![]() |
|
Plagegeister aller Art und deren Bekämpfung: Avast! meldet Win32:Evo-gen[Susp] ORT: FirewallAPI.dll, Prozess: unterschiedlichWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #3 |
![]() | ![]() Avast! meldet Win32:Evo-gen[Susp] ORT: FirewallAPI.dll, Prozess: unterschiedlich Also gerade hab ich den PC aufgedreht und da gestern wieder ein Virendatenbank Updated von Avast veröffentlich wurde, meldete er wie bisher die FirewallAPI.dll wobei aber diesmal gebeten wurde den PC neu zu starten um einen Scan (glaub nennt man Bootscan) durchzuführen. Wobei aber nicht wie bislang das gezielte untersuchen der FirewallAPI.dll negativ sonder diesmal positiv ausfiel und er versuchte die Datei zu korrigieren, was aber leider nicht funktionierte. So hab mal einen Scan mit FRST64 machen lassen.
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-11-2014 Ran by RedMax (administrator) on REDMAX on 15-11-2014 08:22:58 Running from C:\Users\RedMax\Downloads Loaded Profile: RedMax (Available profiles: RedMax) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Englisch (USA) Internet Explorer Version 8 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (TuneUp Software) D:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe (Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe (TuneUp Software) D:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Sony Computer Entertainment Inc.) C:\Program Files (x86)\Sony\Content Manager Assistant\CMAWatcher.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Valve Corporation) E:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Logitech, Inc.) C:\Users\RedMax\AppData\Local\Logitech® Webcam-Software\Logishrd\LU2.0\LULnchr.exe (Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LU_1\LULnchr.exe (Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LU_1\LogitechUpdate.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6470760 2012-05-15] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1175656 2012-05-11] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [10464536 2014-07-02] (Logitech Inc.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072 2014-11-06] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech Inc.) HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\Run: [Steam] => E:\Program Files (x86)\Steam\steam.exe [1940160 2014-11-12] (Valve Corporation) HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-29] (Piriform Ltd) HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\MountPoints2: {fc73d018-4263-11e2-b163-806e6f6e6963} - F:\.\Bin\ASSETUP.exe IFEO\consumer_cpl.exe: [Debugger] "D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TUAutoReactivator64.EXE" IFEO\express.exe: [Debugger] "D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TUAutoReactivator64.EXE" IFEO\hamachi-2-ui.exe: [Debugger] "D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TUAutoReactivator64.EXE" IFEO\overwolflauncher.exe: [Debugger] "D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TUAutoReactivator64.EXE" IFEO\owuninstaller.exe: [Debugger] "D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TUAutoReactivator64.EXE" IFEO\prefutil.exe: [Debugger] "D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TUAutoReactivator64.EXE" IFEO\teamviewer.exe: [Debugger] "D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TUAutoReactivator64.EXE" Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Inhaltsmanager-Assistent für PlayStation(R).lnk ShortcutTarget: Inhaltsmanager-Assistent für PlayStation(R).lnk -> C:\Program Files (x86)\Sony\Content Manager Assistant\CMA.exe (Sony Computer Entertainment Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3132EC287B76CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01 HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\RedMax\AppData\Roaming\Mozilla\Firefox\Profiles\mcwo6oe9.default FF DefaultSearchUrl: https://www.google.com/search FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: about:home FF Keyword.URL: https://www.google.com/search FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll () FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB) FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.3 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> d:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll () FF Plugin-x32: @canon.com/MycameraPlugin -> d:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3268893772-689285336-3042597260-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\RedMax\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-3268893772-689285336-3042597260-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKU\S-1-5-21-3268893772-689285336-3042597260-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF Plugin HKU\S-1-5-21-3268893772-689285336-3042597260-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF user.js: detected! => C:\Users\RedMax\AppData\Roaming\Mozilla\Firefox\Profiles\mcwo6oe9.default\user.js FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Adblock Plus - C:\Users\RedMax\AppData\Roaming\Mozilla\Firefox\Profiles\mcwo6oe9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-28] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-12-10] FF Extension: No Name - C:\Users\RedMax\AppData\Roaming\Mozilla\Firefox\Profiles\mcwo6oe9.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [Not Found] FF Extension: No Name - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} [Not Found] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-22] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-22] (AVAST Software) R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [233328 2012-01-23] (DTS, Inc) S3 Garmin Core Update Service; D:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [441176 2014-08-27] (Garmin Ltd or its subsidiaries) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation) S4 Hamachi2Svc; D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2544976 2014-07-21] (LogMeIn Inc.) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-11-06] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation) S3 Origin Client Service; E:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-09] (Electronic Arts) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-05-18] () R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148664 2012-11-09] (Crawler.com) R2 TuneUp.UtilitiesSvc; D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TUNEUPUTILITIESSERVICE64.EXE [2103096 2013-12-18] (TuneUp Software) S4 WTabletServiceCon; C:\PROGRAM FILES\TABLET\PEN\WTABLETSERVICECON.EXE [619904 2012-12-11] (Wacom Technology, Corp.) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-22] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-22] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-22] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-22] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-22] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-22] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-22] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-22] () R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-02-18] () R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.) R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31136 2013-08-27] (REALiX(tm)) R1 ISODrive; d:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.) R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.) R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-02-18] () R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2012-12-26] (Windows (R) Win 7 DDK provider) R3 TuneUpUtilitiesDrv; D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [53760 2012-09-28] (Apple, Inc.) [File not signed] S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X] S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-15 08:22 - 2014-11-15 08:23 - 00021588 _____ () C:\Users\RedMax\Downloads\FRST.txt 2014-11-15 08:22 - 2014-11-15 08:23 - 00000000 ____D () C:\FRST 2014-11-15 08:22 - 2014-11-15 08:22 - 02116608 _____ (Farbar) C:\Users\RedMax\Downloads\FRST64.exe 2014-11-15 08:20 - 2014-11-15 08:20 - 00000000 ____H () C:\ProgramData\cm-lock 2014-11-14 18:13 - 2014-11-14 18:13 - 00009438 _____ () C:\Users\RedMax\Downloads\hijackthis.log 2014-11-14 18:13 - 2014-11-14 18:13 - 00000037 _____ () C:\Users\RedMax\Desktop\Neues Textdokument (2).txt 2014-11-14 18:11 - 2014-11-14 18:11 - 00388608 _____ (Trend Micro Inc.) C:\Users\RedMax\Downloads\HijackThis.exe 2014-11-14 02:51 - 2014-11-14 02:52 - 00301302 _____ () C:\Users\RedMax\Desktop\firewall.dll screen.bmp 2014-11-14 02:46 - 2014-11-14 02:46 - 00001228 _____ () C:\Users\RedMax\Documents\mbam 14.11.14 mit rootkit suche.txt 2014-11-14 02:35 - 2014-11-14 02:35 - 00001212 _____ () C:\Users\RedMax\Documents\mbam 14.11.14.txt 2014-11-14 02:15 - 2014-11-14 02:15 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-11-14 02:15 - 2014-11-14 02:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-11-14 02:15 - 2014-11-14 02:15 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-11-14 02:15 - 2014-11-14 02:15 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-11-14 01:07 - 2014-11-14 01:07 - 00201903 _____ () C:\Users\RedMax\Downloads\Neues Textdokument.txt 2014-11-14 00:46 - 2014-11-14 00:46 - 00128320 _____ () C:\Users\RedMax\Downloads\OTL1.Txt 2014-11-14 00:45 - 2014-11-14 00:45 - 00272118 _____ () C:\Users\RedMax\Downloads\Extras.Txt 2014-11-14 00:45 - 2014-11-14 00:45 - 00128320 _____ () C:\Users\RedMax\Downloads\OTL.Txt 2014-11-14 00:26 - 2014-11-14 00:26 - 00602112 _____ (OldTimer Tools) C:\Users\RedMax\Downloads\OTL.exe 2014-11-14 00:03 - 2014-11-14 00:03 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys 2014-11-14 00:02 - 2014-11-14 00:03 - 00000000 ____D () C:\ProgramData\RogueKiller 2014-11-14 00:02 - 2014-11-14 00:02 - 17535064 _____ () C:\Users\RedMax\Downloads\RogueKillerX64.exe 2014-11-13 23:18 - 2014-11-14 16:18 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-11-13 23:17 - 2014-11-13 23:17 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-11-13 23:17 - 2014-11-13 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-11-13 23:17 - 2014-11-13 23:17 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-13 23:17 - 2014-11-13 23:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-11-13 23:17 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-11-13 23:17 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-11-13 23:17 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-11-13 23:15 - 2014-11-13 23:15 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\RedMax\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-13 22:43 - 2014-11-14 02:19 - 00002264 _____ () C:\Windows\PFRO.log 2014-11-13 22:34 - 2014-11-13 22:35 - 00002268 _____ () C:\Windows\logboot_13.11.2014.tureg.log 2014-11-13 22:31 - 2014-11-13 22:43 - 00000000 ____D () C:\AdwCleaner 2014-11-13 20:53 - 2014-11-13 20:53 - 02140160 _____ () C:\Users\RedMax\Downloads\adwcleaner_4.101.exe 2014-11-13 18:09 - 2014-11-15 08:20 - 00001680 _____ () C:\Windows\setupact.log 2014-11-13 18:09 - 2014-11-13 18:09 - 00000000 _____ () C:\Windows\setuperr.log 2014-11-13 18:07 - 2014-11-13 18:07 - 00170262 _____ () C:\Users\RedMax\Documents\cc_20141113_180740.reg 2014-11-13 18:03 - 2014-11-13 18:04 - 04977216 _____ (Piriform Ltd) C:\Users\RedMax\Downloads\ccsetup419.exe 2014-11-13 15:17 - 2014-09-14 15:17 - 00000032 ____R () C:\ProgramData\hash.dat 2014-11-11 15:36 - 2014-10-03 20:23 - 00038216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-11-11 15:36 - 2014-10-03 20:23 - 00032584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-11-10 23:18 - 2014-11-10 23:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-10 17:27 - 2014-11-03 21:25 - 00615568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-11-10 17:25 - 2014-11-04 01:04 - 31891784 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 24555208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 20923712 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 18514080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 17259848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 14031448 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 13943904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 13207184 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-11-10 17:25 - 2014-11-04 01:04 - 11397208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 11335408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 04289168 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434465.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434465.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00962704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00922256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00898192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00870624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00501064 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00391824 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00349504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-11-10 17:25 - 2014-11-04 01:04 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-11-05 18:55 - 2014-11-02 22:48 - 00002775 _____ () C:\Users\RedMax\Downloads\defaultVehicles.xml 2014-11-05 14:22 - 2014-10-30 05:53 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434460.dll 2014-11-05 14:22 - 2014-10-30 05:53 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434460.dll 2014-11-03 00:39 - 2014-11-03 00:43 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\.technic 2014-11-03 00:39 - 2014-11-03 00:39 - 02346942 _____ () C:\Users\RedMax\Downloads\TechnicLauncher.exe 2014-11-02 17:57 - 2014-10-04 00:20 - 03363848 _____ (ETS2MP Team ) C:\Users\RedMax\Downloads\Install ETS2MP.exe 2014-11-01 19:55 - 2014-11-01 19:56 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\Cubic 2014-11-01 16:37 - 2014-11-01 16:48 - 00000000 ____D () C:\Users\RedMax\AppData\Local\CSO 2014-11-01 16:37 - 2014-11-01 16:37 - 00000000 ____D () C:\ProgramData\Nexon 2014-10-30 19:52 - 2014-10-30 19:56 - 00000000 ____D () C:\Users\RedMax\Documents\GHOSTBUSTERS (tm) 2014-10-30 19:52 - 2014-10-30 19:52 - 00000000 ____D () C:\Users\RedMax\AppData\Local\GHOSTBUSTERS (tm) 2014-10-29 17:55 - 2014-10-30 22:16 - 00000000 ____D () C:\Users\RedMax\Documents\wmd_symbol_cache 2014-10-29 17:55 - 2014-10-29 18:29 - 00000000 ____D () C:\Users\RedMax\Documents\CARS 2014-10-29 11:07 - 2014-10-29 11:07 - 00244392 _____ () C:\Users\RedMax\Downloads\Firefox Setup Stub 33.0.2.exe 2014-10-29 11:04 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll 2014-10-29 11:04 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll 2014-10-21 14:33 - 2014-10-21 14:33 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-10-21 14:33 - 2014-10-21 14:33 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-10-21 14:33 - 2014-10-21 14:33 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-10-21 14:33 - 2014-10-21 14:33 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-10-21 14:33 - 2014-10-21 14:33 - 00000000 ____D () C:\Program Files (x86)\Java 2014-10-20 18:12 - 2014-10-22 10:47 - 00000000 ____D () C:\Users\RedMax\Documents\Assetto Corsa 2014-10-16 21:18 - 2014-10-16 21:18 - 00000000 ____D () C:\Program Files (x86)\Sony ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-15 08:20 - 2014-01-16 01:25 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-11-15 08:20 - 2014-01-15 23:54 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-11-15 08:20 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-11-15 07:46 - 2014-09-10 20:29 - 22833977 _____ () C:\Users\RedMax\Downloads\Mirillis.Action.1.17.4.rar 2014-11-15 07:04 - 2009-07-14 05:45 - 00010016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-11-15 07:04 - 2009-07-14 05:45 - 00010016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-11-14 20:40 - 2012-12-10 02:00 - 02023238 _____ () C:\Windows\WindowsUpdate.log 2014-11-14 19:42 - 2012-12-10 02:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-11-14 13:30 - 2014-04-15 00:00 - 00000000 ___RD () C:\Users\RedMax\Documents\MAGIX 2014-11-14 13:28 - 2013-08-13 08:49 - 00000000 ____D () C:\ProgramData\MAGIX 2014-11-14 12:11 - 2013-01-08 12:24 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\vlc 2014-11-14 11:03 - 2014-09-02 00:37 - 00000000 ____D () C:\Users\RedMax\AppData\Local\CrashDumps 2014-11-14 02:49 - 2012-12-23 23:55 - 00007601 _____ () C:\Users\RedMax\AppData\Local\resmon.resmoncfg 2014-11-14 02:19 - 2012-12-11 18:51 - 00000000 ____D () C:\Program Files\WinRAR 2014-11-14 02:17 - 2014-06-25 16:32 - 00000747 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-11-14 02:17 - 2012-12-11 18:51 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-11-14 02:17 - 2012-12-11 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-11-14 00:32 - 2014-08-21 00:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis 2014-11-14 00:11 - 2012-12-10 02:07 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\Adobe 2014-11-14 00:10 - 2014-08-29 07:52 - 00000000 ____D () C:\ProgramData\TechSmith 2014-11-14 00:10 - 2012-12-10 01:57 - 00000000 ____D () C:\Users\RedMax 2014-11-13 22:44 - 2012-12-10 19:05 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-11-13 22:35 - 2009-07-14 03:34 - 63438848 _____ () C:\Windows\system32\config\SOFTWARE_tureg_old 2014-11-13 22:35 - 2009-07-14 03:34 - 25952256 _____ () C:\Windows\system32\config\SYSTEM_tureg_old 2014-11-13 22:35 - 2009-07-14 03:34 - 00024576 _____ () C:\Windows\system32\config\SECURITY_tureg_old 2014-11-13 22:33 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\DEFAULT_tureg_old 2014-11-13 22:33 - 2009-07-14 03:34 - 00065536 _____ () C:\Windows\system32\config\SAM_tureg_old 2014-11-13 20:03 - 2013-11-05 01:42 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\TS3Client 2014-11-13 18:06 - 2013-02-11 22:40 - 00000000 ____D () C:\Users\RedMax\AppData\Local\LogMeIn Hamachi 2014-11-13 18:06 - 2013-01-16 21:17 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\TeamViewer 2014-11-13 18:06 - 2012-12-17 10:49 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\Azureus 2014-11-13 18:05 - 2014-07-10 11:02 - 00000782 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-11-13 18:05 - 2014-01-16 01:25 - 00000000 ____D () C:\Program Files\CCleaner 2014-11-12 22:35 - 2014-08-16 17:04 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\milestone 2014-11-12 20:11 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-11-12 18:42 - 2012-12-10 02:07 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-11-12 18:42 - 2012-12-10 02:07 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-11-12 18:42 - 2012-12-10 02:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-11-12 14:34 - 2014-09-20 22:35 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\.minecraft 2014-11-11 17:18 - 2014-04-28 12:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-11 16:14 - 2013-01-17 23:45 - 00000000 ____D () C:\Users\RedMax\Documents\Euro Truck Simulator 2 2014-11-11 00:45 - 2014-07-17 22:35 - 00001714 _____ () C:\Users\RedMax\Desktop\eurotrucks2.xml 2014-11-10 17:27 - 2012-12-10 02:38 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-11-09 20:26 - 2013-01-07 09:34 - 00000000 ____D () C:\ProgramData\Origin 2014-11-09 18:54 - 2013-01-07 09:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2014-11-09 18:21 - 2012-12-10 02:10 - 00000000 ____D () C:\Users\RedMax\Documents\my games 2014-11-08 08:44 - 2012-12-10 02:03 - 00698688 _____ () C:\Windows\system32\perfh007.dat 2014-11-08 08:44 - 2012-12-10 02:03 - 00148828 _____ () C:\Windows\system32\perfc007.dat 2014-11-08 08:44 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-11-06 18:06 - 2014-06-28 20:30 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2014-11-06 18:06 - 2014-06-28 20:30 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2014-11-06 18:06 - 2014-01-15 23:55 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-11-06 18:06 - 2014-01-15 23:55 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-11-05 02:43 - 2012-12-10 20:09 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\Skype 2014-11-04 01:04 - 2014-01-15 23:54 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-11-04 01:04 - 2014-01-15 23:54 - 00059592 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-11-04 01:04 - 2014-01-15 23:53 - 20985544 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-11-04 01:04 - 2014-01-15 23:53 - 19966344 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-11-04 01:04 - 2014-01-15 23:53 - 16884632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-11-04 01:04 - 2014-01-15 23:53 - 03238040 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-11-04 01:04 - 2014-01-15 23:53 - 02849736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-11-04 01:04 - 2014-01-15 23:53 - 00987520 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-11-04 01:04 - 2014-01-15 23:53 - 00027094 _____ () C:\Windows\system32\nvinfo.pb 2014-11-03 23:02 - 2014-01-15 23:54 - 06882448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-11-03 23:02 - 2014-01-15 23:54 - 03531464 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-11-03 23:02 - 2014-01-15 23:54 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-11-03 23:02 - 2014-01-15 23:54 - 00935232 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-11-03 23:02 - 2014-01-15 23:54 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-11-03 23:02 - 2014-01-15 23:54 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-11-03 12:58 - 2014-01-15 23:54 - 04099264 _____ () C:\Windows\system32\nvcoproc.bin 2014-11-02 17:58 - 2014-05-04 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer 2014-10-29 20:07 - 2013-05-04 09:08 - 00000000 ____D () C:\Users\RedMax\AppData\Roaming\SpinTires 2014-10-29 16:49 - 2014-06-21 13:44 - 00000000 ____D () C:\Users\RedMax\AppData\Local\Adobe 2014-10-29 11:08 - 2014-04-28 12:21 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-10-29 11:08 - 2014-04-28 12:21 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-10-23 11:18 - 2014-06-17 21:34 - 00000000 ____D () C:\Users\RedMax\Documents\BEWERBUNGEN 2014-10-21 14:33 - 2013-09-22 21:38 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-16 21:18 - 2013-12-24 21:07 - 00001279 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inhaltsmanager-Assistent für PlayStation(R).lnk Files to move or delete: ==================== C:\ProgramData\hash.dat Some content of TEMP: ==================== C:\Users\RedMax\AppData\Local\Temp\dllnt_dump.dll C:\Users\RedMax\AppData\Local\Temp\Quarantine.exe C:\Users\RedMax\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-05 00:55 ==================== End Of Log ============================ --- --- --- --- --- --- Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-11-2014 Ran by RedMax at 2014-11-15 08:23:32 Running from C:\Users\RedMax\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 8BitBoy (HKLM-x32\...\Steam App 296910) (Version: - AwesomeBlade) 8BitMMO (HKLM-x32\...\Steam App 250420) (Version: - Archive Entertainment) ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated) Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated) Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Among the Sleep (HKLM-x32\...\Steam App 250620) (Version: - Krillbite Studio) Anarchy Arcade (HKLM-x32\...\Steam App 266430) (Version: - Elijah Newman-Gomez) ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.10 - Michael Tippach) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology) Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.4.000 - Asmedia Technology) Assetto Corsa (HKLM-x32\...\Steam App 244210) (Version: - Kunos Simulazioni) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Audiosurf (HKLM-x32\...\Steam App 12900) (Version: - BestGameEver) Audiosurf 2 (HKLM-x32\...\Steam App 235800) (Version: - Dylan Fitterer) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software) Bamboo Dock (HKLM-x32\...\Bamboo Dock) (Version: 4.1 - Wacom Co., Ltd.) Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden Bang Bang Racing (HKLM-x32\...\Steam App 207020) (Version: - Digital Reality Software & Playbox) BattleBlock Theater (HKLM-x32\...\Steam App 238460) (Version: - The Behemoth) Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB) Bejeweled® 3 (HKLM-x32\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.) BioShock Infinite (HKLM-x32\...\Steam App 8870) (Version: - Irrational Games) Blockscape (HKLM-x32\...\Steam App 223490) (Version: - ioneo) Blood: One Unit Whole Blood (HKLM-x32\...\Steam App 299030) (Version: - Monolith Productions) Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version: - 2K Australia) CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.7.2.11 - Canon Inc.) Canon Internet Library for ZoomBrowser EX (HKLM-x32\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.6.3.9 - Canon Inc.) Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.5.0.7 - Canon Inc.) Canon Utilities Digital Photo Professional 3.8 (HKLM-x32\...\DPP) (Version: 3.8.1.0 - Canon Inc.) Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.8.1.0 - Canon Inc.) Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.) Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.7.0.0 - Canon Inc.) Canon Utilities WFT Utility (HKLM-x32\...\WFTK) (Version: 3.5.1.1 - Canon Inc.) Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.5.1.15 - Canon Inc.) Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.3.0.4 - Canon Inc.) Car Mechanic Simulator 2014 (HKLM-x32\...\Steam App 270850) (Version: - PlayWay S.A.) Carmageddon: Reincarnation (HKLM-x32\...\Steam App 249380) (Version: - Stainless Games Ltd) Castle Crashers (HKLM-x32\...\Steam App 204360) (Version: - The Behemoth) CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform) Circuits (HKLM-x32\...\Steam App 282760) (Version: - Digital Tentacle) City Car Driving 1.2.2 (HKLM-x32\...\{CC457F3D-5CDE-4CE8-9685-90A4EDE81374}_is1) (Version: - Forward Development) CloneCD (HKLM-x32\...\CloneCD) (Version: - SlySoft) Cosmic DJ (HKLM-x32\...\Steam App 297110) (Version: - Gl33k) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve) Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts) Cubic Castles (HKLM-x32\...\Steam App 317470) (Version: - Cosmic Cow LLC) Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version: - Stunlock Studios) Death Rally (HKLM-x32\...\Steam App 108700) (Version: - ) Deus Ex: Human Revolution - Director's Cut (HKLM-x32\...\Steam App 238010) (Version: - Eidos Montreal) DiRT 2 (HKLM-x32\...\Steam App 12840) (Version: - Codemasters Racing Studio) DiRT 3 (HKLM-x32\...\Steam App 44320) (Version: - Codemasters) DiRT Showdown (HKLM-x32\...\Steam App 201700) (Version: - Codemasters Racing Studio) Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks) DLC Quest (HKLM-x32\...\Steam App 230050) (Version: - Going Loud Studios) Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - ) Dropbox (HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.) Drunken Robot Pornography (HKLM-x32\...\Steam App 209060) (Version: - Dejobaan Games, LLC) DuckTales Remastered (HKLM-x32\...\Steam App 237630) (Version: - Wayforward) Duke Nukem 3D: Megaton Edition (HKLM-x32\...\Steam App 225140) (Version: - ) Eldritch (HKLM-x32\...\Steam App 252630) (Version: - Minor Key Games) Elevated Installer (x32 Version: 3.2.18.0 - Garmin Ltd or its subsidiaries) Hidden EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - ) Epson Stylus SX210_SX410_TX210_TX410 Handbuch (HKLM-x32\...\Epson Stylus SX210_SX410_TX210_TX410 Benutzerhandbuch) (Version: - ) EPSON SX410 Series Printer Uninstall (HKLM\...\EPSON SX410 Series) (Version: - SEIKO EPSON Corporation) erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB) Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - ) Euro Truck Simulator 2 Multiplayer 0.1.0.9 Alpha R3 (HKLM-x32\...\{A227B892-C548-4490-9C5D-DB341F8194A6}_is1) (Version: 0.1.0.9 Alpha R3 - ETS2MP Team) Evoland (HKLM-x32\...\Steam App 233470) (Version: - Shiro Games) F.E.A.R. 3 (HKLM-x32\...\Steam App 21100) (Version: - Day 1 Studios) F1 Race Stars (HKLM-x32\...\Steam App 203680) (Version: - Codemasters) FaceRig (HKLM-x32\...\Steam App 274920) (Version: - Holotech Studios) Far Cry® 3 Blood Dragon (HKLM-x32\...\Steam App 233270) (Version: - Ubisoft Montreal) Farming Simulator 15 (HKLM-x32\...\Steam App 313160) (Version: - Giants Software) Final Exam (HKLM-x32\...\Steam App 233190) (Version: - Mighty Rocket Studio) Firefall (HKLM-x32\...\Steam App 227700) (Version: - Red 5 Studios) FL Studio 10 (HKLM-x32\...\FL Studio 10) (Version: - Image-Line) FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - ) Game Dev Tycoon (HKLM-x32\...\Steam App 239820) (Version: - Greenheart Games) Garmin Express (HKLM-x32\...\{22939821-cd61-449c-8a03-cff0af03c156}) (Version: 3.2.18.0 - Garmin Ltd or its subsidiaries) Garmin Express (x32 Version: 3.2.18.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express Tray (x32 Version: 3.2.18.0 - Garmin Ltd or its subsidiaries) Hidden Gas Guzzlers Extreme (HKLM-x32\...\Steam App 243800) (Version: - ) Ghostbusters: The Video Game (HKLM-x32\...\Steam App 9870) (Version: - Terminal Reality) GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team) Gnomoria (HKLM-x32\...\Steam App 224500) (Version: - ) Goat Simulator (HKLM-x32\...\Steam App 265930) (Version: - Coffee Stain Studios) Gun Monkeys (HKLM-x32\...\Steam App 239450) (Version: - Size Five Games) Guncraft (HKLM-x32\...\Steam App 241720) (Version: - Exato Games Studio) Hammerwatch (HKLM-x32\...\Steam App 239070) (Version: - Crackshell) Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games) IDJ 3-Osc VA (HKLM-x32\...\{3509A66E-C73E-4737-A1AF-00D0B92DDCB5}) (Version: 1.2 - InternetDJ) IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line) Inhaltsmanager-Assistent für PlayStation(R) (HKLM-x32\...\{E6EB4571-5ADB-4557-8F95-0E0EF5D0F833}) (Version: 3.30.7824.86 - Sony Computer Entertainment Inc.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation) Intel(R) Network Connections 17.3.63.0 (HKLM\...\PROSetDX) (Version: 17.3.63.0 - Intel) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation) Ion Assault (HKLM-x32\...\Steam App 41730) (Version: - Coreplay GmbH) Java 7 Update 67 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417067FF}) (Version: 7.0.670 - Oracle) Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Jet Car Stunts (HKLM-x32\...\Steam App 274880) (Version: - GRIP Digital s.r.o.) Joe Danger (HKLM-x32\...\Steam App 229890) (Version: - Hello Games) Joe Danger 2: The Movie (HKLM-x32\...\Steam App 242110) (Version: - Hello Games) Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version: - ) L.A. Noire (HKLM-x32\...\Steam App 110800) (Version: - Team Bondi) Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve) Legend of Dungeon (HKLM-x32\...\Steam App 238280) (Version: - ) LEGO Digital Designer (HKLM-x32\...\New LEGO Digital Designer) (Version: - LEGO A/S) LEGO MARVEL Super Heroes (HKLM-x32\...\Steam App 249130) (Version: - Traveller's Tales) LIMBO (HKLM-x32\...\Steam App 48000) (Version: - Playdead) Little Inferno (HKLM-x32\...\Steam App 221260) (Version: - Tomorrow Corporation) Little Racers STREET (HKLM-x32\...\Steam App 262690) (Version: - Milkstone Studios) Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech) Logitech Gaming Software 8.53 (HKLM\...\Logitech Gaming Software) (Version: 8.53.186 - Logitech Inc.) Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.227 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.227 - LogMeIn, Inc.) Hidden Lovely Planet (HKLM-x32\...\Steam App 298600) (Version: - QUICKTEQUILA) Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios) Magrunner: Dark Pulse (HKLM-x32\...\Steam App 209630) (Version: - Frogwares) Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) ManiaPlanet (HKLM-x32\...\ManiaPlanet_is1) (Version: - Nadeo) Mashed (HKLM-x32\...\Steam App 281280) (Version: - Supersonic Software) Metro: Last Light (HKLM-x32\...\Steam App 43160) (Version: - 4A Games) Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 RC (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50861 - Microsoft Corporation) Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: 10.0.61637.0 - Microsoft Game Studios) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Mini Motor Racing EVO (HKLM-x32\...\Steam App 209520) (Version: - The Binary Mill) Monaco (HKLM-x32\...\Steam App 113020) (Version: - Pocketwatch Games) MoodTuner (HKLM-x32\...\com.gugga.radiomini) (Version: 1.1 - GUGA EOOD) MoodTuner (x32 Version: 1.1 - GUGA EOOD) Hidden Mortal Kombat Komplete Edition (HKLM-x32\...\Steam App 237110) (Version: - NetherRealm Studios) Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MUD - FIM Motocross World Championship™ (HKLM-x32\...\Steam App 226780) (Version: - Milestone S.r.l.) MX vs ATV Reflex (HKLM-x32\...\Steam App 55140) (Version: - Double Helix Games) My Game Long Name (HKLM\...\UDK-1ec563c2-6e39-423b-9d4b-ea659dd9c110) (Version: - Epic Games, Inc.) MyFreeCodec (HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\MyFreeCodec) (Version: - ) Need for Speed™ Carbon (HKLM-x32\...\{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}) (Version: - ) Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts) Need for Speed™ Rivals (HKLM-x32\...\{E0A32336-AA27-4053-99B2-C3380B7B95AC}) (Version: 1.4.0.0 - Electronic Arts) Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts) Next Car Game (HKLM-x32\...\Steam App 228380) (Version: - Bugbear) Next Car Game Sneak Peek 2.0 (HKLM-x32\...\Steam App 272860) (Version: - Bugbear) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team) Nur Entfernen der CopyTrans Suite möglich (HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\CopyTrans Suite) (Version: 2.37 - WindSolutions) NVIDIA 3D Vision Controller-Treiber 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.65 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.65 - NVIDIA Corporation) NVIDIA 3D Vision Video Player (HKLM-x32\...\{D312F154-8455-45C1-A44E-1AED321E6E95}) (Version: 1.6.4 - NVIDIA Corporation) NVIDIA Design Garage (HKLM-x32\...\{008F0183-9DD2-49E3-8F73-12752042355A}) (Version: 1.0.0.0 - NVIDIA Corporation) NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation) NVIDIA Grafiktreiber 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.65 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) NVIDIA Supersonic Sled demo (HKLM-x32\...\Supersonic Sled) (Version: - ) Off-Road Drive (HKLM-x32\...\Steam App 200230) (Version: - 1C-Avalon) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation) Origin (HKLM-x32\...\Origin) (Version: 9.1.3.2637 - Electronic Arts, Inc.) Outlast (HKLM-x32\...\Steam App 238320) (Version: - Red Barrels) PAC-MAN Championship Edition DX+ (HKLM-x32\...\Steam App 236450) (Version: - Mine Loader Software Co., Ltd.) PAC-MAN MUSEUM (HKLM-x32\...\Steam App 236470) (Version: - NAMCO BANDAI Studio Inc.) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.) Paranautical Activity (HKLM-x32\...\Steam App 250580) (Version: - Code Avarice) Paranormal (HKLM-x32\...\Steam App 246300) (Version: - ) PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games) Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.) Pool Nation (HKLM-x32\...\Steam App 254440) (Version: - Cherry Pop Games) Proteus (HKLM-x32\...\Steam App 219680) (Version: - Ed Key and David Kanaga) Puddle (HKLM-x32\...\Steam App 222140) (Version: - ) RaceRoom Racing Experience (HKLM-x32\...\Steam App 211500) (Version: - SimBin Studios AB) RaceRoom Racing Experience Launcher (HKLM-x32\...\{1FD9F07F-7BBF-4C91-B3F0-A23714A3A913}_is1) (Version: 1.0 - SimBin) Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound) Real World Racing (HKLM-x32\...\Steam App 253470) (Version: - Playstos Entertainment) Realm of the Mad God (HKLM-x32\...\Steam App 200210) (Version: - Wild Shadow Studios) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6636 - Realtek Semiconductor Corp.) Retro City Rampage™ (HKLM-x32\...\Steam App 204630) (Version: - ) Retrovirus (HKLM-x32\...\Steam App 227800) (Version: - ) Ridge Racer™ Unbounded (HKLM-x32\...\Steam App 202310) (Version: - ) Riptide GP2 (HKLM-x32\...\Steam App 257790) (Version: - Vector Unit) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games) Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version: - Cellar Door Games) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14072.12 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14072.12 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.) Shadow Warrior Classic Redux (HKLM-x32\...\Steam App 225160) (Version: - 3D Realms) SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden Sigils of Elohim (HKLM-x32\...\Steam App 321480) (Version: - Croteam) Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.) Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version: - Sumo Digital) Soundodger+ (HKLM-x32\...\Steam App 247140) (Version: - Studio Bean) Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version: - Valve) Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve) Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - ) Sparkle 2 Evo (HKLM-x32\...\Steam App 253650) (Version: - ) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Spelunky (HKLM-x32\...\Steam App 239350) (Version: - ) Spintires (HKLM-x32\...\Steam App 263280) (Version: - Oovee® Game Studios) Spyware Terminator 2012 (HKLM-x32\...\{56736259-613E-4A3B-B428-6235F2E76F44}_is1) (Version: 3.0.0.80 - Crawler.com) Starbound (HKLM-x32\...\Steam App 211820) (Version: - ) State of Decay (HKLM-x32\...\Steam App 241540) (Version: - Undead Labs) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Super Crate Box (HKLM-x32\...\Steam App 212800) (Version: - ) Super Hexagon (HKLM-x32\...\Steam App 221640) (Version: - Terry Cavanagh) Super Splatters (HKLM-x32\...\Steam App 95000) (Version: - SpikySnail) Super Toy Cars (HKLM-x32\...\Steam App 116100) (Version: - Eclipse Games) Surgeon Simulator 2013 (HKLM-x32\...\Steam App 233720) (Version: - Bossa Studios) Sword of the Stars: The Pit (HKLM-x32\...\Steam App 233700) (Version: - Kerberos Productions) Symphony (HKLM-x32\...\Steam App 207750) (Version: - Empty Clip Studios) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.24951 - TeamViewer) Teleglitch: Die More Edition (HKLM-x32\...\Steam App 234390) (Version: - Test3 Projects) Terraria (HKLM-x32\...\Steam App 105600) (Version: - ) Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH) The Bureau: XCOM Declassified (HKLM-x32\...\Steam App 65930) (Version: - 2K Marin) The Crew (Beta) (HKLM-x32\...\Uplay Install 750) (Version: - Ubisoft) The Polynomial (HKLM-x32\...\Steam App 67000) (Version: - Dmytry Lavrov) The Room (HKLM-x32\...\Steam App 288160) (Version: - Fireproof Games) The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version: - Galactic Cafe) The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - ) Toribash (HKLM-x32\...\Steam App 248570) (Version: - Nabi Studios) TrackMania² Canyon (HKLM-x32\...\Steam App 228760) (Version: - ) TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version: - Nadeo) TrackMania² Valley (HKLM-x32\...\Steam App 243360) (Version: - Nadeo) Trials Fusion (HKLM-x32\...\Steam App 245490) (Version: - RedLynx, in collaboration with Ubisoft Shanghai, Ubisoft Kiev) Trucks & Trailers (HKLM-x32\...\Steam App 302060) (Version: - SCS Software) TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.221 - TuneUp Software) TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132 - TuneUp Software) Hidden Turbo Dismount (HKLM-x32\...\Steam App 263760) (Version: - Secret Exit Ltd.) UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version: - ) Unepic (HKLM-x32\...\Steam App 233980) (Version: - Francisco Téllez de Meneses) Unity Web Player (HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton) Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft) Viscera Cleanup Detail (HKLM-x32\...\Steam App 246900) (Version: - RuneStorm) Vita Electric Piano Update (Version: 1.0.2.0 - MAGIX AG) Hidden Vita Vintage Organ Update (Version: 1.0.1.0 - MAGIX AG) Hidden VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.2.0.0 - Azureus Software, Inc.) Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.2-1 - Wacom Technology Corp.) Wakfu (HKLM-x32\...\Steam App 215080) (Version: - Ankama) WATCH_DOGS (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft) WBFS Manager 3.0 (HKLM-x32\...\WBFS Manager 3.0) (Version: 3.0 - AlexDP) WebM Project Directshow Filters (HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\webmdshow) (Version: - ) WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.2 - Wacom Technology Corp.) Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3268893772-689285336-3042597260-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) World of Guns: Gun Disassembly (HKLM-x32\...\Steam App 262410) (Version: - Noble Empire Corp.) WRC Powerslide (HKLM-x32\...\Steam App 256350) (Version: - Milestone S.r.l.) Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) Zombie Driver HD (HKLM-x32\...\Steam App 220820) (Version: - Exor Studios) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-3268893772-689285336-3042597260-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\RedMax\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3268893772-689285336-3042597260-1000_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) CustomCLSID: HKU\S-1-5-21-3268893772-689285336-3042597260-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3268893772-689285336-3042597260-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3268893772-689285336-3042597260-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3268893772-689285336-3042597260-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\RedMax\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ==================== Restore Points ========================= 10-11-2014 18:26:18 Geplanter Prüfpunkt 11-11-2014 14:37:00 DirectX wurde installiert 13-11-2014 23:08:36 Camtasia Studio 8 wird entfernt 14-11-2014 12:31:54 Removed MAGIX Burn routines 14-11-2014 13:04:33 Removed Overwolf ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2014-09-08 20:14 - 00000822 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {24CF4999-4E7C-489A-BA99-746256C9F8A1} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\OneClick.exe [2013-12-18] (TuneUp Software) Task: {2F447521-2832-49D0-9D8C-999638EA4FE1} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated) Task: {5B210DE9-314C-46EF-8491-D64B8421435B} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-09-26] (Oracle Corporation) Task: {66903F70-C1C5-4BAB-B042-0876ED5A3E3D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12] (Adobe Systems Incorporated) Task: {AFE54FA3-2711-4AF7-9826-22856414BB7D} - System32\Tasks\GarminUpdaterTask => D:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-08-27] () Task: {DA0E0CDE-3DF7-4C47-81CF-B65DAE17FA87} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-29] (Piriform Ltd) Task: {F547E558-218A-430C-ABD8-B0C82AE81214} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-22] (AVAST Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-01-15 23:54 - 2014-11-03 23:02 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-05-18 22:00 - 2014-05-18 22:00 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2013-12-18 10:01 - 2013-12-18 10:01 - 00742200 _____ () D:\PROGRAM FILES (X86)\TUNEUP UTILITIES 2014\avgrepliba.dll 2014-07-02 22:54 - 2014-07-02 22:54 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll 2014-07-02 22:59 - 2014-07-02 22:59 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll 2014-07-02 22:54 - 2014-07-02 22:54 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll 2014-07-02 22:59 - 2014-07-02 22:59 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll 2014-07-22 22:43 - 2014-07-22 22:43 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll 2014-11-14 19:59 - 2014-11-14 19:59 - 02903040 _____ () C:\Program Files\AVAST Software\Avast\defs\14111400\algo.dll 2014-11-10 23:18 - 2014-11-10 23:18 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-08-29 00:51 - 2014-11-11 19:48 - 01171456 _____ () E:\Program Files (x86)\Steam\libavcodec-56.dll 2014-08-29 00:51 - 2014-11-11 19:48 - 00442368 _____ () E:\Program Files (x86)\Steam\libavutil-54.dll 2014-08-29 00:51 - 2014-11-11 19:48 - 00332800 _____ () E:\Program Files (x86)\Steam\libavresample-2.dll 2013-03-12 17:10 - 2014-11-11 19:47 - 00774656 _____ () E:\Program Files (x86)\Steam\SDL2.dll 2014-05-21 21:36 - 2014-11-12 02:04 - 02227904 _____ () E:\Program Files (x86)\Steam\video.dll 2014-08-29 00:51 - 2014-11-11 19:48 - 00403968 _____ () E:\Program Files (x86)\Steam\libavformat-56.dll 2014-08-29 00:51 - 2014-11-11 19:48 - 00485888 _____ () E:\Program Files (x86)\Steam\libswscale-3.dll 2012-12-09 20:22 - 2014-11-12 02:04 - 00690880 _____ () E:\Program Files (x86)\Steam\bin\chromehtml.DLL 2014-07-22 22:43 - 2014-07-22 22:43 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll 2012-09-12 23:38 - 2012-09-12 23:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll 2012-12-09 20:22 - 2014-11-11 19:48 - 34589888 _____ () E:\Program Files (x86)\Steam\bin\libcef.dll 2014-01-14 21:30 - 2014-01-14 21:30 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\b6584c7e1f3d6d28c1a2b189a5d8831f\IsdiInterop.ni.dll 2012-12-10 19:00 - 2012-02-01 16:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Windows:842730FD3E4241FA ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Inhaltsmanager-Assistent für PlayStation(R).lnk => C:\Windows\pss\Inhaltsmanager-Assistent für PlayStation(R).lnk.CommonStartup MSCONFIG\startupreg: BambooCore => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe MSCONFIG\startupreg: CloneCDTray => "d:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe ========================= Accounts: ========================== Administrator (S-1-5-21-3268893772-689285336-3042597260-500 - Administrator - Disabled) Guest (S-1-5-21-3268893772-689285336-3042597260-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3268893772-689285336-3042597260-1003 - Limited - Enabled) RedMax (S-1-5-21-3268893772-689285336-3042597260-1000 - Administrator - Enabled) => C:\Users\RedMax ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (11/15/2014 08:21:28 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/15/2014 07:04:21 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcCan continue stopping. [18] Error: (11/15/2014 07:03:37 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 05:45:12 PM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 11:13:24 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 11:03:08 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Steam.exe, Version: 2.48.83.56, Zeitstempel: 0x5462af57 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7ba58 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00038da9 ID des fehlerhaften Prozesses: 0x1250 Startzeit der fehlerhaften Anwendung: 0xSteam.exe0 Pfad der fehlerhaften Anwendung: Steam.exe1 Pfad des fehlerhaften Moduls: Steam.exe2 Berichtskennung: Steam.exe3 Error: (11/14/2014 11:02:29 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 11:00:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Steam.exe, Version: 2.48.83.56, Zeitstempel: 0x5462af57 Name des fehlerhaften Moduls: tier0_s.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5462aee6 Ausnahmecode: 0xc0000005 Fehleroffset: 0x6479d8b0 ID des fehlerhaften Prozesses: 0xe70 Startzeit der fehlerhaften Anwendung: 0xSteam.exe0 Pfad der fehlerhaften Anwendung: Steam.exe1 Pfad des fehlerhaften Moduls: Steam.exe2 Berichtskennung: Steam.exe3 Error: (11/14/2014 11:00:19 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 02:20:12 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Error: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe System errors: ============= Error: (11/15/2014 08:20:19 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT) Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147549183. Error: (11/15/2014 07:03:29 AM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (11/15/2014 07:03:27 AM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (11/15/2014 07:02:45 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT) Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147549183. Error: (11/14/2014 05:44:15 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT) Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147549183. Error: (11/14/2014 10:58:20 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT) Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147549183. Error: (11/14/2014 02:19:17 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT) Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147549183. Error: (11/13/2014 11:48:32 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT) Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147549183. Error: (11/13/2014 10:44:51 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (11/13/2014 10:44:49 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Microsoft Office Sessions: ========================= Error: (11/15/2014 08:21:28 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/15/2014 07:04:21 AM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcCan continue stopping. [18] Error: (11/15/2014 07:03:37 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 05:45:12 PM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 11:13:24 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 11:03:08 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Steam.exe2.48.83.565462af57ntdll.dll6.1.7601.175144ce7ba58c000000500038da9125001cffff21918142cE:\Program Files (x86)\Steam\Steam.exeC:\Windows\SysWOW64\ntdll.dll6e752386-6be5-11e4-8608-3085a98e35eb Error: (11/14/2014 11:02:29 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 11:00:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Steam.exe2.48.83.565462af57tier0_s.dll_unloaded0.0.0.05462aee6c00000056479d8b0e7001cffff191065e88E:\Program Files (x86)\Steam\Steam.exetier0_s.dll1cc3d71f-6be5-11e4-8608-3085a98e35eb Error: (11/14/2014 11:00:19 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe Error: (11/14/2014 02:20:12 AM) (Source: Steam Client Service) (EventID: 1) (User: ) Description: Failed to add firewall exception for E:\Program Files (x86)\Steam\steam.exe CodeIntegrity Errors: =================================== Date: 2014-11-15 08:20:26.256 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-15 07:02:47.534 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-14 20:33:42.599 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-14 19:56:16.610 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-14 17:44:40.235 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-14 17:05:59.666 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-14 16:18:16.277 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-14 10:58:42.793 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-14 03:02:19.515 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-11-14 02:40:07.605 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz Percentage of memory in use: 17% Total physical RAM: 16328.31 MB Available physical RAM: 13507.79 MB Total Pagefile: 32654.82 MB Available Pagefile: 29572.35 MB Total Virtual: 8192 MB Available Virtual: 8191.8 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:195.21 GB) (Free:66.54 GB) NTFS Drive d: (Boot) (Fixed) (Total:905.41 GB) (Free:410.38 GB) NTFS Drive e: (Spiele) (Fixed) (Total:736.2 GB) (Free:60.44 GB) NTFS Drive k: (MEDIA ECT) (Fixed) (Total:931.51 GB) (Free:442.05 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 7A83F1C6) Partition 1: (Not Active) - (Size=905.4 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=1 GB) - (Type=12) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: C0256926) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=195.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=736.2 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 48AF3B0C) Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
Themen zu Avast! meldet Win32:Evo-gen[Susp] ORT: FirewallAPI.dll, Prozess: unterschiedlich |
antivirus, c:\windows, ccleaner, empfehlen, fehlercode 0x5, fehlercode 0xc0000005, fehlercode 22, fehlercode windows, festplatte, folgen, licht, meldung, nichts, programme, prozess, roguekiller, steam, tablet, this device is disabled. (code 22), update, verbindung, virendatenbank, virustotal, win32, win32/toolbar.babylon.e, win32/toolbar.conduit, windows |