| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: HTML/Crypted.genWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
06.11.2014, 20:16
| #1 |
| |  HTML/Crypted.gen Hallo, Nun hats mich auch erwischt. Wollte meinen neuen Rechner einrichten und jetzt habe ich mir crypted.gen eingefangen. Und das nach nur 2 Tagen. Ich habe bereits einige Programme drüberlaufen lassen, leider ohne Erfolg.  FRST Addition sagt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-11-2014
Ran by Peter at 2014-11-06 20:06:44
Running from C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.04.3005 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.00.2013.0 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8105 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8104 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3012 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8106 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.02.2003 - Acer Incorporated)
Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.01.3003 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.01.3003 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2001.4 - Acer Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.3721 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3914.57 - CyberLink Corp.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Free YouTube to MP3 Converter version 3.12.49.1022 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.49.1022 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.1 - Genesys Logic)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8101 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Kobo (HKLM-x32\...\Kobo) (Version: 3.6.0 - Kobo Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.2 (x86 de)) (Version: 33.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Pokki Start Menu (HKCU\...\Pokki_Start_Menu) (Version: 0.269.3.181 - )
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.31.423.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3585963361-1982867813-4056610559-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
06-11-2014 12:16:11 06 11 2014
06-11-2014 17:36:51 Wiederherstellungsvorgang
06-11-2014 18:20:04 Revo Uninstaller's restore point - Mozilla Maintenance Service
06-11-2014 18:20:52 Revo Uninstaller's restore point - Mozilla Firefox 33.0.2 (x86 de)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2014-11-06 11:15 - 00450713 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {02686A44-510D-4FFE-99A4-041543659CC8} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-03-17] (Acer Incorporate)
Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {22A9A091-6A47-4678-B9FF-CF3754ED3B0D} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-03-21] (Acer Incorporated)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {337BFE19-BD4F-41FC-9E3B-FEDC50BB759A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-05] (Adobe Systems Incorporated)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DD03667-4424-4D20-89CA-296485F9DFB3} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B0D9628A-7251-4606-A034-6F00EF25E986} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {BDD7E3DA-F247-47E7-801E-AE69337BBED2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {BF58E14B-1069-43E0-80DD-BB525A2FD9CD} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {C907D47F-769C-4156-97F0-4CEBDE33A7DE} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-03-18] (Acer Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D08F1AB1-8F5E-4779-937E-7A750E734C77} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {D0D94DBC-EFEA-47B5-993C-8CA15FC16D6A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DD78B00E-7325-43AE-A4A3-AC2C2B092A72} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {E2ACF668-4308-4463-9ECA-B3DD4467FB01} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {E3BDCA69-0278-4D27-AE94-D673C4802877} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {E661A666-E4A2-4336-8876-9CCDE4A10367} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-01-24] (TODO: <Company name>)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2014-11-05 18:01 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-11-05 20:34 - 2014-11-03 13:56 - 04377560 ___SH () C:\Program Files (x86)\Oyridurate\Oyridurate.exe
2014-07-11 12:03 - 2012-04-24 11:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2014-11-05 20:34 - 2014-11-05 20:34 - 00160728 ____R () C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe
2014-02-25 21:14 - 2014-02-25 21:14 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-02-25 21:11 - 2014-02-25 21:11 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-02-25 21:17 - 2014-02-25 21:17 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-06-11 11:38 - 2014-03-07 17:21 - 00080312 _____ () C:\Windows\system32\igfxexps.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-05 20:34 - 2014-03-07 19:56 - 00117262 ___SH () C:\Program Files (x86)\Oyridurate\libgcc_s_dw2-1.dll
2014-11-05 20:34 - 2014-03-07 19:56 - 00970766 ___SH () C:\Program Files (x86)\Oyridurate\libstdc++-6.dll
2014-07-11 11:39 - 2013-12-10 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-11-06 19:48 - 2014-10-28 03:01 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Peter\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-3585963361-1982867813-4056610559-500 - Administrator - Disabled)
Gast (S-1-5-21-3585963361-1982867813-4056610559-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3585963361-1982867813-4056610559-1003 - Limited - Enabled)
Peter (S-1-5-21-3585963361-1982867813-4056610559-1001 - Administrator - Enabled) => C:\Users\Peter
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/06/2014 06:50:27 PM) (Source: System Restore) (EventID: 8210) (User: )
Description: Unbekannter Fehler bei der Systemwiederherstellung: (06 11 2014). Zusätzliche Informationen: 0x80070005.
Error: (11/06/2014 06:40:05 PM) (Source: System Restore) (EventID: 8210) (User: )
Description: Unbekannter Fehler bei der Systemwiederherstellung: (06 11 2014). Zusätzliche Informationen: 0x80070005.
Error: (11/06/2014 06:12:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.2.5413, Zeitstempel: 0x544ef530
Name des fehlerhaften Moduls: xul.dll, Version: 33.0.2.5413, Zeitstempel: 0x544ef44e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0039e443
ID des fehlerhaften Prozesses: 0x640
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5
Error: (11/06/2014 04:24:52 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/06/2014 04:24:52 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/06/2014 04:10:17 PM) (Source: Dell-System-Update) (EventID: 0) (User: )
Description: Synaptics MUP installation Utilies
Description: Synaptics Pointing device driver
Log file: C:\Windows\Synaptics.log
Exit code: 1
Error: (11/06/2014 04:08:07 PM) (Source: Dell-System-Update) (EventID: 0) (User: )
Description: Synaptics MUP installation Utilies
Description: Synaptics Pointing device driver
Log file: C:\Windows\Synaptics.log
Exit code: 1
Error: (11/06/2014 01:30:57 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/06/2014 01:30:51 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/06/2014 01:30:47 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
System errors:
=============
Error: (11/06/2014 07:31:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/06/2014 06:57:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/06/2014 06:57:24 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%1062
Error: (11/06/2014 06:55:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/06/2014 06:47:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/06/2014 06:39:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/06/2014 06:13:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/06/2014 05:55:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/06/2014 05:55:25 PM) (Source: DCOM) (EventID: 10010) (User: SCHREIBERLING)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (11/06/2014 05:55:25 PM) (Source: DCOM) (EventID: 10010) (User: SCHREIBERLING)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Microsoft Office Sessions:
=========================
Error: (11/06/2014 06:50:27 PM) (Source: System Restore) (EventID: 8210) (User: )
Description: 06 11 20140x80070005
Error: (11/06/2014 06:40:05 PM) (Source: System Restore) (EventID: 8210) (User: )
Description: 06 11 20140x80070005
Error: (11/06/2014 06:12:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.0.2.5413544ef530xul.dll33.0.2.5413544ef44ec00000050039e44364001cff9e4c4646d7cC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll1ddb7c33-65d8-11e4-826f-c454449fdb44
Error: (11/06/2014 04:24:52 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/06/2014 04:24:52 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu(1).exe
Error: (11/06/2014 04:10:17 PM) (Source: Dell-System-Update) (EventID: 0) (User: )
Description: Synaptics MUP installation Utilies
Description: Synaptics Pointing device driver
Log file: C:\Windows\Synaptics.log
Exit code: 1
Error: (11/06/2014 04:08:07 PM) (Source: Dell-System-Update) (EventID: 0) (User: )
Description: Synaptics MUP installation Utilies
Description: Synaptics Pointing device driver
Log file: C:\Windows\Synaptics.log
Exit code: 1
Error: (11/06/2014 01:30:57 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu(1).exe
Error: (11/06/2014 01:30:51 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu(1).exe
Error: (11/06/2014 01:30:47 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu(1).exe
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 28%
Total physical RAM: 8115.27 MB
Available physical RAM: 5794.69 MB
Total Pagefile: 10035.27 MB
Available Pagefile: 7218.3 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:118.43 GB) (Free:79.47 GB) NTFS
Drive d: (DATA) (Fixed) (Total:914.91 GB) (Free:816.9 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E2A5DCFC)
Partition: GPT Partition Type.
========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: E2A5DCCD)
Partition: GPT Partition Type.
==================== End Of Log ============================
FRST Editior: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by Peter (administrator) on SCHREIBERLING on 06-11-2014 20:06:22
Running from C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3
Loaded Profile: Peter (Available profiles: Peter)
Platform: Windows 8.1 (Update 1) (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\Oyridurate\Oyridurate.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
() C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Farbar) C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3\FRST64 (1).exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-07-11] (Spotify Ltd)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9880;https=127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x254F479DA5F9CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL =
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\mvtrbyba.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-05]
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2014-03-21] (Acer Incorporated)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-18] (Microsoft Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [459496 2014-03-17] (Acer Incorporate)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation)
R2 Oyridurate; C:\Program Files (x86)\Oyridurate\Oyridurate.exe [4377560 2014-11-03] ()
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457960 2014-03-21] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-03-21] (Acer Incorporate)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [222952 2014-01-24] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-07-11] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-11] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-10-23] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [111336 2014-04-28] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-06] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-11-06] ()
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-07-11] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-06 19:59 - 2014-11-06 19:59 - 00031921 _____ () C:\Users\Peter\Desktop\Addition.txt
2014-11-06 19:48 - 2014-11-06 19:48 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-06 19:48 - 2014-11-06 19:48 - 00001127 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-06 19:48 - 2014-11-06 19:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-06 19:48 - 2014-11-06 19:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-06 19:47 - 2014-11-06 19:47 - 36250792 _____ () C:\Users\Peter\Downloads\Firefox_Setup_33.0.2DE.exe
2014-11-06 19:47 - 2014-11-06 19:47 - 00000190 _____ () C:\Users\Peter\Downloads\acv.js
2014-11-06 19:42 - 2014-11-06 20:06 - 00000000 ____D () C:\FRST
2014-11-06 19:25 - 2014-11-06 19:25 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2 (1).exe
2014-11-06 19:12 - 2014-11-06 19:12 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Peter\Downloads\revosetup95.exe
2014-11-06 19:12 - 2014-11-06 19:12 - 00001248 _____ () C:\Users\Peter\Desktop\Revo Uninstaller.lnk
2014-11-06 19:12 - 2014-11-06 19:12 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-11-06 18:55 - 2014-11-06 18:55 - 00000085 _____ () C:\Windows\wininit.ini
2014-11-06 18:21 - 2014-11-06 18:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Peter\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-06 17:49 - 2014-11-06 17:49 - 00004144 _____ () C:\Users\Peter\Downloads\adwcleaner_3.311 - Verknüpfung.lnk
2014-11-06 16:55 - 2014-11-06 16:55 - 01375089 _____ () C:\Users\Peter\Desktop\adwcleaner_3.311.exe
2014-11-06 16:24 - 2014-11-06 16:24 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2.exe
2014-11-06 16:05 - 2014-11-06 18:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 11:51 - 2014-11-06 17:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-06 11:51 - 2014-11-06 11:51 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-06 11:24 - 2014-11-06 18:57 - 00000000 ____D () C:\AdwCleaner
2014-11-06 11:15 - 2013-08-22 14:25 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20141106-111532.backup
2014-11-06 10:34 - 2014-11-06 10:33 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-11-06 09:09 - 2014-11-06 09:09 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-11-05 22:38 - 2014-11-06 10:38 - 00000064 _____ () C:\Users\Peter\AppData\Roaming\WB.CFG
2014-11-05 22:28 - 2014-11-05 22:28 - 00000000 _____ () C:\autoexec.bat
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-11-05 21:53 - 2014-11-05 21:53 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\mp3DirectCut
2014-11-05 21:02 - 2014-11-05 21:03 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-11-05 21:02 - 2014-11-05 21:02 - 00613042 _____ (CMI Limited) C:\Users\Peter\AppData\Local\nshC9BF.tmp
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Program Files\Realtek
2014-11-05 20:56 - 2000-01-01 01:00 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-05 20:56 - 2000-01-01 01:00 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02117424 _____ () C:\Windows\system32\SStudio.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-05 20:56 - 2000-01-01 01:00 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-05 20:56 - 2000-01-01 01:00 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-05 20:55 - 2014-11-05 20:55 - 00002242 _____ () C:\Windows\patsearch.bin
2014-11-05 20:55 - 2014-11-05 20:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNew_01009.Wdf
2014-11-05 20:55 - 2000-01-01 01:00 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll
2014-11-05 20:54 - 2014-11-05 20:54 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\AdvancedSystemProtector
2014-11-05 20:41 - 2014-11-05 20:41 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\WildTangent
2014-11-05 20:35 - 2014-11-05 20:35 - 00001075 _____ () C:\Users\Peter\Desktop\mp3DirectCut.lnk
2014-11-05 20:35 - 2014-11-05 20:35 - 00000000 ____D () C:\Program Files (x86)\mp3DirectCut
2014-11-05 20:34 - 2014-11-05 20:34 - 00000000 __SHD () C:\Program Files (x86)\Oyridurate
2014-11-05 19:35 - 2014-11-05 19:35 - 00000424 _____ () C:\Users\Peter\Desktop\Computer.lnk
2014-11-05 19:26 - 2014-11-05 19:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\Cyberlink
2014-11-05 19:21 - 2014-11-05 19:21 - 00001556 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00001263 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:21 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:20 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2014-11-05 19:19 - 2014-11-05 19:20 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\DVDVideoSoft
2014-11-05 19:18 - 2014-11-05 19:18 - 00000000 ____D () C:\Users\Peter\AppData\Local\PDF24
2014-11-05 19:16 - 2014-11-05 19:16 - 00001099 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk
2014-11-05 19:16 - 2014-11-05 19:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-11-05 19:07 - 2014-11-05 19:16 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-11-05 19:03 - 2014-11-05 19:03 - 00003042 _____ () C:\Windows\System32\Tasks\{5E866BDC-A4D5-4B4E-AEB9-317C2CA84F30}
2014-11-05 18:33 - 2014-11-05 18:33 - 00000000 ____D () C:\Users\Peter\AppData\Local\Macromedia
2014-11-05 18:20 - 2014-11-06 19:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-05 18:20 - 2014-11-05 18:21 - 00000000 ____D () C:\Users\Peter\AppData\Local\Adobe
2014-11-05 18:20 - 2014-11-05 18:20 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-05 18:17 - 2014-11-05 18:17 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer Aspire R7 Tutorial
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-05 18:02 - 2014-10-16 17:54 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 01089736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-05 18:01 - 2014-10-16 15:11 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-05 18:01 - 2014-10-15 01:48 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-05 18:00 - 2014-10-16 17:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00392008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00348488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-05 17:59 - 2014-10-16 17:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00500880 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00418112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-11-05 17:57 - 2014-11-05 17:57 - 00000000 ____D () C:\NVIDIA
2014-11-05 17:56 - 2014-11-05 17:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-05 17:53 - 2014-11-05 17:53 - 00001033 _____ () C:\Users\Public\Desktop\Kobo.lnk
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Windows\tmp
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Program Files (x86)\Kobo
2014-11-05 17:49 - 2014-11-06 13:05 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-11-05 17:49 - 2014-11-05 17:49 - 00000000 ____D () C:\Users\Peter\AppData\Local\SlimWare Utilities Inc
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Spotify
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Local\Spotify
2014-11-05 17:43 - 2014-11-05 17:43 - 00001045 _____ () C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-11-05 17:42 - 2014-11-05 17:43 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\BOM
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Biet-O-Matic
2014-11-05 17:42 - 2003-01-07 02:22 - 00015873 _____ () C:\Windows\SysWOW64\Inetde.dll
2014-11-05 17:42 - 2000-12-05 23:00 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mswinsck.ocx
2014-11-05 17:42 - 2000-10-01 23:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb6de.dll
2014-11-05 17:42 - 2000-05-22 15:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-11-05 17:42 - 2000-05-21 23:00 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomctl.ocx
2014-11-05 17:42 - 2000-04-03 19:06 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winskde.dll
2014-11-05 17:42 - 2000-04-03 19:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2014-11-05 17:42 - 1999-07-14 13:07 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdftde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscmcde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctde.dll
2014-11-05 17:42 - 1998-06-23 23:00 - 00209192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctl32.ocx
2014-11-05 17:41 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-11-05 17:41 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-11-05 17:31 - 2014-11-05 17:31 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-11-05 17:16 - 2014-11-05 17:16 - 00000466 _____ () C:\Users\Peter\Desktop\Eigene Dateien.lnk
2014-11-05 17:15 - 2014-11-05 17:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-11-05 17:14 - 2014-11-05 17:14 - 00001799 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-05 17:14 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files\iTunes
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-05 17:13 - 2014-11-05 17:13 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\iPod
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-11-05 17:12 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple
2014-11-05 17:01 - 2014-11-05 17:01 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Avira
2014-11-05 17:00 - 2014-10-23 14:02 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-11-05 17:00 - 2014-10-23 14:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-11-05 17:00 - 2014-10-23 14:01 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-05 16:58 - 2014-11-05 16:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-05 16:54 - 2014-11-05 17:07 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer
2014-11-05 16:54 - 2014-11-05 16:54 - 00000000 ____D () C:\Users\Peter\AppData\Local\AcerMedia
2014-11-05 16:53 - 2014-11-05 21:47 - 00000000 ____D () C:\Users\Public\OEM
2014-11-05 16:47 - 2014-11-06 19:53 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3585963361-1982867813-4056610559-1001
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Mozilla
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Local\Mozilla
2014-11-05 16:47 - 2014-11-05 16:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-11-05 16:46 - 2014-11-05 16:46 - 00002027 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-11-05 16:45 - 2014-11-06 15:59 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{03F41291-BAE8-4D20-A116-55AAC744BEE2}
2014-11-05 16:45 - 2014-11-06 10:31 - 00002170 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2014-11-05 16:45 - 2014-11-05 18:07 - 00002341 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieUserList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieSiteList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Macromedia
2014-11-05 16:44 - 2014-11-06 13:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\clear.fi
2014-11-05 16:44 - 2014-11-05 16:44 - 00000000 ____D () C:\Users\Peter\PicStream
2014-11-05 16:43 - 2014-11-06 19:31 - 00000000 __RDO () C:\Users\Peter\OneDrive
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Atheros
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-11-05 16:42 - 2014-11-05 22:27 - 00000000 ____D () C:\Users\Peter
2014-11-05 16:42 - 2014-11-05 18:57 - 00000000 ____D () C:\Users\Peter\AppData\Local\Packages
2014-11-05 16:42 - 2014-11-05 16:42 - 00001458 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-05 16:42 - 2014-11-05 16:42 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-11-05 16:42 - 2014-11-05 16:42 - 00000020 ___SH () C:\Users\Peter\ntuser.ini
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Vorlagen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Startmenü
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Netzwerkumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Lokale Einstellungen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Eigene Dateien
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Druckumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Musik
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Bilder
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Verlauf
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Adobe
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Local\VirtualStore
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Program Files\Accessory Store
2014-11-05 16:42 - 2014-07-11 21:18 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-05 16:42 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-05 16:35 - 2014-11-06 18:55 - 00596159 _____ () C:\Windows\WindowsUpdate.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-06 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-11-06 19:38 - 2014-07-11 21:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-11-06 19:38 - 2014-07-11 21:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-11-06 19:38 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-06 19:31 - 2014-03-18 10:54 - 00164410 _____ () C:\Windows\PFRO.log
2014-11-06 19:31 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-06 19:30 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-06 18:46 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-11-06 18:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\registration
2014-11-06 16:30 - 2014-06-11 11:19 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-06 16:10 - 2014-07-11 11:43 - 00016620 _____ () C:\Windows\DPINST.LOG
2014-11-06 16:10 - 2014-07-11 11:43 - 00001508 _____ () C:\Windows\Synaptics.log
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Acer
2014-11-06 12:11 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-11-05 22:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-11-05 22:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-05 22:27 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-11-05 20:59 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-05 20:58 - 2013-08-22 15:46 - 00023730 _____ () C:\Windows\setupact.log
2014-11-05 20:55 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\WildTangent
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-11-05 19:26 - 2014-07-11 12:07 - 00000000 ____D () C:\Users\Public\CyberLink
2014-11-05 19:26 - 2014-07-11 12:00 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-05 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-11-05 18:06 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-05 18:05 - 2014-07-11 11:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-05 18:03 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-05 18:02 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-05 18:01 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help
2014-11-05 17:46 - 2014-06-11 11:35 - 00000000 ___HD () C:\OEM
2014-11-05 17:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-05 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-11-05 16:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Peter\AppData\Local\Temp\617E3F57-C0F1-6F27-115B-3B3EB605D81B.dll
C:\Users\Peter\AppData\Local\Temp\617E3F57-C0F1-6F27-115B-3B3EB605D81B.exe
C:\Users\Peter\AppData\Local\Temp\69099606-7153-E9CD-352D-B081B00E7C3D.exe
C:\Users\Peter\AppData\Local\Temp\AcerPortalSetup.exe
C:\Users\Peter\AppData\Local\Temp\AOPSetup.exe
C:\Users\Peter\AppData\Local\Temp\avgnt.exe
C:\Users\Peter\AppData\Local\Temp\oct210D.tmp.exe
C:\Users\Peter\AppData\Local\Temp\Quarantine.exe
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite25226.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite41850.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite43515.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite47256.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite49959.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite54388.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite55550.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-11 10:43
==================== End Of Log ============================
ADW Cleaner: Code:
ATTFilter # AdwCleaner v3.311 - Bericht erstellt am 06/11/2014 um 20:12:16
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 8.1 (64 bits)
# Benutzername : Peter - SCHREIBERLING
# Gestartet von : C:\Users\Peter\Desktop\adwcleaner_3.311.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Tasks ] *****
Task Gefunden : APSnotifierPP2
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17037
-\\ Mozilla Firefox v33.0.2 (x86 de)
[ Datei : C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\mvtrbyba.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [6862 octets] - [06/11/2014 11:24:55]
AdwCleaner[R10].txt - [1876 octets] - [06/11/2014 18:54:23]
AdwCleaner[R11].txt - [1937 octets] - [06/11/2014 18:56:37]
AdwCleaner[R12].txt - [1104 octets] - [06/11/2014 20:12:16]
AdwCleaner[R1].txt - [990 octets] - [06/11/2014 11:30:03]
AdwCleaner[R2].txt - [1435 octets] - [06/11/2014 16:55:45]
AdwCleaner[R3].txt - [1495 octets] - [06/11/2014 16:58:17]
AdwCleaner[R4].txt - [1290 octets] - [06/11/2014 17:02:01]
AdwCleaner[R5].txt - [1411 octets] - [06/11/2014 17:11:50]
AdwCleaner[R6].txt - [1531 octets] - [06/11/2014 17:22:54]
AdwCleaner[R7].txt - [1635 octets] - [06/11/2014 17:49:48]
AdwCleaner[R8].txt - [1901 octets] - [06/11/2014 17:57:55]
AdwCleaner[R9].txt - [1815 octets] - [06/11/2014 18:13:42]
AdwCleaner[S0].txt - [5252 octets] - [06/11/2014 11:25:44]
AdwCleaner[S1].txt - [1018 octets] - [06/11/2014 11:31:10]
AdwCleaner[S2].txt - [1524 octets] - [06/11/2014 16:58:41]
AdwCleaner[S3].txt - [1320 octets] - [06/11/2014 17:03:21]
AdwCleaner[S4].txt - [1440 octets] - [06/11/2014 17:12:36]
AdwCleaner[S5].txt - [1447 octets] - [06/11/2014 17:37:20]
AdwCleaner[S6].txt - [1930 octets] - [06/11/2014 18:12:42]
AdwCleaner[S7].txt - [1966 octets] - [06/11/2014 18:57:12]
########## EOF - C:\AdwCleaner\AdwCleaner[R12].txt - [2184 octets] ##########
Besten Dank schonmal. VG Peter |
|
06.11.2014, 20:20
| #2 |
| /// the machine /// TB-Ausbilder    | HTML/Crypted.gen hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
07.11.2014, 14:26
| #3 |
| | HTML/Crypted.gen ADW Cleaner:
__________________AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.311 - Bericht erstellt am 06/11/2014 um 20:27:37
# Aktualisiert 30/09/2014 von Xplode
# Betriebssystem : Windows 8.1 (64 bits)
# Benutzername : Peter - SCHREIBERLING
# Gestartet von : C:\Users\Peter\Desktop\adwcleaner_3.311.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17037
-\\ Mozilla Firefox v33.0.2 (x86 de)
[ Datei : C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\mvtrbyba.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [6862 octets] - [06/11/2014 11:24:55]
AdwCleaner[R10].txt - [1876 octets] - [06/11/2014 18:54:23]
AdwCleaner[R11].txt - [1937 octets] - [06/11/2014 18:56:37]
AdwCleaner[R12].txt - [2265 octets] - [06/11/2014 20:12:16]
AdwCleaner[R13].txt - [2326 octets] - [06/11/2014 20:27:09]
AdwCleaner[R1].txt - [990 octets] - [06/11/2014 11:30:03]
AdwCleaner[R2].txt - [1435 octets] - [06/11/2014 16:55:45]
AdwCleaner[R3].txt - [1495 octets] - [06/11/2014 16:58:17]
AdwCleaner[R4].txt - [1290 octets] - [06/11/2014 17:02:01]
AdwCleaner[R5].txt - [1411 octets] - [06/11/2014 17:11:50]
AdwCleaner[R6].txt - [1531 octets] - [06/11/2014 17:22:54]
AdwCleaner[R7].txt - [1635 octets] - [06/11/2014 17:49:48]
AdwCleaner[R8].txt - [1901 octets] - [06/11/2014 17:57:55]
AdwCleaner[R9].txt - [1815 octets] - [06/11/2014 18:13:42]
AdwCleaner[S0].txt - [5252 octets] - [06/11/2014 11:25:44]
AdwCleaner[S1].txt - [1018 octets] - [06/11/2014 11:31:10]
AdwCleaner[S2].txt - [1524 octets] - [06/11/2014 16:58:41]
AdwCleaner[S3].txt - [1320 octets] - [06/11/2014 17:03:21]
AdwCleaner[S4].txt - [1440 octets] - [06/11/2014 17:12:36]
AdwCleaner[S5].txt - [1447 octets] - [06/11/2014 17:37:20]
AdwCleaner[S6].txt - [1930 octets] - [06/11/2014 18:12:42]
AdwCleaner[S7].txt - [1966 octets] - [06/11/2014 18:57:12]
AdwCleaner[S8].txt - [2214 octets] - [06/11/2014 20:27:37]
########## EOF - C:\AdwCleaner\AdwCleaner[S8].txt - [2274 octets] ##########
JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.6 (11.05.2014:1)
OS: Windows 8.1 x64
Ran by Peter on 06.11.2014 at 20:42:26,81
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
Successfully deleted: [File] C:\Windows\Tasks\APSnotifierPP2.job
Successfully deleted: [File] "C:\Windows\wininit.ini"
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.11.2014 at 20:44:14,56
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
MBAM: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 06.11.2014 Suchlauf-Zeit: 20:47:29 Logdatei: mbam.txt Administrator: Ja Version: 2.00.3.1025 Malware Datenbank: v2014.11.06.06 Rootkit Datenbank: v2014.11.01.02 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Peter Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 323985 Verstrichene Zeit: 7 Min, 25 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 1 PUM.Bad.Proxy, HKU\S-1-5-21-3585963361-1982867813-4056610559-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:9880;https=127.0.0.1:9880, Löschen bei Neustart, [f896b1876913dd598efc132350b343bd] Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 1 PUP.Optional.AddLyrics, C:\Users\Peter\AppData\Local\Temp\69099606-7153-E9CD-352D-B081B00E7C3D.exe, In Quarantäne, [e2acff399ddf91a5ad5833acd13004fc], Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by Peter (administrator) on SCHREIBERLING on 07-11-2014 14:21:08
Running from C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\XAW68D2Q
Loaded Profile: Peter (Available profiles: Peter)
Platform: Windows 8.1 (Update 1) (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\Oyridurate\Oyridurate.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
() C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
() C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\Facebook.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20413_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-07-11] (Spotify Ltd)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9880;https=127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x254F479DA5F9CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL =
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\mvtrbyba.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-05]
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2014-03-21] (Acer Incorporated)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-18] (Microsoft Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [459496 2014-03-17] (Acer Incorporate)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation)
R2 Oyridurate; C:\Program Files (x86)\Oyridurate\Oyridurate.exe [4377560 2014-11-03] ()
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457960 2014-03-21] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-03-21] (Acer Incorporate)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [222952 2014-01-24] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-07-11] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-11] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-10-23] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [111336 2014-04-28] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-11-06] ()
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-07-11] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-06 21:00 - 2014-11-06 21:00 - 00001548 _____ () C:\Users\Peter\Desktop\mbam.txt
2014-11-06 20:44 - 2014-11-06 20:44 - 00000737 _____ () C:\Users\Peter\Desktop\JRT.txt
2014-11-06 20:42 - 2014-11-06 20:42 - 00000000 ____D () C:\Windows\ERUNT
2014-11-06 20:41 - 2014-11-06 20:41 - 01706359 _____ (Thisisu) C:\Users\Peter\Downloads\JRT_6.3.5.exe
2014-11-06 20:41 - 2014-11-05 23:14 - 01706939 _____ (Thisisu) C:\Users\Peter\Desktop\JRT_NEW.exe
2014-11-06 19:59 - 2014-11-06 19:59 - 00031921 _____ () C:\Users\Peter\Desktop\Addition.txt
2014-11-06 19:48 - 2014-11-06 19:48 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-06 19:48 - 2014-11-06 19:48 - 00001127 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-06 19:48 - 2014-11-06 19:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-06 19:48 - 2014-11-06 19:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-06 19:47 - 2014-11-06 19:47 - 36250792 _____ () C:\Users\Peter\Downloads\Firefox_Setup_33.0.2DE.exe
2014-11-06 19:47 - 2014-11-06 19:47 - 00000190 _____ () C:\Users\Peter\Downloads\acv.js
2014-11-06 19:42 - 2014-11-07 14:21 - 00000000 ____D () C:\FRST
2014-11-06 19:25 - 2014-11-06 19:25 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2 (1).exe
2014-11-06 19:12 - 2014-11-06 19:12 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Peter\Downloads\revosetup95.exe
2014-11-06 19:12 - 2014-11-06 19:12 - 00001248 _____ () C:\Users\Peter\Desktop\Revo Uninstaller.lnk
2014-11-06 19:12 - 2014-11-06 19:12 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-11-06 18:21 - 2014-11-06 18:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Peter\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-06 17:49 - 2014-11-06 17:49 - 00004144 _____ () C:\Users\Peter\Downloads\adwcleaner_3.311 - Verknüpfung.lnk
2014-11-06 16:55 - 2014-11-06 16:55 - 01375089 _____ () C:\Users\Peter\Desktop\adwcleaner_3.311.exe
2014-11-06 16:24 - 2014-11-06 16:24 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2.exe
2014-11-06 16:05 - 2014-11-06 18:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 11:51 - 2014-11-06 20:59 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-06 11:51 - 2014-11-06 11:51 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-06 11:24 - 2014-11-06 20:27 - 00000000 ____D () C:\AdwCleaner
2014-11-06 11:15 - 2013-08-22 14:25 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20141106-111532.backup
2014-11-06 10:34 - 2014-11-06 10:33 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-11-06 09:09 - 2014-11-06 09:09 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-11-05 22:38 - 2014-11-06 10:38 - 00000064 _____ () C:\Users\Peter\AppData\Roaming\WB.CFG
2014-11-05 22:28 - 2014-11-05 22:28 - 00000000 _____ () C:\autoexec.bat
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-11-05 21:53 - 2014-11-05 21:53 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\mp3DirectCut
2014-11-05 21:02 - 2014-11-05 21:02 - 00613042 _____ (CMI Limited) C:\Users\Peter\AppData\Local\nshC9BF.tmp
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Program Files\Realtek
2014-11-05 20:56 - 2000-01-01 01:00 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-05 20:56 - 2000-01-01 01:00 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02117424 _____ () C:\Windows\system32\SStudio.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-05 20:56 - 2000-01-01 01:00 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-05 20:56 - 2000-01-01 01:00 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-05 20:55 - 2014-11-05 20:55 - 00002242 _____ () C:\Windows\patsearch.bin
2014-11-05 20:55 - 2014-11-05 20:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNew_01009.Wdf
2014-11-05 20:55 - 2000-01-01 01:00 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll
2014-11-05 20:54 - 2014-11-05 20:54 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\AdvancedSystemProtector
2014-11-05 20:41 - 2014-11-05 20:41 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\WildTangent
2014-11-05 20:35 - 2014-11-05 20:35 - 00001075 _____ () C:\Users\Peter\Desktop\mp3DirectCut.lnk
2014-11-05 20:35 - 2014-11-05 20:35 - 00000000 ____D () C:\Program Files (x86)\mp3DirectCut
2014-11-05 20:34 - 2014-11-05 20:34 - 00000000 __SHD () C:\Program Files (x86)\Oyridurate
2014-11-05 19:35 - 2014-11-05 19:35 - 00000424 _____ () C:\Users\Peter\Desktop\Computer.lnk
2014-11-05 19:26 - 2014-11-05 19:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\Cyberlink
2014-11-05 19:21 - 2014-11-05 19:21 - 00001556 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00001263 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:21 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:20 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2014-11-05 19:19 - 2014-11-05 19:20 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\DVDVideoSoft
2014-11-05 19:18 - 2014-11-05 19:18 - 00000000 ____D () C:\Users\Peter\AppData\Local\PDF24
2014-11-05 19:16 - 2014-11-05 19:16 - 00001099 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk
2014-11-05 19:16 - 2014-11-05 19:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-11-05 19:07 - 2014-11-05 19:16 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-11-05 19:03 - 2014-11-05 19:03 - 00003042 _____ () C:\Windows\System32\Tasks\{5E866BDC-A4D5-4B4E-AEB9-317C2CA84F30}
2014-11-05 18:33 - 2014-11-05 18:33 - 00000000 ____D () C:\Users\Peter\AppData\Local\Macromedia
2014-11-05 18:20 - 2014-11-06 22:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-05 18:20 - 2014-11-05 18:21 - 00000000 ____D () C:\Users\Peter\AppData\Local\Adobe
2014-11-05 18:20 - 2014-11-05 18:20 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-05 18:17 - 2014-11-05 18:17 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer Aspire R7 Tutorial
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-05 18:02 - 2014-10-16 17:54 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 01089736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-05 18:01 - 2014-10-16 15:11 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-05 18:01 - 2014-10-15 01:48 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-05 18:00 - 2014-10-16 17:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00392008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00348488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-05 17:59 - 2014-10-16 17:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00500880 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00418112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-11-05 17:57 - 2014-11-05 17:57 - 00000000 ____D () C:\NVIDIA
2014-11-05 17:56 - 2014-11-05 17:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-05 17:53 - 2014-11-05 17:53 - 00001033 _____ () C:\Users\Public\Desktop\Kobo.lnk
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Windows\tmp
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Program Files (x86)\Kobo
2014-11-05 17:49 - 2014-11-06 13:05 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-11-05 17:49 - 2014-11-05 17:49 - 00000000 ____D () C:\Users\Peter\AppData\Local\SlimWare Utilities Inc
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Spotify
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Local\Spotify
2014-11-05 17:43 - 2014-11-05 17:43 - 00001045 _____ () C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-11-05 17:42 - 2014-11-05 17:43 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\BOM
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Biet-O-Matic
2014-11-05 17:42 - 2003-01-07 02:22 - 00015873 _____ () C:\Windows\SysWOW64\Inetde.dll
2014-11-05 17:42 - 2000-12-05 23:00 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mswinsck.ocx
2014-11-05 17:42 - 2000-10-01 23:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb6de.dll
2014-11-05 17:42 - 2000-05-22 15:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-11-05 17:42 - 2000-05-21 23:00 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomctl.ocx
2014-11-05 17:42 - 2000-04-03 19:06 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winskde.dll
2014-11-05 17:42 - 2000-04-03 19:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2014-11-05 17:42 - 1999-07-14 13:07 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdftde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscmcde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctde.dll
2014-11-05 17:42 - 1998-06-23 23:00 - 00209192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctl32.ocx
2014-11-05 17:41 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-11-05 17:41 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-11-05 17:31 - 2014-11-05 17:31 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-11-05 17:16 - 2014-11-05 17:16 - 00000466 _____ () C:\Users\Peter\Desktop\Eigene Dateien.lnk
2014-11-05 17:15 - 2014-11-05 17:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-11-05 17:14 - 2014-11-05 17:14 - 00001799 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-05 17:14 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files\iTunes
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-05 17:13 - 2014-11-05 17:13 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\iPod
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-11-05 17:12 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple
2014-11-05 17:01 - 2014-11-05 17:01 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Avira
2014-11-05 17:00 - 2014-10-23 14:02 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-11-05 17:00 - 2014-10-23 14:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-11-05 17:00 - 2014-10-23 14:01 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-05 16:58 - 2014-11-05 16:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-05 16:54 - 2014-11-05 17:07 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer
2014-11-05 16:54 - 2014-11-05 16:54 - 00000000 ____D () C:\Users\Peter\AppData\Local\AcerMedia
2014-11-05 16:53 - 2014-11-05 21:47 - 00000000 ____D () C:\Users\Public\OEM
2014-11-05 16:47 - 2014-11-06 21:55 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3585963361-1982867813-4056610559-1001
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Mozilla
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Local\Mozilla
2014-11-05 16:47 - 2014-11-05 16:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-11-05 16:46 - 2014-11-05 16:46 - 00002027 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-11-05 16:45 - 2014-11-07 13:43 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{03F41291-BAE8-4D20-A116-55AAC744BEE2}
2014-11-05 16:45 - 2014-11-06 10:31 - 00002170 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2014-11-05 16:45 - 2014-11-05 18:07 - 00002341 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieUserList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieSiteList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Macromedia
2014-11-05 16:44 - 2014-11-06 13:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\clear.fi
2014-11-05 16:44 - 2014-11-05 16:44 - 00000000 ____D () C:\Users\Peter\PicStream
2014-11-05 16:43 - 2014-11-06 20:57 - 00000000 __RDO () C:\Users\Peter\OneDrive
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Atheros
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-11-05 16:42 - 2014-11-05 22:27 - 00000000 ____D () C:\Users\Peter
2014-11-05 16:42 - 2014-11-05 18:57 - 00000000 ____D () C:\Users\Peter\AppData\Local\Packages
2014-11-05 16:42 - 2014-11-05 16:42 - 00001458 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-05 16:42 - 2014-11-05 16:42 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-11-05 16:42 - 2014-11-05 16:42 - 00000020 ___SH () C:\Users\Peter\ntuser.ini
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Vorlagen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Startmenü
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Netzwerkumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Lokale Einstellungen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Eigene Dateien
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Druckumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Musik
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Bilder
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Verlauf
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Adobe
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Local\VirtualStore
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Program Files\Accessory Store
2014-11-05 16:42 - 2014-07-11 21:18 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-05 16:42 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-05 16:35 - 2014-11-07 14:00 - 01088823 _____ () C:\Windows\WindowsUpdate.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-07 14:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-11-06 21:03 - 2014-07-11 21:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-11-06 21:03 - 2014-07-11 21:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-11-06 21:03 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-06 20:56 - 2014-03-18 10:54 - 00165120 _____ () C:\Windows\PFRO.log
2014-11-06 20:56 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-06 20:56 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-06 18:46 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-11-06 18:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\registration
2014-11-06 16:30 - 2014-06-11 11:19 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-06 16:10 - 2014-07-11 11:43 - 00016620 _____ () C:\Windows\DPINST.LOG
2014-11-06 16:10 - 2014-07-11 11:43 - 00001508 _____ () C:\Windows\Synaptics.log
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Acer
2014-11-06 12:11 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-11-05 22:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-11-05 22:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-05 22:27 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-11-05 20:59 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-05 20:58 - 2013-08-22 15:46 - 00023730 _____ () C:\Windows\setupact.log
2014-11-05 20:55 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\WildTangent
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-11-05 19:26 - 2014-07-11 12:07 - 00000000 ____D () C:\Users\Public\CyberLink
2014-11-05 19:26 - 2014-07-11 12:00 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-05 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-11-05 18:06 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-05 18:05 - 2014-07-11 11:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-05 18:03 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-05 18:02 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-05 18:01 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help
2014-11-05 17:46 - 2014-06-11 11:35 - 00000000 ___HD () C:\OEM
2014-11-05 17:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-05 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-11-05 16:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Peter\AppData\Local\Temp\617E3F57-C0F1-6F27-115B-3B3EB605D81B.dll
C:\Users\Peter\AppData\Local\Temp\617E3F57-C0F1-6F27-115B-3B3EB605D81B.exe
C:\Users\Peter\AppData\Local\Temp\AcerPortalSetup.exe
C:\Users\Peter\AppData\Local\Temp\AOPSetup.exe
C:\Users\Peter\AppData\Local\Temp\avgnt.exe
C:\Users\Peter\AppData\Local\Temp\oct210D.tmp.exe
C:\Users\Peter\AppData\Local\Temp\Quarantine.exe
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite25226.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite41850.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite43515.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite47256.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite49959.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite54388.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite55550.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-11 10:43
==================== End Of Log ============================
--- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-11-2014
Ran by Peter at 2014-11-07 14:21:32
Running from C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\XAW68D2Q
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.04.3005 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.00.2013.0 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8105 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8104 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3012 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8106 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.02.2003 - Acer Incorporated)
Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.01.3003 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.01.3003 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2001.4 - Acer Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.3721 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3914.57 - CyberLink Corp.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Free YouTube to MP3 Converter version 3.12.49.1022 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.49.1022 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.1 - Genesys Logic)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8101 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Kobo (HKLM-x32\...\Kobo) (Version: 3.6.0 - Kobo Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.2 (x86 de)) (Version: 33.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Pokki Start Menu (HKCU\...\Pokki_Start_Menu) (Version: 0.269.3.181 - )
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.31.423.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3585963361-1982867813-4056610559-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
06-11-2014 12:16:11 06 11 2014
06-11-2014 17:36:51 Wiederherstellungsvorgang
06-11-2014 18:20:04 Revo Uninstaller's restore point - Mozilla Maintenance Service
06-11-2014 18:20:52 Revo Uninstaller's restore point - Mozilla Firefox 33.0.2 (x86 de)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2014-11-06 11:15 - 00450713 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {02686A44-510D-4FFE-99A4-041543659CC8} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-03-17] (Acer Incorporate)
Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {22A9A091-6A47-4678-B9FF-CF3754ED3B0D} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-03-21] (Acer Incorporated)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {337BFE19-BD4F-41FC-9E3B-FEDC50BB759A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-05] (Adobe Systems Incorporated)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DD03667-4424-4D20-89CA-296485F9DFB3} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B0D9628A-7251-4606-A034-6F00EF25E986} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {BDD7E3DA-F247-47E7-801E-AE69337BBED2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {BF58E14B-1069-43E0-80DD-BB525A2FD9CD} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {C907D47F-769C-4156-97F0-4CEBDE33A7DE} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-03-18] (Acer Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D08F1AB1-8F5E-4779-937E-7A750E734C77} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {D0D94DBC-EFEA-47B5-993C-8CA15FC16D6A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DD78B00E-7325-43AE-A4A3-AC2C2B092A72} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {E2ACF668-4308-4463-9ECA-B3DD4467FB01} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {E3BDCA69-0278-4D27-AE94-D673C4802877} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {E661A666-E4A2-4336-8876-9CCDE4A10367} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-01-24] (TODO: <Company name>)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-11-05 18:01 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-11-05 20:34 - 2014-11-03 13:56 - 04377560 ___SH () C:\Program Files (x86)\Oyridurate\Oyridurate.exe
2014-07-11 12:03 - 2012-04-24 11:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2014-11-05 20:34 - 2014-11-05 20:34 - 00160728 ____R () C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe
2014-02-25 21:14 - 2014-02-25 21:14 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-02-25 21:11 - 2014-02-25 21:11 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-02-25 21:17 - 2014-02-25 21:17 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-06-11 11:38 - 2014-03-07 17:21 - 00080312 _____ () C:\Windows\system32\igfxexps.dll
2014-11-05 17:53 - 2014-11-05 17:53 - 02394624 _____ () C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\Facebook.exe
2014-11-06 10:19 - 2014-11-06 10:19 - 05185024 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.UI.Xaml\58afb3c922fe504503f07ade2e88ccfb\Windows.UI.Xaml.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 01782784 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.App640a3541#\43b92b6dbc9eb61983817ea32346d510\Windows.ApplicationModel.ni.dll
2014-11-05 17:53 - 2014-11-05 17:53 - 00123392 _____ () C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\Facebook-Win8-Base.DLL
2014-11-05 17:53 - 2014-11-05 17:53 - 00099840 _____ () C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\Facebook-Base.DLL
2014-11-05 17:53 - 2014-11-05 17:53 - 00264192 _____ () C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\Facebook-Models.DLL
2014-11-05 17:53 - 2014-11-05 17:53 - 01884672 _____ () C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\Facebook-Services.DLL
2014-11-06 10:19 - 2014-11-06 10:19 - 00632320 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Security\00ce12e0481a881d419350afd79395ef\Windows.Security.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 01278464 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Storage\ba65f033632f4fc480cc45bc72bf25e4\Windows.Storage.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 00363520 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Foundation\057b7043f4868b76c209d9c426b80743\Windows.Foundation.ni.dll
2014-11-05 17:53 - 2014-11-05 17:53 - 00120320 _____ () C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\Bing.Maps.winmd
2014-11-06 10:20 - 2014-11-06 10:20 - 02019840 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Devices\0b4b3f23bdebd1d056b32b31e2f746bb\Windows.Devices.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 01459712 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.UI\926020eb508f6968545d6a51fb661fad\Windows.UI.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 01259520 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Networking\8f6e236cd6041c81411f85852722670b\Windows.Networking.ni.dll
2014-11-06 10:20 - 2014-11-06 10:20 - 00207872 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.System\d1c5274ccd6fb2b4b5dbddd0f0ca6c6e\Windows.System.ni.dll
2014-11-06 10:20 - 2014-11-06 10:20 - 00467456 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Graphics\ea818a24554fc2db9a73de1e79afb286\Windows.Graphics.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 00521216 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Data\d07f690ce5d3a2de7c9089a6200d64db\Windows.Data.ni.dll
2014-11-05 17:53 - 2014-11-05 17:53 - 00007680 _____ () C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\Facebook-Notifications.DLL
2014-11-05 17:53 - 2014-11-05 17:53 - 00101376 _____ () C:\Program Files\WindowsApps\Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt\NotificationsExtensions.winmd
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-05 20:34 - 2014-03-07 19:56 - 00117262 ___SH () C:\Program Files (x86)\Oyridurate\libgcc_s_dw2-1.dll
2014-11-05 20:34 - 2014-03-07 19:56 - 00970766 ___SH () C:\Program Files (x86)\Oyridurate\libstdc++-6.dll
2014-11-06 19:48 - 2014-10-28 03:01 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-07-11 11:39 - 2013-12-10 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Peter\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-3585963361-1982867813-4056610559-500 - Administrator - Disabled)
Gast (S-1-5-21-3585963361-1982867813-4056610559-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3585963361-1982867813-4056610559-1003 - Limited - Enabled)
Peter (S-1-5-21-3585963361-1982867813-4056610559-1001 - Administrator - Enabled) => C:\Users\Peter
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/07/2014 01:55:37 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/06/2014 09:41:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147467259. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (11/06/2014 09:41:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147467259. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (11/06/2014 09:41:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147467259. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (11/06/2014 09:41:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147467259. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (11/06/2014 09:41:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147467259. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (11/06/2014 09:40:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147467259. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (11/06/2014 09:40:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147467259. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (11/06/2014 09:40:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147467259. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
System errors:
=============
Error: (11/06/2014 08:56:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Microsoft Office Sessions:
=========================
Error: (11/07/2014 01:55:37 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/06/2014 09:41:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2147467259
Error: (11/06/2014 09:41:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2147467259
Error: (11/06/2014 09:41:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2147467259
Error: (11/06/2014 09:41:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2147467259
Error: (11/06/2014 09:41:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2147467259
Error: (11/06/2014 09:40:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2147467259
Error: (11/06/2014 09:40:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2147467259
Error: (11/06/2014 09:40:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SCHREIBERLING)
Description: Microsoft.BingWeather_8wekyb3d8bbwe!App-2147467259
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 31%
Total physical RAM: 8115.27 MB
Available physical RAM: 5578.74 MB
Total Pagefile: 10035.27 MB
Available Pagefile: 7204.58 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:118.43 GB) (Free:78.95 GB) NTFS
Drive d: (DATA) (Fixed) (Total:914.91 GB) (Free:816.9 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E2A5DCFC)
Partition: GPT Partition Type.
========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: E2A5DCCD)
Partition: GPT Partition Type.
==================== End Of Log ============================
|
|
08.11.2014, 07:48
| #4 |
| /// the machine /// TB-Ausbilder | HTML/Crypted.genESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.11.2014, 11:25
| #5 |
| | HTML/Crypted.gen Danke für die Mühe!! ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=657a9eb59d34db4d868ad6e256ac48a9
# engine=20981
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-08 09:23:25
# local_time=2014-11-08 10:23:25 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 76017 1369290 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 10328680 20255373 0 0
# scanned=187413
# found=97
# cleaned=0
# scan_time=52841
sh=BBC3C1D7974A345C9217EB72345E07F995493F99 ft=1 fh=e9495d153d2a63a7 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$R0Q22TF.exe"
sh=2B33CAEEB2F0B565AB6FABAB607A2AA2ED43D68D ft=1 fh=deb74f8b1bea64b8 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$R5SFG5I.exe"
sh=58A4CE1C5CF8E6C3993BE563DDCA9A2A4C537F84 ft=1 fh=b2dbf45644188434 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$R8R587G.exe"
sh=D61222BAD46C2A2958880BFF01C3204EDB8C87F2 ft=1 fh=14ef727b7a14e275 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$RCX3N6M.exe"
sh=B63166EF9A277A8C8D9DCEBB3BFDDADF50697EC2 ft=1 fh=a4b95bd26759f028 vn="Variante von MSIL/Solimba.AH evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$RR4R6X3.exe"
sh=CF68AD719200D7709F4173ADF0A02C883A269DA9 ft=1 fh=4efc609afe76a58b vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$RVV975W.exe"
sh=FA55D765ACECF0E142995558447BA1C0C64A95B9 ft=1 fh=8a5fed32a6adae19 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\p2Xk8Izte1Ac3T.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\P4nPDZUXJXHJvq.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\rWFRkBCq6MPEh7.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\wqmJb8fCIbp8Aq.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\wYJ3sUiRQ6gK2L.x64.dll"
sh=A4BE0F16C92EB88314908B3E7DACB6F43C7CD83B ft=1 fh=5cde2c9dc14beeb4 vn="Variante von Win32/Adware.ObronaAds.C Anwendung" ac=I fn="C:\Program Files (x86)\Oyridurate\HttpsProxy.exe"
sh=6F9C3002FF969E73868185A3AAF6D107499423DF ft=1 fh=303bda7a70ed4f0f vn="Variante von Win32/Adware.ObronaAds.B Anwendung" ac=I fn="C:\Program Files (x86)\Oyridurate\Oyridurate.exe"
sh=FA463A6559B35E634236C91BF8D881EC5890DAE4 ft=1 fh=e12f930a29405c78 vn="Win32/Adware.ObronaAds.B Anwendung" ac=I fn="C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\YoutubeAdBlocke\Nh4S37twTnBTTs.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\YoutubeAdBlocke\UWQ6ZV7n4q5XYm.x64.dll"
sh=29531FF34ED520FDEF40B88D1C27B77D4064C1B7 ft=1 fh=6f280fcdcbb1a73e vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3\OrbiterInstaller[1].exe"
sh=A01CAE4A9C48BEB8A490C3E88CB03F9B95C31671 ft=1 fh=5c1219a5576ddaa1 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3\sp-downloader[2].exe"
sh=FB24FEA961DF1EC689422F05A8D80349A05F2857 ft=1 fh=bbfe88937d20f9ad vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\QDAPH3AH\SPSetup[2].exe"
sh=7028F239FAC673EE7DC7772ACC75D759EA73837D ft=1 fh=e769f095fe49f653 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\QDAPH3AH\spstub[1].exe"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\XAW68D2Q\embededstub[3].exe"
sh=BBC3C1D7974A345C9217EB72345E07F995493F99 ft=1 fh=e9495d153d2a63a7 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\02FD.exe"
sh=58A4CE1C5CF8E6C3993BE563DDCA9A2A4C537F84 ft=1 fh=b2dbf45644188434 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0f090cA91f8D.exe"
sh=2B33CAEEB2F0B565AB6FABAB607A2AA2ED43D68D ft=1 fh=deb74f8b1bea64b8 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\1bEe8DD78.exe"
sh=2B33CAEEB2F0B565AB6FABAB607A2AA2ED43D68D ft=1 fh=deb74f8b1bea64b8 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\22BcED7B1D99.exe"
sh=D61222BAD46C2A2958880BFF01C3204EDB8C87F2 ft=1 fh=14ef727b7a14e275 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\8227C6D.exe"
sh=D61222BAD46C2A2958880BFF01C3204EDB8C87F2 ft=1 fh=14ef727b7a14e275 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\97a95D4.exe"
sh=CF68AD719200D7709F4173ADF0A02C883A269DA9 ft=1 fh=4efc609afe76a58b vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\98601ECA71F2.exe"
sh=BBC3C1D7974A345C9217EB72345E07F995493F99 ft=1 fh=e9495d153d2a63a7 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\aebFC8e58cC.exe"
sh=BBC3C1D7974A345C9217EB72345E07F995493F99 ft=1 fh=e9495d153d2a63a7 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\C6c9E00.exe"
sh=2B33CAEEB2F0B565AB6FABAB607A2AA2ED43D68D ft=1 fh=deb74f8b1bea64b8 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\cE90fE2A48afb.exe"
sh=CF68AD719200D7709F4173ADF0A02C883A269DA9 ft=1 fh=4efc609afe76a58b vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\E6fBA1E2632c.exe"
sh=F89F23E36ACF9072392947AC20B7B00B9AA7E52B ft=1 fh=e3b48434044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\ICReinstall_nst6761.tmp"
sh=C97391140E15F5AEBCEB26D74F06D6EF7C456FA7 ft=1 fh=cc4d43e5044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\ICReinstall_nsw348B.tmp"
sh=49F1FA6CA4E734A511A6B593607D1DAA5CC99EE7 ft=1 fh=2bcff2ae1564f066 vn="Win32/LiveSupport.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\LiveSupport_setup.exe"
sh=9C68E8581B1D84E4517A01DC1EE4BADC988C69A7 ft=1 fh=d0caa54b044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\nsgCE92.tmp"
sh=F89F23E36ACF9072392947AC20B7B00B9AA7E52B ft=1 fh=e3b48434044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\nst6761.tmp"
sh=C97391140E15F5AEBCEB26D74F06D6EF7C456FA7 ft=1 fh=cc4d43e5044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\nsw348B.tmp"
sh=7975BD623B41BEA204B24876D0C97CFA28CDA82C ft=1 fh=8e4c9cc9b97d0273 vn="Variante von Win32/OptimizerEliteMax.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\optprosetup.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0627Abc313b0\temp\DriverProSetup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0627Abc313b0\temp\OpProSetup.exe"
sh=385C75B4F5847C5CC019CD524C97C1D06A41BBF9 ft=1 fh=c71c0011030ebcb3 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0627Abc313b0\temp\setupespl.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0627Abc313b0\temp\usetup.exe"
sh=029569A2F51A3EBFC0826DDB9746855E38CB6C57 ft=1 fh=c71c0011f7a92f06 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\092b8\temp\BIT5385.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\092b8\temp\embededstub.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\DriverProSetup.exe"
sh=B4D8A5683D75141997054AF17ADB97491D325F19 ft=1 fh=c71c00119fda1462 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\extIE_setup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\OpProSetup.exe"
sh=BFBB7FB9B6EF48BCD09BB552FCCC98DD2A6F04C8 ft=1 fh=c71c0011d61cbdd4 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\setupbc.exe"
sh=31CE8D1F7F20DF43E07F851D6C0D3E80161DBCDC ft=1 fh=c71c0011f0a75287 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\setupespl.exe"
sh=620610EB5A45BF9651D83B22E8B435E33B207998 ft=1 fh=c71c0011460e7375 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\setupytb.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\usetup.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\DriverProSetup.exe"
sh=0340B656AB6384833E6E46C9CB6446D3092A9E94 ft=1 fh=c71c00110dc116e7 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\extIE_setup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\OpProSetup.exe"
sh=5D07B5D713D59F2A1CA2E10B8754CF37238EF933 ft=1 fh=c71c0011fdf8fff4 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\setupbc.exe"
sh=B6AF1FA13931DE651399E775FCE29F949B06A37C ft=1 fh=c71c00113a374cf9 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\setupespl.exe"
sh=0E00DB688576645AA2841996C03515D7AC2991D8 ft=1 fh=c71c00115d556510 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\setupytb.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\usetup.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\DriverProSetup.exe"
sh=017F5119A780EBE7CA960DDC56B990C14002B74B ft=1 fh=c71c0011aeed6bbc vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\extIE_setup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\OpProSetup.exe"
sh=78408546D60F474C6F530FF37EC85022EE7B5A79 ft=1 fh=c71c0011d029ad0f vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\setupbc.exe"
sh=DE65670E9C3F06F8B9B5E80179081986C7DD9F16 ft=1 fh=c71c00116d1249bd vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\setupespl.exe"
sh=3D8A2063D3EC9695D9D25173592E9CC6EE8CD815 ft=1 fh=c71c0011ac292516 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\setupytb.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\usetup.exe"
sh=B84865DA4D5E21DDF9A81D979C91628E122E9508 ft=1 fh=c71c001104439c4d vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\69F9407C04c81\temp\BIT53B5.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\69F9407C04c81\temp\embededstub.exe"
sh=1E83E6100A347399EAA46DC441A9EF08C829E7D0 ft=1 fh=c71c0011ca1fba6a vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\7213fd\temp\BIT5BE6.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\7213fd\temp\embededstub.exe"
sh=FB3A298D8C3FBA34480BA05C827A965D12896F19 ft=1 fh=c71c001128bd9ef4 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\8e431a7345\temp\BIT713C.tmp"
sh=58CD1C59418530A4D87CFEFD480567E3349E53CA ft=1 fh=c71c00115cac5112 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\8F25851\temp\BIT58E7.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\8F25851\temp\embededstub.exe"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\96315F38E24f3\temp\embededstub.exe"
sh=5BF1CEF96D9EAEC5286F290997B63F89DBEC451E ft=1 fh=c71c0011a89a97c1 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\96315F38E24f3\temp\setupespl.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\96315F38E24f3\temp\usetup.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\9a5f6F91\temp\DriverProSetup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\9a5f6F91\temp\OpProSetup.exe"
sh=464814DEACC9A2235B4A5EB910370F0DAD0564A2 ft=1 fh=c71c001130c30e6f vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\9a5f6F91\temp\setupespl.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\9a5f6F91\temp\usetup.exe"
sh=67203BAA0269399106D0EEA28B20630343AD3E5C ft=1 fh=c71c0011047ee5b6 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\CEe5c871E\temp\BIT5433.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\CEe5c871E\temp\embededstub.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\d026cE322F\temp\DriverProSetup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\d026cE322F\temp\OpProSetup.exe"
sh=DFF7F414B8F55C10F75A53E016CC7119062AFA22 ft=1 fh=c71c0011638f8159 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\d026cE322F\temp\setupespl.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\d026cE322F\temp\usetup.exe"
sh=C448540A16541F598ADF4C55327300EBC1320B29 ft=1 fh=c71c0011d167ffc2 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\D1787342\temp\BIT520.tmp"
sh=171322FE156640796FAFB4D0C01E6A4B9751FA40 ft=1 fh=c71c00110c2a1d76 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\FC89eF2D\temp\BITA08D.tmp"
sh=E11905B12E1CA3260FE959FAFA9236E65E467672 ft=1 fh=5954aafa65873d8a vn="Win32/VOPackage.AO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\102251_stp\Generic_vo.exe"
sh=2AE12E87FC63FD6A16DF5C7EFE08ED882578B34C ft=1 fh=2407a90c81eb5dd5 vn="Variante von Win32/TrojanDropper.MsiDrop.A Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\102544_stp\Installer.exe"
sh=E5E4E3DF67EF76B47C8993AC1F35236577124934 ft=1 fh=b4ebd1af99768d94 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\102710_stp\termtutor-setup-1.9.0.8.exe"
sh=A75689B482CE69498C64E0D03F3BA0161A1B8589 ft=1 fh=7ceab3139bdab47f vn="Win32/Systweak.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\102765_stp\rcpsetup_adppi15_adppi15.exe"
sh=E11905B12E1CA3260FE959FAFA9236E65E467672 ft=1 fh=5954aafa65873d8a vn="Win32/VOPackage.AO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\841324_stp\Generic_vo.exe"
sh=E11905B12E1CA3260FE959FAFA9236E65E467672 ft=1 fh=5954aafa65873d8a vn="Win32/VOPackage.AO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\9400426_stp\Generic_vo.exe"
sh=52431986A6DC96088A3DE58582A5E94D25C1D717 ft=1 fh=3f5c956a5a33ed8f vn="Variante von MSIL/Solimba.AC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\n2053\s2053.exe"
sh=ABBB8C6B101FF31CD3F27E2CC7CB784148575C34 ft=1 fh=986fb5ab89320009 vn="Variante von Win32/Adware.SpeedingUpMyPC.T.gen Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\n2053\SuperOptimizer.exe"
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=657a9eb59d34db4d868ad6e256ac48a9
# engine=20990
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-08 10:08:05
# local_time=2014-11-08 11:08:05 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 75097 1371970 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 10331360 20258053 0 0
# scanned=205986
# found=98
# cleaned=0
# scan_time=2402
sh=BBC3C1D7974A345C9217EB72345E07F995493F99 ft=1 fh=e9495d153d2a63a7 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$R0Q22TF.exe"
sh=2B33CAEEB2F0B565AB6FABAB607A2AA2ED43D68D ft=1 fh=deb74f8b1bea64b8 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$R5SFG5I.exe"
sh=58A4CE1C5CF8E6C3993BE563DDCA9A2A4C537F84 ft=1 fh=b2dbf45644188434 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$R8R587G.exe"
sh=D61222BAD46C2A2958880BFF01C3204EDB8C87F2 ft=1 fh=14ef727b7a14e275 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$RCX3N6M.exe"
sh=B63166EF9A277A8C8D9DCEBB3BFDDADF50697EC2 ft=1 fh=a4b95bd26759f028 vn="Variante von MSIL/Solimba.AH evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$RR4R6X3.exe"
sh=CF68AD719200D7709F4173ADF0A02C883A269DA9 ft=1 fh=4efc609afe76a58b vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3585963361-1982867813-4056610559-1001\$RVV975W.exe"
sh=FA55D765ACECF0E142995558447BA1C0C64A95B9 ft=1 fh=8a5fed32a6adae19 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\p2Xk8Izte1Ac3T.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\P4nPDZUXJXHJvq.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\rWFRkBCq6MPEh7.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\wqmJb8fCIbp8Aq.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\GoSave\wYJ3sUiRQ6gK2L.x64.dll"
sh=A4BE0F16C92EB88314908B3E7DACB6F43C7CD83B ft=1 fh=5cde2c9dc14beeb4 vn="Variante von Win32/Adware.ObronaAds.C Anwendung" ac=I fn="C:\Program Files (x86)\Oyridurate\HttpsProxy.exe"
sh=6F9C3002FF969E73868185A3AAF6D107499423DF ft=1 fh=303bda7a70ed4f0f vn="Variante von Win32/Adware.ObronaAds.B Anwendung" ac=I fn="C:\Program Files (x86)\Oyridurate\Oyridurate.exe"
sh=FA463A6559B35E634236C91BF8D881EC5890DAE4 ft=1 fh=e12f930a29405c78 vn="Win32/Adware.ObronaAds.B Anwendung" ac=I fn="C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\YoutubeAdBlocke\Nh4S37twTnBTTs.x64.dll"
sh=73E8470FD24C7A66FE7110AEEBADC639A2595D93 ft=1 fh=ddf0a9697546bc71 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\Program Files (x86)\YoutubeAdBlocke\UWQ6ZV7n4q5XYm.x64.dll"
sh=29531FF34ED520FDEF40B88D1C27B77D4064C1B7 ft=1 fh=6f280fcdcbb1a73e vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3\OrbiterInstaller[1].exe"
sh=A01CAE4A9C48BEB8A490C3E88CB03F9B95C31671 ft=1 fh=5c1219a5576ddaa1 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3\sp-downloader[2].exe"
sh=FB24FEA961DF1EC689422F05A8D80349A05F2857 ft=1 fh=bbfe88937d20f9ad vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\QDAPH3AH\SPSetup[2].exe"
sh=7028F239FAC673EE7DC7772ACC75D759EA73837D ft=1 fh=e769f095fe49f653 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\QDAPH3AH\spstub[1].exe"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\XAW68D2Q\embededstub[3].exe"
sh=BBC3C1D7974A345C9217EB72345E07F995493F99 ft=1 fh=e9495d153d2a63a7 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\02FD.exe"
sh=58A4CE1C5CF8E6C3993BE563DDCA9A2A4C537F84 ft=1 fh=b2dbf45644188434 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0f090cA91f8D.exe"
sh=2B33CAEEB2F0B565AB6FABAB607A2AA2ED43D68D ft=1 fh=deb74f8b1bea64b8 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\1bEe8DD78.exe"
sh=2B33CAEEB2F0B565AB6FABAB607A2AA2ED43D68D ft=1 fh=deb74f8b1bea64b8 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\22BcED7B1D99.exe"
sh=D61222BAD46C2A2958880BFF01C3204EDB8C87F2 ft=1 fh=14ef727b7a14e275 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\8227C6D.exe"
sh=D61222BAD46C2A2958880BFF01C3204EDB8C87F2 ft=1 fh=14ef727b7a14e275 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\97a95D4.exe"
sh=CF68AD719200D7709F4173ADF0A02C883A269DA9 ft=1 fh=4efc609afe76a58b vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\98601ECA71F2.exe"
sh=BBC3C1D7974A345C9217EB72345E07F995493F99 ft=1 fh=e9495d153d2a63a7 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\aebFC8e58cC.exe"
sh=BBC3C1D7974A345C9217EB72345E07F995493F99 ft=1 fh=e9495d153d2a63a7 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\C6c9E00.exe"
sh=2B33CAEEB2F0B565AB6FABAB607A2AA2ED43D68D ft=1 fh=deb74f8b1bea64b8 vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\cE90fE2A48afb.exe"
sh=CF68AD719200D7709F4173ADF0A02C883A269DA9 ft=1 fh=4efc609afe76a58b vn="Variante von Win32/AdWare.MultiPlug.CT Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\E6fBA1E2632c.exe"
sh=F89F23E36ACF9072392947AC20B7B00B9AA7E52B ft=1 fh=e3b48434044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\ICReinstall_nst6761.tmp"
sh=C97391140E15F5AEBCEB26D74F06D6EF7C456FA7 ft=1 fh=cc4d43e5044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\ICReinstall_nsw348B.tmp"
sh=49F1FA6CA4E734A511A6B593607D1DAA5CC99EE7 ft=1 fh=2bcff2ae1564f066 vn="Win32/LiveSupport.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\LiveSupport_setup.exe"
sh=9C68E8581B1D84E4517A01DC1EE4BADC988C69A7 ft=1 fh=d0caa54b044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\nsgCE92.tmp"
sh=F89F23E36ACF9072392947AC20B7B00B9AA7E52B ft=1 fh=e3b48434044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\nst6761.tmp"
sh=C97391140E15F5AEBCEB26D74F06D6EF7C456FA7 ft=1 fh=cc4d43e5044f843a vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\nsw348B.tmp"
sh=7975BD623B41BEA204B24876D0C97CFA28CDA82C ft=1 fh=8e4c9cc9b97d0273 vn="Variante von Win32/OptimizerEliteMax.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\optprosetup.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0627Abc313b0\temp\DriverProSetup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0627Abc313b0\temp\OpProSetup.exe"
sh=385C75B4F5847C5CC019CD524C97C1D06A41BBF9 ft=1 fh=c71c0011030ebcb3 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0627Abc313b0\temp\setupespl.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\0627Abc313b0\temp\usetup.exe"
sh=029569A2F51A3EBFC0826DDB9746855E38CB6C57 ft=1 fh=c71c0011f7a92f06 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\092b8\temp\BIT5385.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\092b8\temp\embededstub.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\DriverProSetup.exe"
sh=B4D8A5683D75141997054AF17ADB97491D325F19 ft=1 fh=c71c00119fda1462 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\extIE_setup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\OpProSetup.exe"
sh=BFBB7FB9B6EF48BCD09BB552FCCC98DD2A6F04C8 ft=1 fh=c71c0011d61cbdd4 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\setupbc.exe"
sh=31CE8D1F7F20DF43E07F851D6C0D3E80161DBCDC ft=1 fh=c71c0011f0a75287 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\setupespl.exe"
sh=620610EB5A45BF9651D83B22E8B435E33B207998 ft=1 fh=c71c0011460e7375 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\setupytb.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\241e9f036B1b\temp\usetup.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\DriverProSetup.exe"
sh=0340B656AB6384833E6E46C9CB6446D3092A9E94 ft=1 fh=c71c00110dc116e7 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\extIE_setup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\OpProSetup.exe"
sh=5D07B5D713D59F2A1CA2E10B8754CF37238EF933 ft=1 fh=c71c0011fdf8fff4 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\setupbc.exe"
sh=B6AF1FA13931DE651399E775FCE29F949B06A37C ft=1 fh=c71c00113a374cf9 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\setupespl.exe"
sh=0E00DB688576645AA2841996C03515D7AC2991D8 ft=1 fh=c71c00115d556510 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\setupytb.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\3e10\temp\usetup.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\DriverProSetup.exe"
sh=017F5119A780EBE7CA960DDC56B990C14002B74B ft=1 fh=c71c0011aeed6bbc vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\extIE_setup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\OpProSetup.exe"
sh=78408546D60F474C6F530FF37EC85022EE7B5A79 ft=1 fh=c71c0011d029ad0f vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\setupbc.exe"
sh=DE65670E9C3F06F8B9B5E80179081986C7DD9F16 ft=1 fh=c71c00116d1249bd vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\setupespl.exe"
sh=3D8A2063D3EC9695D9D25173592E9CC6EE8CD815 ft=1 fh=c71c0011ac292516 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\setupytb.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\507BCd67\temp\usetup.exe"
sh=B84865DA4D5E21DDF9A81D979C91628E122E9508 ft=1 fh=c71c001104439c4d vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\69F9407C04c81\temp\BIT53B5.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\69F9407C04c81\temp\embededstub.exe"
sh=1E83E6100A347399EAA46DC441A9EF08C829E7D0 ft=1 fh=c71c0011ca1fba6a vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\7213fd\temp\BIT5BE6.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\7213fd\temp\embededstub.exe"
sh=FB3A298D8C3FBA34480BA05C827A965D12896F19 ft=1 fh=c71c001128bd9ef4 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\8e431a7345\temp\BIT713C.tmp"
sh=58CD1C59418530A4D87CFEFD480567E3349E53CA ft=1 fh=c71c00115cac5112 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\8F25851\temp\BIT58E7.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\8F25851\temp\embededstub.exe"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\96315F38E24f3\temp\embededstub.exe"
sh=5BF1CEF96D9EAEC5286F290997B63F89DBEC451E ft=1 fh=c71c0011a89a97c1 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\96315F38E24f3\temp\setupespl.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\96315F38E24f3\temp\usetup.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\9a5f6F91\temp\DriverProSetup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\9a5f6F91\temp\OpProSetup.exe"
sh=464814DEACC9A2235B4A5EB910370F0DAD0564A2 ft=1 fh=c71c001130c30e6f vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\9a5f6F91\temp\setupespl.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\9a5f6F91\temp\usetup.exe"
sh=67203BAA0269399106D0EEA28B20630343AD3E5C ft=1 fh=c71c0011047ee5b6 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\CEe5c871E\temp\BIT5433.tmp"
sh=50FB6BB89CD7675DD1220222E9A83802878EC2E4 ft=1 fh=fd3e98b57cf7fe79 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\CEe5c871E\temp\embededstub.exe"
sh=40C41575D98710CD25C71D5E1D447ED259534D1D ft=1 fh=2a59f88db3529b1b vn="Variante von Win32/AdWare.SpeedingUpMyPC.Q Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\d026cE322F\temp\DriverProSetup.exe"
sh=E2E6A2A7019CF8DF17E5B5E54FDEB4810118DF2C ft=1 fh=78e0bf1169cd1b74 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\d026cE322F\temp\OpProSetup.exe"
sh=DFF7F414B8F55C10F75A53E016CC7119062AFA22 ft=1 fh=c71c0011638f8159 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\d026cE322F\temp\setupespl.exe"
sh=BCE9862033D427D7A45B7F9E9B55FB7F890CD39D ft=1 fh=fc281ef453ea06ae vn="Win32/TrojanDownloader.Agent.ACF Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\d026cE322F\temp\usetup.exe"
sh=C448540A16541F598ADF4C55327300EBC1320B29 ft=1 fh=c71c0011d167ffc2 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\D1787342\temp\BIT520.tmp"
sh=171322FE156640796FAFB4D0C01E6A4B9751FA40 ft=1 fh=c71c00110c2a1d76 vn="Variante von Win32/Adware.MultiPlug.DJ Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\FC89eF2D\temp\BITA08D.tmp"
sh=E11905B12E1CA3260FE959FAFA9236E65E467672 ft=1 fh=5954aafa65873d8a vn="Win32/VOPackage.AO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\102251_stp\Generic_vo.exe"
sh=2AE12E87FC63FD6A16DF5C7EFE08ED882578B34C ft=1 fh=2407a90c81eb5dd5 vn="Variante von Win32/TrojanDropper.MsiDrop.A Trojaner" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\102544_stp\Installer.exe"
sh=E5E4E3DF67EF76B47C8993AC1F35236577124934 ft=1 fh=b4ebd1af99768d94 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\102710_stp\termtutor-setup-1.9.0.8.exe"
sh=A75689B482CE69498C64E0D03F3BA0161A1B8589 ft=1 fh=7ceab3139bdab47f vn="Win32/Systweak.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\102765_stp\rcpsetup_adppi15_adppi15.exe"
sh=E11905B12E1CA3260FE959FAFA9236E65E467672 ft=1 fh=5954aafa65873d8a vn="Win32/VOPackage.AO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\841324_stp\Generic_vo.exe"
sh=E11905B12E1CA3260FE959FAFA9236E65E467672 ft=1 fh=5954aafa65873d8a vn="Win32/VOPackage.AO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\is45637729\9400426_stp\Generic_vo.exe"
sh=52431986A6DC96088A3DE58582A5E94D25C1D717 ft=1 fh=3f5c956a5a33ed8f vn="Variante von MSIL/Solimba.AC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\n2053\s2053.exe"
sh=ABBB8C6B101FF31CD3F27E2CC7CB784148575C34 ft=1 fh=986fb5ab89320009 vn="Variante von Win32/Adware.SpeedingUpMyPC.T.gen Anwendung" ac=I fn="C:\Users\Peter\AppData\Local\Temp\n2053\SuperOptimizer.exe"
sh=EECD91D95BF7D5D30F5965414066CA6243280D8C ft=0 fh=0000000000000000 vn="Variante von Win32/Systweak.L evtl. unerwünschte Anwendung" ac=I fn="D:\Downloads\wz175-32gev.msi"
SC: Code:
ATTFilter Results of screen317's Security Check version 0.99.89
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Windows Defender
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
Adobe Flash Player 15.0.0.189
Adobe Reader XI
Mozilla Firefox (33.0.3)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
FRST ADDITION: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-11-2014
Ran by Peter at 2014-11-08 11:20:29
Running from C:\Users\Peter\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.04.3005 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.00.2013.0 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8105 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8104 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3012 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8106 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.02.2003 - Acer Incorporated)
Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.01.3003 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.01.3003 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2001.4 - Acer Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.3721 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3914.57 - CyberLink Corp.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Free YouTube to MP3 Converter version 3.12.49.1022 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.49.1022 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.1 - Genesys Logic)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8101 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Kobo (HKLM-x32\...\Kobo) (Version: 3.6.0 - Kobo Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.3 (x86 de)) (Version: 33.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.31.423.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3585963361-1982867813-4056610559-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
06-11-2014 12:16:11 06 11 2014
06-11-2014 17:36:51 Wiederherstellungsvorgang
06-11-2014 18:20:04 Revo Uninstaller's restore point - Mozilla Maintenance Service
06-11-2014 18:20:52 Revo Uninstaller's restore point - Mozilla Firefox 33.0.2 (x86 de)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2014-11-06 11:15 - 00450713 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {02686A44-510D-4FFE-99A4-041543659CC8} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-03-17] (Acer Incorporate)
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {22A9A091-6A47-4678-B9FF-CF3754ED3B0D} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-03-21] (Acer Incorporated)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {337BFE19-BD4F-41FC-9E3B-FEDC50BB759A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-05] (Adobe Systems Incorporated)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DD03667-4424-4D20-89CA-296485F9DFB3} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {B0D9628A-7251-4606-A034-6F00EF25E986} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {BDD7E3DA-F247-47E7-801E-AE69337BBED2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {BF58E14B-1069-43E0-80DD-BB525A2FD9CD} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {C907D47F-769C-4156-97F0-4CEBDE33A7DE} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-03-18] (Acer Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D08F1AB1-8F5E-4779-937E-7A750E734C77} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {D0D94DBC-EFEA-47B5-993C-8CA15FC16D6A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DD78B00E-7325-43AE-A4A3-AC2C2B092A72} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {E2ACF668-4308-4463-9ECA-B3DD4467FB01} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {E3BDCA69-0278-4D27-AE94-D673C4802877} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {E661A666-E4A2-4336-8876-9CCDE4A10367} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-01-24] (TODO: <Company name>)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-11-05 18:01 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-11-05 20:34 - 2014-11-03 13:56 - 04377560 ___SH () C:\Program Files (x86)\Oyridurate\Oyridurate.exe
2014-07-11 12:03 - 2012-04-24 11:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2014-11-05 20:34 - 2014-11-05 20:34 - 00160728 ____R () C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe
2014-07-11 12:10 - 2014-01-03 13:13 - 00111872 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
2014-02-25 21:14 - 2014-02-25 21:14 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-02-25 21:11 - 2014-02-25 21:11 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-02-25 21:17 - 2014-02-25 21:17 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-06-11 11:38 - 2014-03-07 17:21 - 00080312 _____ () C:\Windows\system32\igfxexps.dll
2014-11-05 18:56 - 2014-11-05 18:57 - 00122880 _____ () C:\Program Files\WindowsApps\RedBull.RedBullTV_1.1.0.1_x64__mzhpkbwn2eczy\Microsoft.HLS.dll
2014-11-05 18:56 - 2014-11-05 18:57 - 02147840 _____ () C:\Program Files\WindowsApps\RedBull.RedBullTV_1.1.0.1_x64__mzhpkbwn2eczy\Microsoft.HLSClient.dll
2014-11-07 16:55 - 2014-11-07 16:55 - 00028160 _____ () C:\Users\Peter\AppData\Local\Packages\microsoft.bingweather_8wekyb3d8bbwe\AC\Microsoft\CLR_v4.0\NativeImages\Microsoft.PerfTrack\10ead687afca927bd7b22ad8d20e1de3\Microsoft.PerfTrack.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 00363520 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Foundation\057b7043f4868b76c209d9c426b80743\Windows.Foundation.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 01278464 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Storage\ba65f033632f4fc480cc45bc72bf25e4\Windows.Storage.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 01459712 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.UI\926020eb508f6968545d6a51fb661fad\Windows.UI.ni.dll
2014-11-07 16:55 - 2014-11-07 16:55 - 02207232 _____ () C:\Users\Peter\AppData\Local\Packages\microsoft.bingweather_8wekyb3d8bbwe\AC\Microsoft\CLR_v4.0\NativeImages\Microsoft.B2e1870ee#\6a162fa025114c29653186274824d5eb\Microsoft.Bing.AppEx.Telemetry.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 01782784 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.App640a3541#\43b92b6dbc9eb61983817ea32346d510\Windows.ApplicationModel.ni.dll
2014-11-06 10:20 - 2014-11-06 10:20 - 00347136 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Gloaae92e31#\94e2bc13589233f9d2cc54292717b8cf\Windows.Globalization.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 00632320 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Security\00ce12e0481a881d419350afd79395ef\Windows.Security.ni.dll
2014-11-06 10:20 - 2014-11-06 10:20 - 00207872 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.System\d1c5274ccd6fb2b4b5dbddd0f0ca6c6e\Windows.System.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 01259520 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Networking\8f6e236cd6041c81411f85852722670b\Windows.Networking.ni.dll
2014-11-07 16:55 - 2014-11-07 16:55 - 00117248 _____ () C:\Users\Peter\AppData\Local\Packages\microsoft.bingweather_8wekyb3d8bbwe\AC\Microsoft\CLR_v4.0\NativeImages\SqliteWrapper\99fa190c50aa9d06da5fb90ed0d8b8f7\SqliteWrapper.ni.dll
2014-07-11 11:28 - 2014-07-11 11:28 - 00551440 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.2.243_x64__8wekyb3d8bbwe\SqliteWrapper.dll
2014-07-11 11:28 - 2014-07-11 11:28 - 00660920 _____ () C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.2.243_x64__8wekyb3d8bbwe\Sqlite3.dll
2014-11-06 10:20 - 2014-11-06 10:20 - 01383936 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Web\6e0851f140b7f4407968add9bcebb667\Windows.Web.ni.dll
2014-11-06 10:20 - 2014-11-06 10:20 - 00467456 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Graphics\ea818a24554fc2db9a73de1e79afb286\Windows.Graphics.ni.dll
2014-11-06 10:19 - 2014-11-06 10:19 - 00521216 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Data\d07f690ce5d3a2de7c9089a6200d64db\Windows.Data.ni.dll
2014-11-06 10:20 - 2014-11-06 10:20 - 02019840 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Devices\0b4b3f23bdebd1d056b32b31e2f746bb\Windows.Devices.ni.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-05 20:34 - 2014-03-07 19:56 - 00117262 ___SH () C:\Program Files (x86)\Oyridurate\libgcc_s_dw2-1.dll
2014-11-05 20:34 - 2014-03-07 19:56 - 00970766 ___SH () C:\Program Files (x86)\Oyridurate\libstdc++-6.dll
2014-07-11 11:39 - 2013-12-10 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-11-07 14:44 - 2014-11-07 14:44 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Peter\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-3585963361-1982867813-4056610559-500 - Administrator - Disabled)
Gast (S-1-5-21-3585963361-1982867813-4056610559-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3585963361-1982867813-4056610559-1003 - Limited - Enabled)
Peter (S-1-5-21-3585963361-1982867813-4056610559-1001 - Administrator - Enabled) => C:\Users\Peter
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/08/2014 11:09:45 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/08/2014 10:52:20 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/08/2014 10:25:19 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/08/2014 10:25:18 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/07/2014 07:40:23 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/07/2014 07:40:22 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/07/2014 07:40:19 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
System errors:
=============
Error: (11/07/2014 06:12:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/07/2014 06:11:56 PM) (Source: DCOM) (EventID: 10010) (User: SCHREIBERLING)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (11/07/2014 06:11:56 PM) (Source: DCOM) (EventID: 10010) (User: SCHREIBERLING)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Microsoft Office Sessions:
=========================
Error: (11/08/2014 11:09:45 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (11/08/2014 10:52:20 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/08/2014 10:25:19 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/08/2014 10:25:18 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/07/2014 07:40:23 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/07/2014 07:40:22 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/07/2014 07:40:19 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 30%
Total physical RAM: 8115.27 MB
Available physical RAM: 5629.29 MB
Total Pagefile: 10035.27 MB
Available Pagefile: 6885.96 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:118.43 GB) (Free:78.46 GB) NTFS
Drive d: (DATA) (Fixed) (Total:914.91 GB) (Free:816.94 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E2A5DCFC)
Partition: GPT Partition Type.
========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: E2A5DCCD)
Partition: GPT Partition Type.
==================== End Of Log ============================
================[/CODE] |
|
08.11.2014, 11:30
| #6 |
| | HTML/Crypted.gen FRST EDITOR: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-11-2014
Ran by Peter (administrator) on SCHREIBERLING on 08-11-2014 11:20:02
Running from C:\Users\Peter\Downloads
Loaded Profile: Peter (Available profiles: Peter)
Platform: Windows 8.1 (Update 1) (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\Oyridurate\Oyridurate.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
() C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-07-11] (Spotify Ltd)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9880;https=127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x254F479DA5F9CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL =
SearchScopes: HKLM-x32 - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKCU - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL =
BHO: GoSave -> {58906a62-9c8b-4df2-a16b-f41875dea862} -> C:\Program Files (x86)\GoSave\rWFRkBCq6MPEh7.x64.dll ()
BHO: GoSave -> {670f7f5d-5676-42bd-868d-ad0de381d58a} -> C:\Program Files (x86)\GoSave\wqmJb8fCIbp8Aq.x64.dll ()
BHO: GoSave -> {8d7954b2-8848-47aa-a82f-566340a9e249} -> C:\Program Files (x86)\GoSave\p2Xk8Izte1Ac3T.x64.dll ()
BHO: GoSave -> {98133354-0192-4e13-813c-df8c686af727} -> C:\Program Files (x86)\GoSave\wYJ3sUiRQ6gK2L.x64.dll ()
BHO: GoSave -> {a343f700-377c-4ffd-9d27-2179966e2f5c} -> C:\Program Files (x86)\GoSave\P4nPDZUXJXHJvq.x64.dll ()
BHO: YoutubeAdBlocke -> {a739c2c4-42d3-48bc-bebd-d1b534ae8241} -> C:\Program Files (x86)\YoutubeAdBlocke\UWQ6ZV7n4q5XYm.x64.dll ()
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
BHO: YoutubeAdBlocke -> {ff8281ba-c1a0-40f9-b12c-9afe988d8348} -> C:\Program Files (x86)\YoutubeAdBlocke\Nh4S37twTnBTTs.x64.dll ()
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\z2j4s4ze.default-1415370319740
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-05]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbmahgeifgdiidibnmphjgfocddpdddg [2014-11-07]
CHR Extension: (Replies and more for Google) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgmhgfecnmeljhchgcjlfldjiepcfpea [2014-11-07]
CHR Extension: (OptOn) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnhdehdfnpblnikmfnlgophopebcpdhi [2014-11-07]
CHR Extension: (History) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibiiaimghkbhffgkkdogldehnidojjga [2014-11-07]
CHR Extension: (Change My Facebook Color) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipopodflddngcbmefgnnmfggjpknepha [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmkgibpmgjhnpknlgoajjpabcdkgklff [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbdgihlglhjhlkoendanneemdnpokbji [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjgdmiejcahjhcccmocofhiifpmofepl [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhnkdcfbglkgfiafodmdfjmhbocbpona [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\piekdadbpdhhnjabkloeecnbcjkajeki [2014-11-07]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2014-03-21] (Acer Incorporated)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-18] (Microsoft Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [459496 2014-03-17] (Acer Incorporate)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation)
R2 Oyridurate; C:\Program Files (x86)\Oyridurate\Oyridurate.exe [4377560 2014-11-03] ()
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457960 2014-03-21] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-03-21] (Acer Incorporate)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [222952 2014-01-24] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-07-11] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-11] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-10-23] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [111336 2014-04-28] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-11-06] ()
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-07-11] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-08 11:20 - 2014-11-08 11:20 - 00018914 _____ () C:\Users\Peter\Downloads\FRST.txt
2014-11-08 11:19 - 2014-11-08 11:19 - 02115072 _____ (Farbar) C:\Users\Peter\Downloads\FRST64.exe
2014-11-08 11:12 - 2014-11-08 11:12 - 00854448 _____ () C:\Users\Peter\Downloads\SecurityCheck.exe
2014-11-07 19:40 - 2014-11-07 19:40 - 02347384 _____ (ESET) C:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
2014-11-07 17:21 - 2014-11-07 17:21 - 09556849 _____ () C:\Users\Peter\Downloads\TouchPad_ALPS_7.2.2002.208_W7x86W7x64_A.zip
2014-11-07 17:20 - 2014-11-07 17:20 - 29634220 _____ () C:\Users\Peter\Downloads\TouchPad_Synaptics_13.2.2.0_W7x86W7x64_A.zip
2014-11-07 16:46 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-11-07 16:28 - 2014-11-07 16:41 - 00000180 _____ () C:\Users\Peter\Desktop.lnk
2014-11-07 15:51 - 2014-11-07 15:52 - 00000000 ___SD () C:\Users\Peter\Documents\Meine Shapes
2014-11-07 15:40 - 2014-11-07 15:40 - 00000000 ____D () C:\ProgramData\3872871776
2014-11-07 15:23 - 2014-11-07 18:12 - 00000000 ____D () C:\ProgramData\OptOn
2014-11-07 15:23 - 2014-11-07 16:14 - 00000000 ____D () C:\Program Files (x86)\OptOn
2014-11-07 15:23 - 2014-11-07 15:23 - 00000000 ____D () C:\ProgramData\Trusted Publisher
2014-11-07 15:19 - 2014-11-07 18:12 - 00000000 ____D () C:\ProgramData\YoutubeAdBlocke
2014-11-07 15:19 - 2014-11-07 18:12 - 00000000 ____D () C:\ProgramData\GoSave
2014-11-07 15:19 - 2014-11-07 17:45 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdBlocke
2014-11-07 15:19 - 2014-11-07 17:45 - 00000000 ____D () C:\Program Files (x86)\GoSave
2014-11-07 15:19 - 2014-11-07 16:14 - 00000000 ____D () C:\ProgramData\fc5735a05c4e02ed
2014-11-07 15:19 - 2014-11-07 15:23 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Peter\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Peter\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast\AppData\Local\Chromatic Browser
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator
2014-11-07 14:44 - 2014-11-07 14:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-06 20:42 - 2014-11-06 20:42 - 00000000 ____D () C:\Windows\ERUNT
2014-11-06 20:41 - 2014-11-06 20:41 - 01706359 _____ (Thisisu) C:\Users\Peter\Downloads\JRT_6.3.5.exe
2014-11-06 20:41 - 2014-11-05 23:14 - 01706939 _____ (Thisisu) C:\Users\Peter\Desktop\JRT_NEW.exe
2014-11-06 19:48 - 2014-11-07 18:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-06 19:48 - 2014-11-06 19:48 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-06 19:48 - 2014-11-06 19:48 - 00001127 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-06 19:47 - 2014-11-06 19:47 - 36250792 _____ () C:\Users\Peter\Downloads\Firefox_Setup_33.0.2DE.exe
2014-11-06 19:47 - 2014-11-06 19:47 - 00000190 _____ () C:\Users\Peter\Downloads\acv.js
2014-11-06 19:42 - 2014-11-08 11:20 - 00000000 ____D () C:\FRST
2014-11-06 19:25 - 2014-11-06 19:25 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2 (1).exe
2014-11-06 19:12 - 2014-11-06 19:12 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Peter\Downloads\revosetup95.exe
2014-11-06 19:12 - 2014-11-06 19:12 - 00001248 _____ () C:\Users\Peter\Desktop\Revo Uninstaller.lnk
2014-11-06 19:12 - 2014-11-06 19:12 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-11-06 18:21 - 2014-11-06 18:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Peter\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-06 17:49 - 2014-11-06 17:49 - 00004144 _____ () C:\Users\Peter\Downloads\adwcleaner_3.311 - Verknüpfung.lnk
2014-11-06 16:55 - 2014-11-06 16:55 - 01375089 _____ () C:\Users\Peter\Desktop\adwcleaner_3.311.exe
2014-11-06 16:24 - 2014-11-06 16:24 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2.exe
2014-11-06 16:05 - 2014-11-06 18:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 11:51 - 2014-11-07 14:33 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-06 11:51 - 2014-11-06 11:51 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-06 11:24 - 2014-11-07 17:43 - 00000000 ____D () C:\AdwCleaner
2014-11-06 11:15 - 2013-08-22 14:25 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20141106-111532.backup
2014-11-06 10:34 - 2014-11-06 10:33 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-11-06 09:09 - 2014-11-06 09:09 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-11-05 22:38 - 2014-11-06 10:38 - 00000064 _____ () C:\Users\Peter\AppData\Roaming\WB.CFG
2014-11-05 22:28 - 2014-11-05 22:28 - 00000000 _____ () C:\autoexec.bat
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-11-05 21:53 - 2014-11-05 21:53 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\mp3DirectCut
2014-11-05 21:02 - 2014-11-05 21:02 - 00613042 _____ (CMI Limited) C:\Users\Peter\AppData\Local\nshC9BF.tmp
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Program Files\Realtek
2014-11-05 20:56 - 2000-01-01 01:00 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-05 20:56 - 2000-01-01 01:00 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02117424 _____ () C:\Windows\system32\SStudio.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-05 20:56 - 2000-01-01 01:00 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-05 20:56 - 2000-01-01 01:00 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-05 20:55 - 2014-11-05 20:55 - 00002242 _____ () C:\Windows\patsearch.bin
2014-11-05 20:55 - 2014-11-05 20:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNew_01009.Wdf
2014-11-05 20:55 - 2000-01-01 01:00 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll
2014-11-05 20:54 - 2014-11-05 20:54 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\AdvancedSystemProtector
2014-11-05 20:41 - 2014-11-05 20:41 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\WildTangent
2014-11-05 20:35 - 2014-11-05 20:35 - 00001075 _____ () C:\Users\Peter\Desktop\mp3DirectCut.lnk
2014-11-05 20:35 - 2014-11-05 20:35 - 00000000 ____D () C:\Program Files (x86)\mp3DirectCut
2014-11-05 20:34 - 2014-11-05 20:34 - 00000000 __SHD () C:\Program Files (x86)\Oyridurate
2014-11-05 19:35 - 2014-11-05 19:35 - 00000424 _____ () C:\Users\Peter\Desktop\Computer.lnk
2014-11-05 19:26 - 2014-11-05 19:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\Cyberlink
2014-11-05 19:21 - 2014-11-05 19:21 - 00001556 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00001263 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:21 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:20 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2014-11-05 19:19 - 2014-11-05 19:20 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\DVDVideoSoft
2014-11-05 19:18 - 2014-11-05 19:18 - 00000000 ____D () C:\Users\Peter\AppData\Local\PDF24
2014-11-05 19:16 - 2014-11-05 19:16 - 00001099 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk
2014-11-05 19:16 - 2014-11-05 19:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-11-05 19:07 - 2014-11-05 19:16 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-11-05 19:03 - 2014-11-05 19:03 - 00003042 _____ () C:\Windows\System32\Tasks\{5E866BDC-A4D5-4B4E-AEB9-317C2CA84F30}
2014-11-05 18:33 - 2014-11-05 18:33 - 00000000 ____D () C:\Users\Peter\AppData\Local\Macromedia
2014-11-05 18:20 - 2014-11-08 10:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-05 18:20 - 2014-11-05 18:21 - 00000000 ____D () C:\Users\Peter\AppData\Local\Adobe
2014-11-05 18:20 - 2014-11-05 18:20 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-05 18:17 - 2014-11-05 18:17 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer Aspire R7 Tutorial
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-05 18:02 - 2014-10-16 17:54 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 01089736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-05 18:01 - 2014-10-16 15:11 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-05 18:01 - 2014-10-15 01:48 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-05 18:00 - 2014-10-16 17:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00392008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00348488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-05 17:59 - 2014-10-16 17:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00500880 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00418112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-11-05 17:57 - 2014-11-05 17:57 - 00000000 ____D () C:\NVIDIA
2014-11-05 17:56 - 2014-11-05 17:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-05 17:53 - 2014-11-05 17:53 - 00001033 _____ () C:\Users\Public\Desktop\Kobo.lnk
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Windows\tmp
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Program Files (x86)\Kobo
2014-11-05 17:49 - 2014-11-06 13:05 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Spotify
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Local\Spotify
2014-11-05 17:43 - 2014-11-05 17:43 - 00001045 _____ () C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-11-05 17:42 - 2014-11-05 17:43 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\BOM
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Biet-O-Matic
2014-11-05 17:42 - 2003-01-07 02:22 - 00015873 _____ () C:\Windows\SysWOW64\Inetde.dll
2014-11-05 17:42 - 2000-12-05 23:00 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mswinsck.ocx
2014-11-05 17:42 - 2000-10-01 23:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb6de.dll
2014-11-05 17:42 - 2000-05-22 15:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-11-05 17:42 - 2000-05-21 23:00 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomctl.ocx
2014-11-05 17:42 - 2000-04-03 19:06 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winskde.dll
2014-11-05 17:42 - 2000-04-03 19:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2014-11-05 17:42 - 1999-07-14 13:07 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdftde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscmcde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctde.dll
2014-11-05 17:42 - 1998-06-23 23:00 - 00209192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctl32.ocx
2014-11-05 17:41 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-11-05 17:41 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-11-05 17:31 - 2014-11-05 17:31 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-11-05 17:16 - 2014-11-05 17:16 - 00000466 _____ () C:\Users\Peter\Desktop\Eigene Dateien.lnk
2014-11-05 17:15 - 2014-11-05 17:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-11-05 17:14 - 2014-11-05 17:14 - 00001799 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-05 17:14 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files\iTunes
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-05 17:13 - 2014-11-05 17:13 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\iPod
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-11-05 17:12 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple
2014-11-05 17:01 - 2014-11-05 17:01 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Avira
2014-11-05 17:00 - 2014-10-23 14:02 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-11-05 17:00 - 2014-10-23 14:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-11-05 17:00 - 2014-10-23 14:01 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-05 16:58 - 2014-11-05 16:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-05 16:54 - 2014-11-05 17:07 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer
2014-11-05 16:54 - 2014-11-05 16:54 - 00000000 ____D () C:\Users\Peter\AppData\Local\AcerMedia
2014-11-05 16:53 - 2014-11-05 21:47 - 00000000 ____D () C:\Users\Public\OEM
2014-11-05 16:47 - 2014-11-07 18:22 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3585963361-1982867813-4056610559-1001
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Mozilla
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Local\Mozilla
2014-11-05 16:47 - 2014-11-05 16:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-11-05 16:46 - 2014-11-05 16:46 - 00002027 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-11-05 16:45 - 2014-11-08 11:06 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{03F41291-BAE8-4D20-A116-55AAC744BEE2}
2014-11-05 16:45 - 2014-11-06 10:31 - 00002170 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2014-11-05 16:45 - 2014-11-05 18:07 - 00002341 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieUserList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieSiteList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Macromedia
2014-11-05 16:44 - 2014-11-06 13:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\clear.fi
2014-11-05 16:44 - 2014-11-05 16:44 - 00000000 ____D () C:\Users\Peter\PicStream
2014-11-05 16:43 - 2014-11-07 18:12 - 00000000 __RDO () C:\Users\Peter\OneDrive
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Atheros
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-11-05 16:42 - 2014-11-07 16:41 - 00000000 ____D () C:\Users\Peter
2014-11-05 16:42 - 2014-11-05 18:57 - 00000000 ____D () C:\Users\Peter\AppData\Local\Packages
2014-11-05 16:42 - 2014-11-05 16:42 - 00001458 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-05 16:42 - 2014-11-05 16:42 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-11-05 16:42 - 2014-11-05 16:42 - 00000020 ___SH () C:\Users\Peter\ntuser.ini
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Vorlagen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Startmenü
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Netzwerkumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Lokale Einstellungen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Eigene Dateien
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Druckumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Musik
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Bilder
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Verlauf
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Adobe
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Local\VirtualStore
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Program Files\Accessory Store
2014-11-05 16:42 - 2014-07-11 21:18 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-05 16:42 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-05 16:35 - 2014-11-08 11:10 - 02094221 _____ () C:\Windows\WindowsUpdate.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-08 11:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-11-07 18:19 - 2014-07-11 21:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-11-07 18:19 - 2014-07-11 21:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-11-07 18:19 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-07 18:12 - 2014-03-18 10:54 - 00198940 _____ () C:\Windows\PFRO.log
2014-11-07 18:12 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-07 18:12 - 2013-08-22 15:44 - 00358992 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-07 18:12 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-07 17:20 - 2014-07-11 11:43 - 00022462 _____ () C:\Windows\DPINST.LOG
2014-11-07 16:26 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-11-07 15:19 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-07 15:19 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-11-07 14:43 - 2014-07-11 21:11 - 00000000 ____D () C:\Windows\NAPP_Dism_Log
2014-11-06 18:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\registration
2014-11-06 16:30 - 2014-06-11 11:19 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-06 16:10 - 2014-07-11 11:43 - 00001508 _____ () C:\Windows\Synaptics.log
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Acer
2014-11-06 12:11 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-11-05 22:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-11-05 22:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-05 22:27 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-11-05 20:59 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-05 20:58 - 2013-08-22 15:46 - 00023730 _____ () C:\Windows\setupact.log
2014-11-05 20:55 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\WildTangent
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-11-05 19:26 - 2014-07-11 12:07 - 00000000 ____D () C:\Users\Public\CyberLink
2014-11-05 19:26 - 2014-07-11 12:00 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-05 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-11-05 18:06 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-05 18:05 - 2014-07-11 11:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-05 18:03 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-05 18:02 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-05 18:01 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help
2014-11-05 17:46 - 2014-06-11 11:35 - 00000000 ___HD () C:\OEM
2014-11-05 17:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-05 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-11-05 16:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Peter\AppData\Local\Temp\02FD.exe
C:\Users\Peter\AppData\Local\Temp\0f090cA91f8D.exe
C:\Users\Peter\AppData\Local\Temp\1bEe8DD78.exe
C:\Users\Peter\AppData\Local\Temp\22BcED7B1D99.exe
C:\Users\Peter\AppData\Local\Temp\617E3F57-C0F1-6F27-115B-3B3EB605D81B.dll
C:\Users\Peter\AppData\Local\Temp\617E3F57-C0F1-6F27-115B-3B3EB605D81B.exe
C:\Users\Peter\AppData\Local\Temp\8227C6D.exe
C:\Users\Peter\AppData\Local\Temp\97a95D4.exe
C:\Users\Peter\AppData\Local\Temp\98601ECA71F2.exe
C:\Users\Peter\AppData\Local\Temp\AcerPortalSetup.exe
C:\Users\Peter\AppData\Local\Temp\aebFC8e58cC.exe
C:\Users\Peter\AppData\Local\Temp\AOPSetup.exe
C:\Users\Peter\AppData\Local\Temp\avgnt.exe
C:\Users\Peter\AppData\Local\Temp\bootstrapper.exe
C:\Users\Peter\AppData\Local\Temp\c2rui.dll
C:\Users\Peter\AppData\Local\Temp\C6c9E00.exe
C:\Users\Peter\AppData\Local\Temp\cE90fE2A48afb.exe
C:\Users\Peter\AppData\Local\Temp\dlLogic.exe
C:\Users\Peter\AppData\Local\Temp\dltr.exe
C:\Users\Peter\AppData\Local\Temp\drvprosetup.exe
C:\Users\Peter\AppData\Local\Temp\E6fBA1E2632c.exe
C:\Users\Peter\AppData\Local\Temp\GCVerifier.dll
C:\Users\Peter\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\Peter\AppData\Local\Temp\npofficeondemand.dll
C:\Users\Peter\AppData\Local\Temp\oct210D.tmp.exe
C:\Users\Peter\AppData\Local\Temp\optprosetup.exe
C:\Users\Peter\AppData\Local\Temp\roamingofficeactivex.32.dll
C:\Users\Peter\AppData\Local\Temp\roamingofficeactivex.64.dll
C:\Users\Peter\AppData\Local\Temp\SetupVisioProRetail.x86.de-DE_VisioProRetail_MT7YN-TMV9C-7DDX9-64W77-B7R4D_act_1_.exe
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite25226.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite41850.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite43515.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite47256.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite49959.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite54388.dll
C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite55550.dll
C:\Users\Peter\AppData\Local\Temp\verifier.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signedA
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-11 10:43
==================== End Of Log ============================
--- --- --- --- --- ---  Leider besteht das Problem immernoch. |
|
08.11.2014, 20:44
| #7 |
| /// the machine /// TB-Ausbilder | HTML/Crypted.gen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Program Files (x86)\GoSave
C:\$Recycle.Bin
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9880;https=127.0.0.1:9880
BHO: GoSave -> {58906a62-9c8b-4df2-a16b-f41875dea862} -> C:\Program Files (x86)\GoSave\rWFRkBCq6MPEh7.x64.dll ()
BHO: GoSave -> {670f7f5d-5676-42bd-868d-ad0de381d58a} -> C:\Program Files (x86)\GoSave\wqmJb8fCIbp8Aq.x64.dll ()
BHO: GoSave -> {8d7954b2-8848-47aa-a82f-566340a9e249} -> C:\Program Files (x86)\GoSave\p2Xk8Izte1Ac3T.x64.dll ()
BHO: GoSave -> {98133354-0192-4e13-813c-df8c686af727} -> C:\Program Files (x86)\GoSave\wYJ3sUiRQ6gK2L.x64.dll ()
BHO: GoSave -> {a343f700-377c-4ffd-9d27-2179966e2f5c} -> C:\Program Files (x86)\GoSave\P4nPDZUXJXHJvq.x64.dll ()
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbmahgeifgdiidibnmphjgfocddpdddg [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmkgibpmgjhnpknlgoajjpabcdkgklff [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbdgihlglhjhlkoendanneemdnpokbji [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjgdmiejcahjhcccmocofhiifpmofepl [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhnkdcfbglkgfiafodmdfjmhbocbpona [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\piekdadbpdhhnjabkloeecnbcjkajeki [2014-11-07]
R2 Oyridurate; C:\Program Files (x86)\Oyridurate\Oyridurate.exe [4377560 2014-11-03] ()
C:\Program Files (x86)\Oyridurate
C:\ProgramData\GoSave
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Revo Uninstaller - Download - Filepony damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.google.com/chrome/answer/3296214?hl=de Frisches FRST log bitte. Noch Probleme? Wenn ja, wer meldet das wo?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.11.2014, 11:38
| #8 |
| | HTML/Crypted.gen FIXLOG: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-11-2014 01
Ran by Peter at 2014-11-09 11:04:33 Run:1
Running from C:\Users\Peter\Desktop
Loaded Profile: Peter (Available profiles: Peter)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Program Files (x86)\GoSave
C:\$Recycle.Bin
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9880;https=127.0.0.1:9880
BHO: GoSave -> {58906a62-9c8b-4df2-a16b-f41875dea862} -> C:\Program Files (x86)\GoSave\rWFRkBCq6MPEh7.x64.dll ()
BHO: GoSave -> {670f7f5d-5676-42bd-868d-ad0de381d58a} -> C:\Program Files (x86)\GoSave\wqmJb8fCIbp8Aq.x64.dll ()
BHO: GoSave -> {8d7954b2-8848-47aa-a82f-566340a9e249} -> C:\Program Files (x86)\GoSave\p2Xk8Izte1Ac3T.x64.dll ()
BHO: GoSave -> {98133354-0192-4e13-813c-df8c686af727} -> C:\Program Files (x86)\GoSave\wYJ3sUiRQ6gK2L.x64.dll ()
BHO: GoSave -> {a343f700-377c-4ffd-9d27-2179966e2f5c} -> C:\Program Files (x86)\GoSave\P4nPDZUXJXHJvq.x64.dll ()
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbmahgeifgdiidibnmphjgfocddpdddg [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmkgibpmgjhnpknlgoajjpabcdkgklff [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbdgihlglhjhlkoendanneemdnpokbji [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjgdmiejcahjhcccmocofhiifpmofepl [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhnkdcfbglkgfiafodmdfjmhbocbpona [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\piekdadbpdhhnjabkloeecnbcjkajeki [2014-11-07]
R2 Oyridurate; C:\Program Files (x86)\Oyridurate\Oyridurate.exe [4377560 2014-11-03] ()
C:\Program Files (x86)\Oyridurate
C:\ProgramData\GoSave
Emptytemp:
*****************
"C:\Program Files (x86)\GoSave" => File/Directory not found.
C:\$Recycle.Bin => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58906a62-9c8b-4df2-a16b-f41875dea862}" => Key deleted successfully.
"HKCR\CLSID\{58906a62-9c8b-4df2-a16b-f41875dea862}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{670f7f5d-5676-42bd-868d-ad0de381d58a}" => Key deleted successfully.
"HKCR\CLSID\{670f7f5d-5676-42bd-868d-ad0de381d58a}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8d7954b2-8848-47aa-a82f-566340a9e249}" => Key deleted successfully.
"HKCR\CLSID\{8d7954b2-8848-47aa-a82f-566340a9e249}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{98133354-0192-4e13-813c-df8c686af727}" => Key deleted successfully.
"HKCR\CLSID\{98133354-0192-4e13-813c-df8c686af727}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a343f700-377c-4ffd-9d27-2179966e2f5c}" => Key deleted successfully.
"HKCR\CLSID\{a343f700-377c-4ffd-9d27-2179966e2f5c}" => Key deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value deleted successfully.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbmahgeifgdiidibnmphjgfocddpdddg directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmkgibpmgjhnpknlgoajjpabcdkgklff directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbdgihlglhjhlkoendanneemdnpokbji directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjgdmiejcahjhcccmocofhiifpmofepl directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhnkdcfbglkgfiafodmdfjmhbocbpona directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\piekdadbpdhhnjabkloeecnbcjkajeki directory not found.
Oyridurate => Unable to stop service
Oyridurate => Service deleted successfully.
C:\Program Files (x86)\Oyridurate => Moved successfully.
"C:\ProgramData\GoSave" => File/Directory not found.
EmptyTemp: => Removed 1.9 GB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Google Chrome konnte ich leider nicht finden, daher hab ich das ganze nochmal installiert und wieder komplett gekillt. FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-11-2014 01
Ran by Peter (administrator) on SCHREIBERLING on 09-11-2014 11:29:57
Running from C:\Users\Peter\Desktop
Loaded Profile: Peter (Available profiles: Peter)
Platform: Windows 8.1 (Update 1) (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(VS Revo Group) C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-07-11] (Spotify Ltd)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x254F479DA5F9CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL =
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\z2j4s4ze.default-1415370319740
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-05]
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2014-03-21] (Acer Incorporated)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-18] (Microsoft Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [459496 2014-03-17] (Acer Incorporate)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457960 2014-03-21] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-03-21] (Acer Incorporate)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [222952 2014-01-24] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-07-11] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-11] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-10-23] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [111336 2014-04-28] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-11-06] ()
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-07-11] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-09 11:29 - 2014-11-09 11:30 - 00015941 _____ () C:\Users\Peter\Desktop\FRST.txt
2014-11-09 11:25 - 2014-11-09 11:27 - 00000000 ____D () C:\Users\Peter\AppData\Local\Google
2014-11-09 11:25 - 2014-11-09 11:27 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-09 11:25 - 2014-11-09 11:25 - 00880272 _____ (Google Inc.) C:\Users\Peter\Downloads\ChromeSetup.exe
2014-11-09 11:04 - 2014-11-09 11:04 - 00000000 ____D () C:\Users\Peter\Desktop\FRST-OlderVersion
2014-11-08 17:47 - 2014-11-08 17:47 - 02998656 _____ (Enigma Software Group USA, LLC.) C:\Users\Peter\Downloads\SpyHunter-Installer.exe
2014-11-08 12:48 - 2014-11-08 12:48 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-08 12:48 - 2014-11-08 12:48 - 00001127 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-08 12:48 - 2014-11-08 12:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-08 12:48 - 2014-11-08 12:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-08 12:47 - 2014-11-08 12:47 - 36249264 _____ () C:\Users\Peter\Downloads\Firefox_Setup_de33.0.3.exe
2014-11-08 11:59 - 2014-11-08 11:59 - 02145792 _____ () C:\Users\Peter\Desktop\adwcleaner_4.100.exe
2014-11-08 11:20 - 2014-11-08 11:20 - 00064930 _____ () C:\Users\Peter\Downloads\FRST.txt
2014-11-08 11:20 - 2014-11-08 11:20 - 00032215 _____ () C:\Users\Peter\Downloads\Addition.txt
2014-11-08 11:19 - 2014-11-09 11:04 - 02115584 _____ (Farbar) C:\Users\Peter\Desktop\FRST64.exe
2014-11-08 11:12 - 2014-11-08 11:12 - 00854448 _____ () C:\Users\Peter\Downloads\SecurityCheck.exe
2014-11-07 19:40 - 2014-11-07 19:40 - 02347384 _____ (ESET) C:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
2014-11-07 17:21 - 2014-11-07 17:21 - 09556849 _____ () C:\Users\Peter\Downloads\TouchPad_ALPS_7.2.2002.208_W7x86W7x64_A.zip
2014-11-07 17:20 - 2014-11-07 17:20 - 29634220 _____ () C:\Users\Peter\Downloads\TouchPad_Synaptics_13.2.2.0_W7x86W7x64_A.zip
2014-11-07 16:46 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-11-07 16:28 - 2014-11-07 16:41 - 00000180 _____ () C:\Users\Peter\Desktop.lnk
2014-11-07 15:51 - 2014-11-07 15:52 - 00000000 ___SD () C:\Users\Peter\Documents\Meine Shapes
2014-11-07 15:19 - 2014-11-09 11:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Peter\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator
2014-11-06 20:42 - 2014-11-06 20:42 - 00000000 ____D () C:\Windows\ERUNT
2014-11-06 20:41 - 2014-11-06 20:41 - 01706359 _____ (Thisisu) C:\Users\Peter\Downloads\JRT_6.3.5.exe
2014-11-06 20:41 - 2014-11-05 23:14 - 01706939 _____ (Thisisu) C:\Users\Peter\Desktop\JRT_NEW.exe
2014-11-06 19:47 - 2014-11-06 19:47 - 36250792 _____ () C:\Users\Peter\Downloads\Firefox_Setup_33.0.2DE.exe
2014-11-06 19:47 - 2014-11-06 19:47 - 00000190 _____ () C:\Users\Peter\Downloads\acv.js
2014-11-06 19:42 - 2014-11-09 11:29 - 00000000 ____D () C:\FRST
2014-11-06 19:25 - 2014-11-06 19:25 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2 (1).exe
2014-11-06 19:12 - 2014-11-06 19:12 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Peter\Downloads\revosetup95.exe
2014-11-06 19:12 - 2014-11-06 19:12 - 00001248 _____ () C:\Users\Peter\Desktop\Revo Uninstaller.lnk
2014-11-06 19:12 - 2014-11-06 19:12 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-11-06 18:21 - 2014-11-06 18:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Peter\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-06 17:49 - 2014-11-06 17:49 - 00004144 _____ () C:\Users\Peter\Downloads\adwcleaner_3.311 - Verknüpfung.lnk
2014-11-06 16:24 - 2014-11-06 16:24 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2.exe
2014-11-06 16:05 - 2014-11-06 18:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 11:51 - 2014-11-08 12:54 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-06 11:51 - 2014-11-06 11:51 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-06 11:24 - 2014-11-09 10:56 - 00000000 ____D () C:\AdwCleaner
2014-11-06 11:15 - 2013-08-22 14:25 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20141106-111532.backup
2014-11-06 10:34 - 2014-11-06 10:33 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-11-06 09:09 - 2014-11-06 09:09 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-11-05 22:38 - 2014-11-06 10:38 - 00000064 _____ () C:\Users\Peter\AppData\Roaming\WB.CFG
2014-11-05 22:28 - 2014-11-05 22:28 - 00000000 _____ () C:\autoexec.bat
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-11-05 21:53 - 2014-11-05 21:53 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\mp3DirectCut
2014-11-05 21:02 - 2014-11-05 21:02 - 00613042 _____ (CMI Limited) C:\Users\Peter\AppData\Local\nshC9BF.tmp
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Program Files\Realtek
2014-11-05 20:56 - 2000-01-01 01:00 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-05 20:56 - 2000-01-01 01:00 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02117424 _____ () C:\Windows\system32\SStudio.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-05 20:56 - 2000-01-01 01:00 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-05 20:56 - 2000-01-01 01:00 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-05 20:55 - 2014-11-05 20:55 - 00002242 _____ () C:\Windows\patsearch.bin
2014-11-05 20:55 - 2014-11-05 20:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNew_01009.Wdf
2014-11-05 20:55 - 2000-01-01 01:00 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll
2014-11-05 20:54 - 2014-11-05 20:54 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\AdvancedSystemProtector
2014-11-05 20:41 - 2014-11-05 20:41 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\WildTangent
2014-11-05 20:35 - 2014-11-05 20:35 - 00001075 _____ () C:\Users\Peter\Desktop\mp3DirectCut.lnk
2014-11-05 20:35 - 2014-11-05 20:35 - 00000000 ____D () C:\Program Files (x86)\mp3DirectCut
2014-11-05 19:35 - 2014-11-05 19:35 - 00000424 _____ () C:\Users\Peter\Desktop\Computer.lnk
2014-11-05 19:26 - 2014-11-05 19:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\Cyberlink
2014-11-05 19:21 - 2014-11-05 19:21 - 00001556 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00001263 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:21 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:20 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2014-11-05 19:19 - 2014-11-05 19:20 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\DVDVideoSoft
2014-11-05 19:18 - 2014-11-05 19:18 - 00000000 ____D () C:\Users\Peter\AppData\Local\PDF24
2014-11-05 19:16 - 2014-11-05 19:16 - 00001099 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk
2014-11-05 19:16 - 2014-11-05 19:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-11-05 19:07 - 2014-11-05 19:16 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-11-05 19:03 - 2014-11-05 19:03 - 00003042 _____ () C:\Windows\System32\Tasks\{5E866BDC-A4D5-4B4E-AEB9-317C2CA84F30}
2014-11-05 18:33 - 2014-11-05 18:33 - 00000000 ____D () C:\Users\Peter\AppData\Local\Macromedia
2014-11-05 18:20 - 2014-11-08 18:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-05 18:20 - 2014-11-05 18:21 - 00000000 ____D () C:\Users\Peter\AppData\Local\Adobe
2014-11-05 18:20 - 2014-11-05 18:20 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-05 18:17 - 2014-11-05 18:17 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer Aspire R7 Tutorial
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-05 18:02 - 2014-10-16 17:54 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 01089736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-05 18:01 - 2014-10-16 15:11 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-05 18:01 - 2014-10-15 01:48 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-05 18:00 - 2014-10-16 17:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00392008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00348488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-05 17:59 - 2014-10-16 17:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00500880 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00418112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-11-05 17:57 - 2014-11-05 17:57 - 00000000 ____D () C:\NVIDIA
2014-11-05 17:56 - 2014-11-05 17:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-05 17:53 - 2014-11-05 17:53 - 00001033 _____ () C:\Users\Public\Desktop\Kobo.lnk
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Windows\tmp
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Program Files (x86)\Kobo
2014-11-05 17:49 - 2014-11-06 13:05 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Spotify
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Local\Spotify
2014-11-05 17:43 - 2014-11-05 17:43 - 00001045 _____ () C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-11-05 17:42 - 2014-11-05 17:43 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\BOM
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Biet-O-Matic
2014-11-05 17:42 - 2003-01-07 02:22 - 00015873 _____ () C:\Windows\SysWOW64\Inetde.dll
2014-11-05 17:42 - 2000-12-05 23:00 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mswinsck.ocx
2014-11-05 17:42 - 2000-10-01 23:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb6de.dll
2014-11-05 17:42 - 2000-05-22 15:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-11-05 17:42 - 2000-05-21 23:00 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomctl.ocx
2014-11-05 17:42 - 2000-04-03 19:06 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winskde.dll
2014-11-05 17:42 - 2000-04-03 19:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2014-11-05 17:42 - 1999-07-14 13:07 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdftde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscmcde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctde.dll
2014-11-05 17:42 - 1998-06-23 23:00 - 00209192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctl32.ocx
2014-11-05 17:41 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-11-05 17:41 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-11-05 17:31 - 2014-11-05 17:31 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-11-05 17:16 - 2014-11-05 17:16 - 00000466 _____ () C:\Users\Peter\Desktop\Eigene Dateien.lnk
2014-11-05 17:15 - 2014-11-05 17:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-11-05 17:14 - 2014-11-05 17:14 - 00001799 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-05 17:14 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files\iTunes
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-05 17:13 - 2014-11-05 17:13 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\iPod
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-11-05 17:12 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple
2014-11-05 17:01 - 2014-11-05 17:01 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Avira
2014-11-05 17:00 - 2014-10-23 14:02 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-11-05 17:00 - 2014-10-23 14:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-11-05 17:00 - 2014-10-23 14:01 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-05 16:58 - 2014-11-05 16:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-05 16:54 - 2014-11-05 17:07 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer
2014-11-05 16:54 - 2014-11-05 16:54 - 00000000 ____D () C:\Users\Peter\AppData\Local\AcerMedia
2014-11-05 16:53 - 2014-11-05 21:47 - 00000000 ____D () C:\Users\Public\OEM
2014-11-05 16:47 - 2014-11-09 11:10 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3585963361-1982867813-4056610559-1001
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Mozilla
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Local\Mozilla
2014-11-05 16:47 - 2014-11-05 16:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-11-05 16:46 - 2014-11-05 16:46 - 00002027 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-11-05 16:45 - 2014-11-09 11:23 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{03F41291-BAE8-4D20-A116-55AAC744BEE2}
2014-11-05 16:45 - 2014-11-06 10:31 - 00002170 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2014-11-05 16:45 - 2014-11-05 18:07 - 00002341 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieUserList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieSiteList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Macromedia
2014-11-05 16:44 - 2014-11-06 13:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\clear.fi
2014-11-05 16:44 - 2014-11-05 16:44 - 00000000 ____D () C:\Users\Peter\PicStream
2014-11-05 16:43 - 2014-11-09 11:05 - 00000000 __RDO () C:\Users\Peter\OneDrive
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Atheros
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-11-05 16:42 - 2014-11-07 16:41 - 00000000 ____D () C:\Users\Peter
2014-11-05 16:42 - 2014-11-05 18:57 - 00000000 ____D () C:\Users\Peter\AppData\Local\Packages
2014-11-05 16:42 - 2014-11-05 16:42 - 00001458 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-05 16:42 - 2014-11-05 16:42 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-11-05 16:42 - 2014-11-05 16:42 - 00000020 ___SH () C:\Users\Peter\ntuser.ini
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Vorlagen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Startmenü
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Netzwerkumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Lokale Einstellungen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Eigene Dateien
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Druckumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Musik
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Bilder
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Verlauf
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Adobe
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Local\VirtualStore
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Program Files\Accessory Store
2014-11-05 16:42 - 2014-07-11 21:18 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-05 16:42 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-05 16:35 - 2014-11-09 11:05 - 01932245 _____ () C:\Windows\WindowsUpdate.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-09 11:12 - 2014-07-11 21:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-11-09 11:12 - 2014-07-11 21:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-11-09 11:12 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-09 11:05 - 2014-03-18 10:54 - 00222172 _____ () C:\Windows\PFRO.log
2014-11-09 11:05 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-09 11:05 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-09 11:04 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-09 11:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-11-07 18:12 - 2013-08-22 15:44 - 00358992 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-07 17:20 - 2014-07-11 11:43 - 00022462 _____ () C:\Windows\DPINST.LOG
2014-11-07 16:26 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-11-07 15:19 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-11-07 14:43 - 2014-07-11 21:11 - 00000000 ____D () C:\Windows\NAPP_Dism_Log
2014-11-06 18:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\registration
2014-11-06 16:30 - 2014-06-11 11:19 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-06 16:10 - 2014-07-11 11:43 - 00001508 _____ () C:\Windows\Synaptics.log
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Acer
2014-11-06 12:11 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-11-05 22:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-11-05 22:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-05 22:27 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-11-05 20:59 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-05 20:58 - 2013-08-22 15:46 - 00023730 _____ () C:\Windows\setupact.log
2014-11-05 20:55 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\WildTangent
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-11-05 19:26 - 2014-07-11 12:07 - 00000000 ____D () C:\Users\Public\CyberLink
2014-11-05 19:26 - 2014-07-11 12:00 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-05 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-11-05 18:06 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-05 18:05 - 2014-07-11 11:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-05 18:03 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-05 18:02 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-05 18:01 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help
2014-11-05 17:46 - 2014-06-11 11:35 - 00000000 ___HD () C:\OEM
2014-11-05 17:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-05 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-11-05 16:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Peter\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-11 10:43
==================== End Of Log ============================
--- --- --- FRST Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-11-2014 01
Ran by Peter at 2014-11-09 11:30:24
Running from C:\Users\Peter\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.04.3005 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.00.2013.0 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8105 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8104 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3012 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8106 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.02.2003 - Acer Incorporated)
Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.01.3003 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.01.3003 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2001.4 - Acer Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.3721 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3914.57 - CyberLink Corp.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Free YouTube to MP3 Converter version 3.12.49.1022 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.49.1022 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.1 - Genesys Logic)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8101 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Kobo (HKLM-x32\...\Kobo) (Version: 3.6.0 - Kobo Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.3 (x86 de)) (Version: 33.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.3 - Mozilla)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.31.423.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3585963361-1982867813-4056610559-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
06-11-2014 17:36:51 Wiederherstellungsvorgang
06-11-2014 18:20:04 Revo Uninstaller's restore point - Mozilla Maintenance Service
06-11-2014 18:20:52 Revo Uninstaller's restore point - Mozilla Firefox 33.0.2 (x86 de)
09-11-2014 09:54:25 Revo Uninstaller's restore point - SpyHunter 4
09-11-2014 10:27:00 Revo Uninstaller's restore point - Google Chrome
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2014-11-06 11:15 - 00450713 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {02686A44-510D-4FFE-99A4-041543659CC8} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-03-17] (Acer Incorporate)
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {22A9A091-6A47-4678-B9FF-CF3754ED3B0D} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-03-21] (Acer Incorporated)
Task: {337BFE19-BD4F-41FC-9E3B-FEDC50BB759A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-05] (Adobe Systems Incorporated)
Task: {6DD03667-4424-4D20-89CA-296485F9DFB3} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {B0D9628A-7251-4606-A034-6F00EF25E986} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {BDD7E3DA-F247-47E7-801E-AE69337BBED2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {C907D47F-769C-4156-97F0-4CEBDE33A7DE} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-03-18] (Acer Incorporated)
Task: {D0D94DBC-EFEA-47B5-993C-8CA15FC16D6A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DD78B00E-7325-43AE-A4A3-AC2C2B092A72} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {E661A666-E4A2-4336-8876-9CCDE4A10367} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-01-24] (TODO: <Company name>)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-11-05 18:01 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-11 12:03 - 2012-04-24 11:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2014-07-11 12:10 - 2014-01-03 13:13 - 00111872 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
2014-02-25 21:14 - 2014-02-25 21:14 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-02-25 21:11 - 2014-02-25 21:11 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-02-25 21:17 - 2014-02-25 21:17 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-06-11 11:38 - 2014-03-07 17:21 - 00080312 _____ () C:\Windows\system32\igfxexps.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-08 12:48 - 2014-11-06 12:09 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00494336 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerSplitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 01200384 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\avformat-lav-55.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00367872 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\avutil-lav-52.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 08122112 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\avcodec-lav-55.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00833280 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\libbluray.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00965888 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerSubtitle.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00374016 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerFLVSplitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00519424 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMP4Splitter2.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00640256 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMP4Splitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00454400 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMKVSplitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00462592 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMpegAudioSplitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00385280 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMpegSplitter.ax
2014-07-11 11:39 - 2013-12-10 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Peter\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-3585963361-1982867813-4056610559-500 - Administrator - Disabled)
Gast (S-1-5-21-3585963361-1982867813-4056610559-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3585963361-1982867813-4056610559-1003 - Limited - Enabled)
Peter (S-1-5-21-3585963361-1982867813-4056610559-1001 - Administrator - Enabled) => C:\Users\Peter
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/09/2014 11:04:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.3.5422, Zeitstempel: 0x545b5277
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.3.5422, Zeitstempel: 0x545b2aeb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x188c
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5
Error: (11/09/2014 11:02:08 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/08/2014 06:05:08 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/08/2014 05:53:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.3.5422, Zeitstempel: 0x545b5277
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.3.5422, Zeitstempel: 0x545b2aeb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x116c
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5
Error: (11/08/2014 01:14:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.1.711, Zeitstempel: 0x542b53ec
Name des fehlerhaften Moduls: mbam.exe, Version: 1.0.1.711, Zeitstempel: 0x542b53ec
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000c0f7a
ID des fehlerhaften Prozesses: 0x1e90
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
Error: (11/08/2014 00:46:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.17037 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: f34
Startzeit: 01cffb490c30f841
Endzeit: 0
Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
Berichts-ID: db776e70-673c-11e4-827e-c454449fdb44
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/08/2014 00:07:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm backgroundTaskHost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1140
Startzeit: 01cffb4372744842
Endzeit: 4294967295
Anwendungspfad: C:\Windows\system32\backgroundTaskHost.exe
Berichts-ID: 65ec06f2-6737-11e4-827d-c454449fdb44
Vollständiger Name des fehlerhaften Pakets: Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
Error: (11/08/2014 11:59:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/08/2014 11:09:45 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/08/2014 10:52:20 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
System errors:
=============
Error: (11/09/2014 11:05:16 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/09/2014 10:55:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/09/2014 10:55:24 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%1062
Error: (11/08/2014 06:44:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/08/2014 00:40:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/08/2014 00:40:25 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%1062
Error: (11/08/2014 00:01:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/08/2014 00:01:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "User Experience Improvement Program" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/08/2014 00:01:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/08/2014 00:01:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (11/09/2014 11:04:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.0.3.5422545b5277mozalloc.dll33.0.3.5422545b2aeb8000000300001425188c01cffc036e743bd6C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllcd5da6fe-67f7-11e4-8280-c454449fdb44
Error: (11/09/2014 11:02:08 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/08/2014 06:05:08 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/08/2014 05:53:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.0.3.5422545b5277mozalloc.dll33.0.3.5422545b2aeb8000000300001425116c01cffb49f8304173C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dlld0b3916f-6767-11e4-827e-c454449fdb44
Error: (11/08/2014 01:14:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.1.711542b53ecmbam.exe1.0.1.711542b53ecc0000005000c0f7a1e9001cffb4aabf12b50C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exeb988d870-6740-11e4-827e-c454449fdb44
Error: (11/08/2014 00:46:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe11.0.9600.17037f3401cffb490c30f8410C:\Program Files\Internet Explorer\iexplore.exedb776e70-673c-11e4-827e-c454449fdb44
Error: (11/08/2014 00:07:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: backgroundTaskHost.exe6.3.9600.16384114001cffb43727448424294967295C:\Windows\system32\backgroundTaskHost.exe65ec06f2-6737-11e4-827d-c454449fdb44Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nntApp
Error: (11/08/2014 11:59:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/08/2014 11:09:45 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (11/08/2014 10:52:20 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 25%
Total physical RAM: 8115.27 MB
Available physical RAM: 6068.84 MB
Total Pagefile: 10035.27 MB
Available Pagefile: 7783.97 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:118.43 GB) (Free:83.03 GB) NTFS
Drive d: (DATA) (Fixed) (Total:914.91 GB) (Free:816.85 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E2A5DCFC)
Partition: GPT Partition Type.
========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: E2A5DCCD)
Partition: GPT Partition Type.
==================== End Of Log ============================
Ich glaube es ist geschafft. Vielen Dank für die schnelle Hilfe!!!  |
|
10.11.2014, 08:33
| #9 |
| /// the machine /// TB-Ausbilder | HTML/Crypted.gen Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Linear-Darstellung
