![]() |
|
Plagegeister aller Art und deren Bekämpfung: HTML/Crypted.genWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() HTML/Crypted.gen Hallo, Nun hats mich auch erwischt. Wollte meinen neuen Rechner einrichten und jetzt habe ich mir crypted.gen eingefangen. Und das nach nur 2 Tagen. Ich habe bereits einige Programme drüberlaufen lassen, leider ohne Erfolg. ![]() FRST Addition sagt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-11-2014 Ran by Peter at 2014-11-06 20:06:44 Running from C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3 Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.04.3005 - Acer Incorporated) abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.00.2013.0 - Acer Incorporated) Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated) Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8105 - Acer Incorporated) Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8104 - Acer Incorporated) Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3012 - Acer Incorporated) Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8106 - Acer Incorporated) Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.02.2003 - Acer Incorporated) Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer) Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.01.3003 - Acer Incorporated) Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.01.3003 - Acer Incorporated) Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2001.4 - Acer Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated) Adobe Reader XI (11.0.04) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira) Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team) CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.) CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.3721 - CyberLink Corp.) CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3914.57 - CyberLink Corp.) eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM) Free YouTube to MP3 Converter version 3.12.49.1022 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.49.1022 - DVDVideoSoft Ltd.) Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.1 - Genesys Logic) Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8101 - Acer Incorporated) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Kobo (HKLM-x32\...\Kobo) (Version: 3.6.0 - Kobo Inc.) Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated) Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 33.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.2 (x86 de)) (Version: 33.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla) Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG) NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation) NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) Pokki Start Menu (HKCU\...\Pokki_Start_Menu) (Version: 0.269.3.181 - ) Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications) Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.31.423.2014 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-3585963361-1982867813-4056610559-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation) ==================== Restore Points ========================= 06-11-2014 12:16:11 06 11 2014 06-11-2014 17:36:51 Wiederherstellungsvorgang 06-11-2014 18:20:04 Revo Uninstaller's restore point - Mozilla Maintenance Service 06-11-2014 18:20:52 Revo Uninstaller's restore point - Mozilla Firefox 33.0.2 (x86 de) ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2014-11-06 11:15 - 00450713 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123moviedownload.com There are 1000 more lines. ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {02686A44-510D-4FFE-99A4-041543659CC8} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-03-17] (Acer Incorporate) Task: {035792A1-D4EF-4A78-BF9A-AA9628C281A3} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {22A9A091-6A47-4678-B9FF-CF3754ED3B0D} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-03-21] (Acer Incorporated) Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {337BFE19-BD4F-41FC-9E3B-FEDC50BB759A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-05] (Adobe Systems Incorporated) Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DD03667-4424-4D20-89CA-296485F9DFB3} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] () Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {B0D9628A-7251-4606-A034-6F00EF25E986} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate) Task: {BDD7E3DA-F247-47E7-801E-AE69337BBED2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] () Task: {BF58E14B-1069-43E0-80DD-BB525A2FD9CD} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics Task: {C907D47F-769C-4156-97F0-4CEBDE33A7DE} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-03-18] (Acer Incorporated) Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D08F1AB1-8F5E-4779-937E-7A750E734C77} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation) Task: {D0D94DBC-EFEA-47B5-993C-8CA15FC16D6A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {DD78B00E-7325-43AE-A4A3-AC2C2B092A72} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate) Task: {E2ACF668-4308-4463-9ECA-B3DD4467FB01} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation Task: {E3BDCA69-0278-4D27-AE94-D673C4802877} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management Task: {E661A666-E4A2-4336-8876-9CCDE4A10367} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-01-24] (TODO: <Company name>) Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2014-11-05 18:01 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-11-05 20:34 - 2014-11-03 13:56 - 04377560 ___SH () C:\Program Files (x86)\Oyridurate\Oyridurate.exe 2014-07-11 12:03 - 2012-04-24 11:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 2014-11-05 20:34 - 2014-11-05 20:34 - 00160728 ____R () C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe 2014-02-25 21:14 - 2014-02-25 21:14 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2014-02-25 21:11 - 2014-02-25 21:11 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll 2014-02-25 21:17 - 2014-02-25 21:17 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe 2014-06-11 11:38 - 2014-03-07 17:21 - 00080312 _____ () C:\Windows\system32\igfxexps.dll 2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-11-05 20:34 - 2014-03-07 19:56 - 00117262 ___SH () C:\Program Files (x86)\Oyridurate\libgcc_s_dw2-1.dll 2014-11-05 20:34 - 2014-03-07 19:56 - 00970766 ___SH () C:\Program Files (x86)\Oyridurate\libstdc++-6.dll 2014-07-11 11:39 - 2013-12-10 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2014-11-06 19:48 - 2014-10-28 03:01 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\Peter\OneDrive:ms-properties ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-3585963361-1982867813-4056610559-500 - Administrator - Disabled) Gast (S-1-5-21-3585963361-1982867813-4056610559-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3585963361-1982867813-4056610559-1003 - Limited - Enabled) Peter (S-1-5-21-3585963361-1982867813-4056610559-1001 - Administrator - Enabled) => C:\Users\Peter ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/06/2014 06:50:27 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: Unbekannter Fehler bei der Systemwiederherstellung: (06 11 2014). Zusätzliche Informationen: 0x80070005. Error: (11/06/2014 06:40:05 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: Unbekannter Fehler bei der Systemwiederherstellung: (06 11 2014). Zusätzliche Informationen: 0x80070005. Error: (11/06/2014 06:12:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.2.5413, Zeitstempel: 0x544ef530 Name des fehlerhaften Moduls: xul.dll, Version: 33.0.2.5413, Zeitstempel: 0x544ef44e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0039e443 ID des fehlerhaften Prozesses: 0x640 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5 Error: (11/06/2014 04:24:52 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (11/06/2014 04:24:52 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (11/06/2014 04:10:17 PM) (Source: Dell-System-Update) (EventID: 0) (User: ) Description: Synaptics MUP installation Utilies Description: Synaptics Pointing device driver Log file: C:\Windows\Synaptics.log Exit code: 1 Error: (11/06/2014 04:08:07 PM) (Source: Dell-System-Update) (EventID: 0) (User: ) Description: Synaptics MUP installation Utilies Description: Synaptics Pointing device driver Log file: C:\Windows\Synaptics.log Exit code: 1 Error: (11/06/2014 01:30:57 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (11/06/2014 01:30:51 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error: (11/06/2014 01:30:47 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. System errors: ============= Error: (11/06/2014 07:31:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/06/2014 06:57:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/06/2014 06:57:24 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: %%1062 Error: (11/06/2014 06:55:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/06/2014 06:47:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/06/2014 06:39:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/06/2014 06:13:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/06/2014 05:55:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (11/06/2014 05:55:25 PM) (Source: DCOM) (EventID: 10010) (User: SCHREIBERLING) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Error: (11/06/2014 05:55:25 PM) (Source: DCOM) (EventID: 10010) (User: SCHREIBERLING) Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9} Microsoft Office Sessions: ========================= Error: (11/06/2014 06:50:27 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: 06 11 20140x80070005 Error: (11/06/2014 06:40:05 PM) (Source: System Restore) (EventID: 8210) (User: ) Description: 06 11 20140x80070005 Error: (11/06/2014 06:12:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.0.2.5413544ef530xul.dll33.0.2.5413544ef44ec00000050039e44364001cff9e4c4646d7cC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll1ddb7c33-65d8-11e4-826f-c454449fdb44 Error: (11/06/2014 04:24:52 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe Error: (11/06/2014 04:24:52 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu(1).exe Error: (11/06/2014 04:10:17 PM) (Source: Dell-System-Update) (EventID: 0) (User: ) Description: Synaptics MUP installation Utilies Description: Synaptics Pointing device driver Log file: C:\Windows\Synaptics.log Exit code: 1 Error: (11/06/2014 04:08:07 PM) (Source: Dell-System-Update) (EventID: 0) (User: ) Description: Synaptics MUP installation Utilies Description: Synaptics Pointing device driver Log file: C:\Windows\Synaptics.log Exit code: 1 Error: (11/06/2014 01:30:57 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu(1).exe Error: (11/06/2014 01:30:51 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu(1).exe Error: (11/06/2014 01:30:47 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu(1).exe ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz Percentage of memory in use: 28% Total physical RAM: 8115.27 MB Available physical RAM: 5794.69 MB Total Pagefile: 10035.27 MB Available Pagefile: 7218.3 MB Total Virtual: 131072 MB Available Virtual: 131071.78 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:118.43 GB) (Free:79.47 GB) NTFS Drive d: (DATA) (Fixed) (Total:914.91 GB) (Free:816.9 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: E2A5DCFC) Partition: GPT Partition Type. ======================================================== Disk: 1 (Size: 119.2 GB) (Disk ID: E2A5DCCD) Partition: GPT Partition Type. ==================== End Of Log ============================ FRST Editior: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014 Ran by Peter (administrator) on SCHREIBERLING on 06-11-2014 20:06:22 Running from C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3 Loaded Profile: Peter (Available profiles: Peter) Platform: Windows 8.1 (Update 1) (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\Oyridurate\Oyridurate.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe () C:\Program Files (x86)\Oyridurate\OyridurateHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe (Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe (Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Farbar) C:\Users\Peter\AppData\Local\Microsoft\Windows\INetCache\IE\7PE4WGH3\FRST64 (1).exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications)) HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-07-11] (Spotify Ltd) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: http=127.0.0.1:9880;https=127.0.0.1:9880 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x254F479DA5F9CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION SearchScopes: HKLM - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB SearchScopes: HKLM-x32 - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB SearchScopes: HKCU - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\mvtrbyba.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-05] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG) R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2014-03-21] (Acer Incorporated) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation) R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-18] (Microsoft Corporation) R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [459496 2014-03-17] (Acer Incorporate) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation) R2 Oyridurate; C:\Program Files (x86)\Oyridurate\Oyridurate.exe [4377560 2014-11-03] () R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457960 2014-03-21] (Acer Incorporate) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] () R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-03-21] (Acer Incorporate) S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [222952 2014-01-24] (acer) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-07-11] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-11] (Microsoft Corporation) S2 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-23] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-23] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-10-23] (Avira Operations GmbH & Co. KG) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [111336 2014-04-28] (GenesysLogic) R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation) R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation) R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-06] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation) S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA) R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated) S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-11-06] () R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-07-11] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-06 19:59 - 2014-11-06 19:59 - 00031921 _____ () C:\Users\Peter\Desktop\Addition.txt 2014-11-06 19:48 - 2014-11-06 19:48 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-11-06 19:48 - 2014-11-06 19:48 - 00001127 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-11-06 19:48 - 2014-11-06 19:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-06 19:48 - 2014-11-06 19:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-06 19:47 - 2014-11-06 19:47 - 36250792 _____ () C:\Users\Peter\Downloads\Firefox_Setup_33.0.2DE.exe 2014-11-06 19:47 - 2014-11-06 19:47 - 00000190 _____ () C:\Users\Peter\Downloads\acv.js 2014-11-06 19:42 - 2014-11-06 20:06 - 00000000 ____D () C:\FRST 2014-11-06 19:25 - 2014-11-06 19:25 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2 (1).exe 2014-11-06 19:12 - 2014-11-06 19:12 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Peter\Downloads\revosetup95.exe 2014-11-06 19:12 - 2014-11-06 19:12 - 00001248 _____ () C:\Users\Peter\Desktop\Revo Uninstaller.lnk 2014-11-06 19:12 - 2014-11-06 19:12 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-11-06 18:55 - 2014-11-06 18:55 - 00000085 _____ () C:\Windows\wininit.ini 2014-11-06 18:21 - 2014-11-06 18:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Peter\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-06 17:49 - 2014-11-06 17:49 - 00004144 _____ () C:\Users\Peter\Downloads\adwcleaner_3.311 - Verknüpfung.lnk 2014-11-06 16:55 - 2014-11-06 16:55 - 01375089 _____ () C:\Users\Peter\Desktop\adwcleaner_3.311.exe 2014-11-06 16:24 - 2014-11-06 16:24 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2.exe 2014-11-06 16:05 - 2014-11-06 18:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer 2014-11-06 11:51 - 2014-11-06 17:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-11-06 11:51 - 2014-11-06 11:51 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-11-06 11:51 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-11-06 11:51 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-11-06 11:51 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-11-06 11:24 - 2014-11-06 18:57 - 00000000 ____D () C:\AdwCleaner 2014-11-06 11:15 - 2013-08-22 14:25 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20141106-111532.backup 2014-11-06 10:34 - 2014-11-06 10:33 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-11-06 09:09 - 2014-11-06 09:09 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-11-05 22:38 - 2014-11-06 10:38 - 00000064 _____ () C:\Users\Peter\AppData\Roaming\WB.CFG 2014-11-05 22:28 - 2014-11-05 22:28 - 00000000 _____ () C:\autoexec.bat 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Programme 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-11-05 21:53 - 2014-11-05 21:53 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\mp3DirectCut 2014-11-05 21:02 - 2014-11-05 21:03 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job 2014-11-05 21:02 - 2014-11-05 21:02 - 00613042 _____ (CMI Limited) C:\Users\Peter\AppData\Local\nshC9BF.tmp 2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Program Files\Realtek 2014-11-05 20:56 - 2000-01-01 01:00 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-11-05 20:56 - 2000-01-01 01:00 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-11-05 20:56 - 2000-01-01 01:00 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-11-05 20:56 - 2000-01-01 01:00 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 02117424 _____ () C:\Windows\system32\SStudio.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-11-05 20:56 - 2000-01-01 01:00 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-11-05 20:56 - 2000-01-01 01:00 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-11-05 20:56 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-11-05 20:55 - 2014-11-05 20:55 - 00002242 _____ () C:\Windows\patsearch.bin 2014-11-05 20:55 - 2014-11-05 20:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNew_01009.Wdf 2014-11-05 20:55 - 2000-01-01 01:00 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-11-05 20:55 - 2000-01-01 01:00 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll 2014-11-05 20:54 - 2014-11-05 20:54 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\AdvancedSystemProtector 2014-11-05 20:41 - 2014-11-05 20:41 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\WildTangent 2014-11-05 20:35 - 2014-11-05 20:35 - 00001075 _____ () C:\Users\Peter\Desktop\mp3DirectCut.lnk 2014-11-05 20:35 - 2014-11-05 20:35 - 00000000 ____D () C:\Program Files (x86)\mp3DirectCut 2014-11-05 20:34 - 2014-11-05 20:34 - 00000000 __SHD () C:\Program Files (x86)\Oyridurate 2014-11-05 19:35 - 2014-11-05 19:35 - 00000424 _____ () C:\Users\Peter\Desktop\Computer.lnk 2014-11-05 19:26 - 2014-11-05 19:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\Cyberlink 2014-11-05 19:21 - 2014-11-05 19:21 - 00001556 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2014-11-05 19:21 - 2014-11-05 19:21 - 00001263 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2014-11-05 19:21 - 2014-11-05 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2014-11-05 19:20 - 2014-11-05 19:21 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-11-05 19:20 - 2014-11-05 19:20 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack 2014-11-05 19:19 - 2014-11-05 19:20 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\DVDVideoSoft 2014-11-05 19:18 - 2014-11-05 19:18 - 00000000 ____D () C:\Users\Peter\AppData\Local\PDF24 2014-11-05 19:16 - 2014-11-05 19:16 - 00001099 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk 2014-11-05 19:16 - 2014-11-05 19:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24 2014-11-05 19:07 - 2014-11-05 19:16 - 00000000 ____D () C:\Program Files (x86)\PDF24 2014-11-05 19:03 - 2014-11-05 19:03 - 00003042 _____ () C:\Windows\System32\Tasks\{5E866BDC-A4D5-4B4E-AEB9-317C2CA84F30} 2014-11-05 18:33 - 2014-11-05 18:33 - 00000000 ____D () C:\Users\Peter\AppData\Local\Macromedia 2014-11-05 18:20 - 2014-11-06 19:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-11-05 18:20 - 2014-11-05 18:21 - 00000000 ____D () C:\Users\Peter\AppData\Local\Adobe 2014-11-05 18:20 - 2014-11-05 18:20 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-11-05 18:17 - 2014-11-05 18:17 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer Aspire R7 Tutorial 2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA Corporation 2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-11-05 18:02 - 2014-10-16 17:54 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-11-05 18:02 - 2014-10-16 17:54 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-11-05 18:02 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2014-11-05 18:02 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2014-11-05 18:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-11-05 18:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2014-11-05 18:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2014-11-05 18:01 - 2014-10-16 15:11 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-11-05 18:01 - 2014-10-16 15:11 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-11-05 18:01 - 2014-10-16 15:11 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-11-05 18:01 - 2014-10-16 15:11 - 01089736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2014-11-05 18:01 - 2014-10-16 15:11 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-11-05 18:01 - 2014-10-16 15:11 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-11-05 18:01 - 2014-10-16 15:11 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2014-11-05 18:01 - 2014-10-16 15:11 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-11-05 18:01 - 2014-10-15 01:48 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin 2014-11-05 18:00 - 2014-10-16 17:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-11-05 18:00 - 2014-10-16 17:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00392008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00348488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-11-05 18:00 - 2014-10-16 17:54 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-11-05 18:00 - 2014-10-16 17:54 - 00027024 _____ () C:\Windows\system32\nvinfo.pb 2014-11-05 17:59 - 2014-10-16 17:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 00500880 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-11-05 17:59 - 2014-10-16 17:54 - 00418112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-11-05 17:57 - 2014-11-05 17:57 - 00000000 ____D () C:\NVIDIA 2014-11-05 17:56 - 2014-11-05 17:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-11-05 17:53 - 2014-11-05 17:53 - 00001033 _____ () C:\Users\Public\Desktop\Kobo.lnk 2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Windows\tmp 2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo 2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Program Files (x86)\Kobo 2014-11-05 17:49 - 2014-11-06 13:05 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys 2014-11-05 17:49 - 2014-11-05 17:49 - 00000000 ____D () C:\Users\Peter\AppData\Local\SlimWare Utilities Inc 2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Spotify 2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Local\Spotify 2014-11-05 17:43 - 2014-11-05 17:43 - 00001045 _____ () C:\Users\Public\Desktop\Biet-O-Matic.lnk 2014-11-05 17:42 - 2014-11-05 17:43 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic 2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\BOM 2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Biet-O-Matic 2014-11-05 17:42 - 2003-01-07 02:22 - 00015873 _____ () C:\Windows\SysWOW64\Inetde.dll 2014-11-05 17:42 - 2000-12-05 23:00 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mswinsck.ocx 2014-11-05 17:42 - 2000-10-01 23:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb6de.dll 2014-11-05 17:42 - 2000-05-22 15:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx 2014-11-05 17:42 - 2000-05-21 23:00 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomctl.ocx 2014-11-05 17:42 - 2000-04-03 19:06 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winskde.dll 2014-11-05 17:42 - 2000-04-03 19:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll 2014-11-05 17:42 - 1999-07-14 13:07 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdftde.dll 2014-11-05 17:42 - 1998-07-05 23:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscmcde.dll 2014-11-05 17:42 - 1998-07-05 23:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctde.dll 2014-11-05 17:42 - 1998-06-23 23:00 - 00209192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctl32.ocx 2014-11-05 17:41 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll 2014-11-05 17:41 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll 2014-11-05 17:31 - 2014-11-05 17:31 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers 2014-11-05 17:16 - 2014-11-05 17:16 - 00000466 _____ () C:\Users\Peter\Desktop\Eigene Dateien.lnk 2014-11-05 17:15 - 2014-11-05 17:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-11-05 17:14 - 2014-11-05 17:14 - 00001799 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Apple Computer 2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple Computer 2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-11-05 17:14 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files\iTunes 2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-11-05 17:13 - 2014-11-05 17:13 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple 2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\iPod 2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-11-05 17:12 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple 2014-11-05 17:01 - 2014-11-05 17:01 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Avira 2014-11-05 17:00 - 2014-10-23 14:02 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-11-05 17:00 - 2014-10-23 14:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-11-05 17:00 - 2014-10-23 14:01 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Avira 2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-11-05 16:58 - 2014-11-05 16:58 - 00000000 ____D () C:\ProgramData\Package Cache 2014-11-05 16:54 - 2014-11-05 17:07 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer 2014-11-05 16:54 - 2014-11-05 16:54 - 00000000 ____D () C:\Users\Peter\AppData\Local\AcerMedia 2014-11-05 16:53 - 2014-11-05 21:47 - 00000000 ____D () C:\Users\Public\OEM 2014-11-05 16:47 - 2014-11-06 19:53 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3585963361-1982867813-4056610559-1001 2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Mozilla 2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Local\Mozilla 2014-11-05 16:47 - 2014-11-05 16:47 - 00000000 ____D () C:\ProgramData\Mozilla 2014-11-05 16:46 - 2014-11-05 16:46 - 00002027 _____ () C:\Users\Public\Desktop\abDocs.lnk 2014-11-05 16:45 - 2014-11-06 15:59 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{03F41291-BAE8-4D20-A116-55AAC744BEE2} 2014-11-05 16:45 - 2014-11-06 10:31 - 00002170 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk 2014-11-05 16:45 - 2014-11-05 18:07 - 00002341 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieUserList 2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieSiteList 2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Macromedia 2014-11-05 16:44 - 2014-11-06 13:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\clear.fi 2014-11-05 16:44 - 2014-11-05 16:44 - 00000000 ____D () C:\Users\Peter\PicStream 2014-11-05 16:43 - 2014-11-06 19:31 - 00000000 __RDO () C:\Users\Peter\OneDrive 2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Atheros 2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA 2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Program Files (x86)\OEM 2014-11-05 16:42 - 2014-11-05 22:27 - 00000000 ____D () C:\Users\Peter 2014-11-05 16:42 - 2014-11-05 18:57 - 00000000 ____D () C:\Users\Peter\AppData\Local\Packages 2014-11-05 16:42 - 2014-11-05 16:42 - 00001458 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-05 16:42 - 2014-11-05 16:42 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2014-11-05 16:42 - 2014-11-05 16:42 - 00000020 ___SH () C:\Users\Peter\ntuser.ini 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Vorlagen 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Startmenü 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Netzwerkumgebung 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Lokale Einstellungen 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Eigene Dateien 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Druckumgebung 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Musik 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Bilder 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Verlauf 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Anwendungsdaten 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Anwendungsdaten 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Adobe 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Local\VirtualStore 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Program Files\Accessory Store 2014-11-05 16:42 - 2014-07-11 21:18 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-11-05 16:42 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-05 16:35 - 2014-11-06 18:55 - 00596159 _____ () C:\Windows\WindowsUpdate.log ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-06 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru 2014-11-06 19:38 - 2014-07-11 21:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat 2014-11-06 19:38 - 2014-07-11 21:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat 2014-11-06 19:38 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-11-06 19:31 - 2014-03-18 10:54 - 00164410 _____ () C:\Windows\PFRO.log 2014-11-06 19:31 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-11-06 19:30 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-11-06 18:46 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\Acer 2014-11-06 18:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\registration 2014-11-06 16:30 - 2014-06-11 11:19 - 00000000 ____D () C:\ProgramData\McAfee 2014-11-06 16:10 - 2014-07-11 11:43 - 00016620 _____ () C:\Windows\DPINST.LOG 2014-11-06 16:10 - 2014-07-11 11:43 - 00001508 _____ () C:\Windows\Synaptics.log 2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Acer 2014-11-06 12:11 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2014-11-05 22:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache 2014-11-05 22:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-11-05 22:27 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-11-05 20:59 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-11-05 20:58 - 2013-08-22 15:46 - 00023730 _____ () C:\Windows\setupact.log 2014-11-05 20:55 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\WildTangent 2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games 2014-11-05 19:26 - 2014-07-11 12:07 - 00000000 ____D () C:\Users\Public\CyberLink 2014-11-05 19:26 - 2014-07-11 12:00 - 00000000 ____D () C:\ProgramData\CyberLink 2014-11-05 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness 2014-11-05 18:06 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-11-05 18:05 - 2014-07-11 11:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-11-05 18:03 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-11-05 18:02 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-11-05 18:01 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help 2014-11-05 17:46 - 2014-06-11 11:35 - 00000000 ___HD () C:\OEM 2014-11-05 17:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF 2014-11-05 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore 2014-11-05 16:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Windows\Panther Some content of TEMP: ==================== C:\Users\Peter\AppData\Local\Temp\617E3F57-C0F1-6F27-115B-3B3EB605D81B.dll C:\Users\Peter\AppData\Local\Temp\617E3F57-C0F1-6F27-115B-3B3EB605D81B.exe C:\Users\Peter\AppData\Local\Temp\69099606-7153-E9CD-352D-B081B00E7C3D.exe C:\Users\Peter\AppData\Local\Temp\AcerPortalSetup.exe C:\Users\Peter\AppData\Local\Temp\AOPSetup.exe C:\Users\Peter\AppData\Local\Temp\avgnt.exe C:\Users\Peter\AppData\Local\Temp\oct210D.tmp.exe C:\Users\Peter\AppData\Local\Temp\Quarantine.exe C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite.dll C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite25226.dll C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite41850.dll C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite43515.dll C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite47256.dll C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite49959.dll C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite54388.dll C:\Users\Peter\AppData\Local\Temp\System.Data.SQLite55550.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-11 10:43 ==================== End Of Log ============================ ADW Cleaner: Code:
ATTFilter # AdwCleaner v3.311 - Bericht erstellt am 06/11/2014 um 20:12:16 # Aktualisiert 30/09/2014 von Xplode # Betriebssystem : Windows 8.1 (64 bits) # Benutzername : Peter - SCHREIBERLING # Gestartet von : C:\Users\Peter\Desktop\adwcleaner_3.311.exe # Option : Suchen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Tasks ] ***** Task Gefunden : APSnotifierPP2 ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17037 -\\ Mozilla Firefox v33.0.2 (x86 de) [ Datei : C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\mvtrbyba.default\prefs.js ] ************************* AdwCleaner[R0].txt - [6862 octets] - [06/11/2014 11:24:55] AdwCleaner[R10].txt - [1876 octets] - [06/11/2014 18:54:23] AdwCleaner[R11].txt - [1937 octets] - [06/11/2014 18:56:37] AdwCleaner[R12].txt - [1104 octets] - [06/11/2014 20:12:16] AdwCleaner[R1].txt - [990 octets] - [06/11/2014 11:30:03] AdwCleaner[R2].txt - [1435 octets] - [06/11/2014 16:55:45] AdwCleaner[R3].txt - [1495 octets] - [06/11/2014 16:58:17] AdwCleaner[R4].txt - [1290 octets] - [06/11/2014 17:02:01] AdwCleaner[R5].txt - [1411 octets] - [06/11/2014 17:11:50] AdwCleaner[R6].txt - [1531 octets] - [06/11/2014 17:22:54] AdwCleaner[R7].txt - [1635 octets] - [06/11/2014 17:49:48] AdwCleaner[R8].txt - [1901 octets] - [06/11/2014 17:57:55] AdwCleaner[R9].txt - [1815 octets] - [06/11/2014 18:13:42] AdwCleaner[S0].txt - [5252 octets] - [06/11/2014 11:25:44] AdwCleaner[S1].txt - [1018 octets] - [06/11/2014 11:31:10] AdwCleaner[S2].txt - [1524 octets] - [06/11/2014 16:58:41] AdwCleaner[S3].txt - [1320 octets] - [06/11/2014 17:03:21] AdwCleaner[S4].txt - [1440 octets] - [06/11/2014 17:12:36] AdwCleaner[S5].txt - [1447 octets] - [06/11/2014 17:37:20] AdwCleaner[S6].txt - [1930 octets] - [06/11/2014 18:12:42] AdwCleaner[S7].txt - [1966 octets] - [06/11/2014 18:57:12] ########## EOF - C:\AdwCleaner\AdwCleaner[R12].txt - [2184 octets] ########## Besten Dank schonmal. VG Peter |