, bluescreen, brauch, extrem, fehlermeldungen, garnicht, gen, heute, klick, neu, normalmodus, rum, sofort, spinn, spinnt, starte, startet, versuch, von selbst |