| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Pc stürzt oft ab !Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
30.12.2014, 14:31
| #16 |
 |  Pc stürzt oft ab ! FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2014
Ran by David (administrator) on DAVID-ACER on 30-12-2014 14:27:44
Running from C:\Users\David\Desktop\Desktop\#ANTI\FRST
Loaded Profiles: UpdatusUser & David (Available profiles: UpdatusUser & David & user)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Sidebar\sidebar.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Malwarebytes Corporation) C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamscheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVCM.EXE
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Malwarebytes Corporation) C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbam.exe
(Malwarebytes Corporation) C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamservice.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-12] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {1fd2defc-0fd9-11e3-b382-dc0ea11d82fe} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {2812e136-d586-11e2-bdb6-dc0ea11d82fe} - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {3f0b6f0b-c1fe-11e2-8ca3-dc0ea11d82fe} - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {ae06f47d-bfea-11e2-9e09-dc0ea11d82fe} - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {ae06f48a-bfea-11e2-9e09-dc0ea11d82fe} - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\RunOnce: [Adobe Speed Launcher] => 1419944558
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
AppInit_DLLs: C:\PROGRA~2\KEYCRY~1\KeyCrypt64(1).dll => C:\Program Files (x86)\KeyCryptSDK\KeyCrypt64(1).dll [96104 2014-11-13] (Zemana Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\KEYCRY~1\KeyCrypt32(1).dll => C:\Program Files (x86)\KeyCryptSDK\KeyCrypt32(1).dll [87840 2014-11-13] (Zemana Ltd.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3466399659-1618858318-3356278196-1006\User: Group Policy restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&affID=119776&tt=gc_&babsrc=SP_ss&mntrId=8A9B64273717AA4B
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtC0DzztB0F0E0CyD0CtDtN0D0Tzu0CyCyDyBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=1421656380&ir=
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=3054224013274139&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120914160850.dll (McAfee, Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120914160850.dll (McAfee, Inc.)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\3cglpxv0.default-1388087379042
FF DefaultSearchUrl: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3466399659-1618858318-3356278196-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\David\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3466399659-1618858318-3356278196-1001: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Extension: Firefox Old Version Update Hotfix - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\3cglpxv0.default-1388087379042\Extensions\firefox-hotfix@mozilla.org.xpi [2014-12-30]
FF Extension: Deutsch (DE) Language Pack - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\3cglpxv0.default-1388087379042\Extensions\langpack-de@firefox.mozilla.org.xpi [2013-12-26]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2011-10-14]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: McAfee ScriptScan for Firefox - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2011-10-14]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-02-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-27]
Chrome:
=======
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-30]
CHR Extension: (TooManyTabs für Chrome) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp [2014-12-30]
CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-30]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-30]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-30]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-30]
CHR Extension: (GMX MailCheck) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-12-30]
CHR Extension: (Adblock Plus) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-30]
CHR Extension: (Google-Suche) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-30]
CHR Extension: (Video Downloader professional) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-12-30]
CHR Extension: (Google Tabellen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-30]
CHR Extension: (Stylish) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2014-12-30]
CHR Extension: (Click&Clean) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2014-12-30]
CHR Extension: (Avast Online Security) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-30]
CHR Extension: (Audio EQ) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfafdlnjaliaghpjdajmlcnnblkgcefh [2014-12-30]
CHR Extension: (FVD Downloader) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2014-12-30]
CHR Extension: (RenameTab) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkailnbloeepkajmoblllhhhckpbbncg [2014-12-30]
CHR Extension: (MuteTab) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmkbaaijgpppbokgnhhoakihofedkgcc [2014-12-30]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-30]
CHR Extension: (Google Mail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-30]
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Präsentationen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-30]
CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-30]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-30]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-30]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-30]
CHR Extension: (Google-Suche) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-30]
CHR Extension: (Google Tabellen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-30]
CHR Extension: (Avast Online Security) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-30]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-30]
CHR Extension: (Google Mail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-09]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S4 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-08-12] (Perfect World Entertainment Inc)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-09] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-09] (Avast Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-01-20] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 MBAMScheduler; C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S4 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [224704 2011-03-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [502064 2012-08-23] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [210616 2012-05-25] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [162224 2012-05-25] (McAfee, Inc.)
S4 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
R2 msoidsvc; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [2079520 2012-05-17] (Microsoft Corp.)
S4 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-09-04] ()
S3 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S3 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S3 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 Spooler; C:\Windows\SysWOW64\spoolsv.exe [316416 2014-04-19] (Microsoft Corporation) [File not signed]
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [598808 2013-06-06] (Wacom Technology, Corp.)
S4 Hamachi2Svc; "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-09] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-09] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-09] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-09-22] (AVG Technologies)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [115472 2014-01-20] (BlueStack Systems)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [65264 2012-02-22] (McAfee, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-04-19] (DT Soft Ltd)
R3 keycrypt; C:\Windows\System32\DRIVERS\KeyCrypt64.sys [71400 2014-11-13] (Zemana Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-30] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160792 2012-02-22] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [229528 2012-02-22] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [487296 2012-02-22] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [647208 2012-02-22] (McAfee, Inc.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75936 2012-02-22] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [289664 2012-02-22] (McAfee, Inc.)
S3 ser2at; C:\Windows\System32\DRIVERS\ser2at64.sys [96256 2009-10-15] (ATEN)
S2 tandpl; C:\Windows\SysWOW64\drivers\tandpl.sys [4736 2003-04-19] () [File not signed]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-09] (Avast Software)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115488 2014-05-16] (Oracle Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-30 14:06 - 2014-12-30 14:06 - 00000197 _____ () C:\Windows\system32\2014-12-30-13-06-58.077-AvastVBoxSVC.exe-4476.log
2014-12-30 13:58 - 2014-12-30 13:58 - 00000000 __SHD () C:\found.000
2014-12-30 13:19 - 2014-12-30 13:19 - 00000197 _____ () C:\Windows\system32\2014-12-30-12-19-15.083-AvastVBoxSVC.exe-4164.log
2014-12-30 13:12 - 2014-12-30 13:12 - 01174352 _____ () C:\Users\David\Downloads\Pencil - CHIP-Installer.exe
2014-12-30 12:58 - 2014-12-30 12:58 - 00000197 _____ () C:\Windows\system32\2014-12-30-11-58-01.042-AvastVBoxSVC.exe-5892.log
2014-12-30 12:26 - 2014-12-30 12:26 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-30 12:24 - 2014-12-30 12:24 - 00000197 _____ () C:\Windows\system32\2014-12-30-11-24-22.007-AvastVBoxSVC.exe-5324.log
2014-12-30 12:03 - 2014-12-30 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-30 11:49 - 2014-12-30 11:50 - 00000197 _____ () C:\Windows\system32\2014-12-30-10-49-44.008-AvastVBoxSVC.exe-6008.log
2014-12-29 20:01 - 2014-12-29 20:01 - 00000197 _____ () C:\Windows\system32\2014-12-29-19-01-29.075-AvastVBoxSVC.exe-3456.log
2014-12-29 15:46 - 2014-12-29 15:46 - 00000197 _____ () C:\Windows\system32\2014-12-29-14-46-42.010-AvastVBoxSVC.exe-3244.log
2014-12-29 15:45 - 2014-12-29 15:45 - 00000000 ____D () C:\Users\David\AppData\Roaming\WTablet
2014-12-29 15:15 - 2014-12-29 15:15 - 00000197 _____ () C:\Windows\system32\2014-12-29-14-15-09.025-AvastVBoxSVC.exe-4440.log
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins
2014-12-29 14:44 - 2014-12-29 14:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2014-12-29 14:44 - 2014-12-29 14:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2014-12-29 14:44 - 2013-06-06 03:09 - 01959192 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01952536 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01820952 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01818392 ____N (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01614104 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01607448 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01493272 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01489688 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll
2014-12-29 14:44 - 2013-04-30 18:18 - 00085304 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys
2014-12-29 14:44 - 2013-04-30 18:18 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2014-12-29 14:44 - 2012-12-20 23:20 - 00015344 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys
2014-12-29 14:44 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll
2014-12-29 14:43 - 2014-12-29 14:44 - 00000000 ____D () C:\Program Files\Tablet
2014-12-29 14:41 - 2014-12-29 14:41 - 00000197 _____ () C:\Windows\system32\2014-12-29-13-41-07.053-AvastVBoxSVC.exe-4776.log
2014-12-29 14:27 - 2014-12-29 14:28 - 00058994 _____ () C:\Users\David\Downloads\Addition.txt
2014-12-29 14:26 - 2014-12-29 14:28 - 00071759 _____ () C:\Users\David\Downloads\FRST.txt
2014-12-29 14:26 - 2014-12-29 14:26 - 00000000 ____D () C:\Users\David\Downloads\FRST-OlderVersion
2014-12-29 14:11 - 2014-12-29 14:11 - 00000000 ____D () C:\Windows\ERUNT
2014-12-29 14:09 - 2014-12-29 14:09 - 00000197 _____ () C:\Windows\system32\2014-12-29-13-09-49.047-AvastVBoxSVC.exe-1016.log
2014-12-29 13:50 - 2014-12-29 13:50 - 00000197 _____ () C:\Windows\system32\2014-12-29-12-50-13.018-AvastVBoxSVC.exe-1656.log
2014-12-29 13:35 - 2014-12-29 13:35 - 00000197 _____ () C:\Windows\system32\2014-12-29-12-35-42.037-AvastVBoxSVC.exe-3120.log
2014-12-29 12:41 - 2014-12-29 12:41 - 00000197 _____ () C:\Windows\system32\2014-12-29-11-41-35.007-AvastVBoxSVC.exe-4324.log
2014-12-29 11:54 - 2014-12-29 11:54 - 00000197 _____ () C:\Windows\system32\2014-12-29-10-54-03.088-AvastVBoxSVC.exe-4716.log
2014-12-28 10:10 - 2014-12-28 10:10 - 00000197 _____ () C:\Windows\system32\2014-12-28-09-10-45.054-AvastVBoxSVC.exe-4764.log
2014-12-28 09:39 - 2014-12-28 09:39 - 00000197 _____ () C:\Windows\system32\2014-12-28-08-39-11.090-AvastVBoxSVC.exe-5680.log
2014-12-28 09:31 - 2014-12-28 09:31 - 00000000 ____D () C:\Users\David\AppData\Local\Metrocide
2014-12-28 09:08 - 2014-12-28 09:08 - 00000197 _____ () C:\Windows\system32\2014-12-28-08-08-30.032-AvastVBoxSVC.exe-5092.log
2014-12-28 08:29 - 2014-12-28 08:34 - 490788359 _____ () C:\Users\David\Downloads\easyvdr-2.0.0-64-stable.iso.crdownload
2014-12-28 08:08 - 2014-12-28 08:09 - 00000197 _____ () C:\Windows\system32\2014-12-28-07-08-57.070-AvastVBoxSVC.exe-5976.log
2014-12-22 20:40 - 2014-12-22 20:40 - 00066850 _____ () C:\ComboFix.txt
2014-12-22 20:18 - 2014-12-22 20:18 - 00000197 _____ () C:\Windows\system32\2014-12-22-19-18-53.031-AvastVBoxSVC.exe-7636.log
2014-12-22 14:58 - 2014-12-22 20:40 - 00000000 ____D () C:\Qoobox
2014-12-22 14:58 - 2014-12-22 20:38 - 00000000 ____D () C:\Windows\erdnt
2014-12-22 14:58 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-12-22 14:58 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-12-22 14:58 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-12-22 14:55 - 2014-12-22 14:55 - 00000197 _____ () C:\Windows\system32\2014-12-22-13-55-45.078-AvastVBoxSVC.exe-5076.log
2014-12-22 12:36 - 2014-12-22 12:37 - 00000197 _____ () C:\Windows\system32\2014-12-22-11-36-24.053-AvastVBoxSVC.exe-6216.log
2014-12-21 19:11 - 2014-12-21 19:11 - 00000197 _____ () C:\Windows\system32\2014-12-21-18-11-45.067-AvastVBoxSVC.exe-4688.log
2014-12-21 18:40 - 2014-12-21 18:40 - 00000197 _____ () C:\Windows\system32\2014-12-21-17-40-28.072-AvastVBoxSVC.exe-6036.log
2014-12-21 18:09 - 2014-12-21 18:09 - 00000197 _____ () C:\Windows\system32\2014-12-21-17-09-16.068-AvastVBoxSVC.exe-5644.log
2014-12-21 17:38 - 2014-12-21 17:38 - 00000197 _____ () C:\Windows\system32\2014-12-21-16-38-07.077-AvastVBoxSVC.exe-5464.log
2014-12-21 17:06 - 2014-12-21 17:07 - 00000197 _____ () C:\Windows\system32\2014-12-21-16-06-43.006-AvastVBoxSVC.exe-6168.log
2014-12-21 16:35 - 2014-12-21 16:35 - 00000197 _____ () C:\Windows\system32\2014-12-21-15-35-40.078-AvastVBoxSVC.exe-5000.log
2014-12-21 15:22 - 2014-12-21 15:22 - 00000197 _____ () C:\Windows\system32\2014-12-21-14-22-03.049-AvastVBoxSVC.exe-3444.log
2014-12-21 15:01 - 2014-12-21 15:01 - 00000197 _____ () C:\Windows\system32\2014-12-21-14-01-37.049-AvastVBoxSVC.exe-6128.log
2014-12-21 14:27 - 2014-12-21 14:27 - 00000197 _____ () C:\Windows\system32\2014-12-21-13-27-27.023-AvastVBoxSVC.exe-5808.log
2014-12-21 13:54 - 2014-12-21 13:54 - 00000197 _____ () C:\Windows\system32\2014-12-21-12-54-09.045-AvastVBoxSVC.exe-5824.log
2014-12-21 13:24 - 2014-12-21 13:25 - 00000197 _____ () C:\Windows\system32\2014-12-21-12-24-59.039-AvastVBoxSVC.exe-5640.log
2014-12-21 12:54 - 2014-12-21 12:54 - 00000197 _____ () C:\Windows\system32\2014-12-21-11-54-00.040-AvastVBoxSVC.exe-6224.log
2014-12-21 11:26 - 2014-12-21 11:26 - 00000197 _____ () C:\Windows\system32\2014-12-21-10-26-11.013-AvastVBoxSVC.exe-6960.log
2014-12-21 10:58 - 2014-12-21 10:58 - 00000197 _____ () C:\Windows\system32\2014-12-21-09-58-19.004-AvastVBoxSVC.exe-5368.log
2014-12-21 10:54 - 2014-12-30 12:19 - 00008206 _____ () C:\Windows\PFRO.log
2014-12-21 10:26 - 2014-12-21 10:26 - 00000197 _____ () C:\Windows\system32\2014-12-21-09-26-26.080-AvastVBoxSVC.exe-3556.log
2014-12-20 20:24 - 2014-12-20 20:24 - 00000197 _____ () C:\Windows\system32\2014-12-20-19-24-07.099-AvastVBoxSVC.exe-5396.log
2014-12-20 19:50 - 2014-12-20 19:50 - 00000197 _____ () C:\Windows\system32\2014-12-20-18-50-48.001-AvastVBoxSVC.exe-6456.log
2014-12-20 19:21 - 2014-12-20 19:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-20 19:20 - 2014-12-20 19:20 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\David\Downloads\revosetup95.exe
2014-12-20 19:18 - 2014-12-20 19:18 - 00000197 _____ () C:\Windows\system32\2014-12-20-18-18-28.061-AvastVBoxSVC.exe-6004.log
2014-12-20 19:10 - 2014-12-20 19:10 - 00000000 ____D () C:\Users\David\Downloads\RevoUninstallerPortable
2014-12-20 19:09 - 2014-12-20 19:10 - 02785665 _____ (PortableApps.com) C:\Users\David\Downloads\RevoUninstallerPortable_1.95_Rev_2.paf.exe
2014-12-20 18:44 - 2014-12-20 18:44 - 00000197 _____ () C:\Windows\system32\2014-12-20-17-44-23.011-AvastVBoxSVC.exe-3956.log
2014-12-20 18:16 - 2014-12-20 18:16 - 00000197 _____ () C:\Windows\system32\2014-12-20-17-16-44.094-AvastVBoxSVC.exe-3972.log
2014-12-18 20:17 - 2014-12-18 20:17 - 00000197 _____ () C:\Windows\system32\2014-12-18-19-17-50.072-AvastVBoxSVC.exe-6196.log
2014-12-18 19:45 - 2014-12-18 19:45 - 00000197 _____ () C:\Windows\system32\2014-12-18-18-45-20.095-AvastVBoxSVC.exe-6352.log
2014-12-18 19:14 - 2014-12-18 19:14 - 00000197 _____ () C:\Windows\system32\2014-12-18-18-14-24.042-AvastVBoxSVC.exe-5504.log
2014-12-18 18:48 - 2014-12-30 14:27 - 00000000 ____D () C:\FRST
2014-12-18 18:44 - 2014-12-29 14:26 - 02123264 _____ (Farbar) C:\Users\David\Downloads\FRST64.exe
2014-12-18 18:42 - 2014-12-18 18:43 - 00000197 _____ () C:\Windows\system32\2014-12-18-17-42-32.099-AvastVBoxSVC.exe-3288.log
2014-12-18 18:09 - 2014-12-18 18:09 - 00000197 _____ () C:\Windows\system32\2014-12-18-17-09-01.002-AvastVBoxSVC.exe-5636.log
2014-12-18 17:37 - 2014-12-18 17:37 - 00000197 _____ () C:\Windows\system32\2014-12-18-16-37-39.014-AvastVBoxSVC.exe-6012.log
2014-12-18 17:01 - 2014-12-18 17:01 - 00000197 _____ () C:\Windows\system32\2014-12-18-16-01-03.056-AvastVBoxSVC.exe-3468.log
2014-12-18 02:18 - 2014-12-18 02:18 - 00000197 _____ () C:\Windows\system32\2014-12-18-01-18-44.035-AvastVBoxSVC.exe-3948.log
2014-12-17 18:54 - 2014-12-17 18:55 - 00000197 _____ () C:\Windows\system32\2014-12-17-17-54-55.026-AvastVBoxSVC.exe-5736.log
2014-12-17 17:21 - 2014-12-17 17:21 - 00000280 _____ () C:\Windows\system32\2014-12-17-16-21-20.042-aswFe.exe-4584.log
2014-12-17 17:14 - 2014-12-17 17:15 - 00000197 _____ () C:\Windows\system32\2014-12-17-16-14-40.045-AvastVBoxSVC.exe-1924.log
2014-12-17 13:37 - 2014-12-17 13:37 - 00000197 _____ () C:\Windows\system32\2014-12-17-12-37-00.066-AvastVBoxSVC.exe-3872.log
2014-12-17 08:27 - 2014-12-17 08:28 - 00000197 _____ () C:\Windows\system32\2014-12-17-07-27-59.066-AvastVBoxSVC.exe-5048.log
2014-12-17 08:22 - 2014-12-17 08:22 - 00000197 _____ () C:\Windows\system32\2014-12-17-07-22-03.011-AvastVBoxSVC.exe-3220.log
2014-12-16 20:43 - 2014-12-16 20:48 - 04437584 _____ (FreeDownloadManager.ORG ) C:\Users\David\Downloads\fdminst-lite.exe
2014-12-16 20:37 - 2014-12-16 21:01 - 1835281604 _____ () C:\Users\David\Downloads\Burnout_Paradise_The_Ultimate_Box.iso (2).crdownload
2014-12-16 20:33 - 2014-12-16 20:33 - 00000197 _____ () C:\Windows\system32\2014-12-16-19-33-25.024-AvastVBoxSVC.exe-4356.log
2014-12-16 19:59 - 2014-12-16 19:59 - 00000197 _____ () C:\Windows\system32\2014-12-16-18-59-53.015-AvastVBoxSVC.exe-3416.log
2014-12-16 19:28 - 2014-12-16 19:28 - 00000197 _____ () C:\Windows\system32\2014-12-16-18-28-29.021-AvastVBoxSVC.exe-6908.log
2014-12-16 18:55 - 2014-12-16 18:56 - 00000197 _____ () C:\Windows\system32\2014-12-16-17-55-57.084-AvastVBoxSVC.exe-7516.log
2014-12-16 18:25 - 2014-12-16 18:25 - 00000197 _____ () C:\Windows\system32\2014-12-16-17-25-06.062-AvastVBoxSVC.exe-268.log
2014-12-16 17:50 - 2014-12-16 20:08 - 00014066 ____H () C:\Users\David\Desktop\~WRL0800.tmp
2014-12-16 17:50 - 2014-12-16 19:02 - 00012257 ____H () C:\Users\David\Desktop\~WRL1323.tmp
2014-12-16 17:48 - 2014-12-16 17:58 - 878578501 _____ () C:\Users\David\Downloads\Notfall_DVD_5.0_Free.zip
2014-12-16 17:40 - 2014-12-16 17:40 - 00000197 _____ () C:\Windows\system32\2014-12-16-16-40-24.013-AvastVBoxSVC.exe-4972.log
2014-12-15 12:58 - 2014-12-15 12:58 - 00000197 _____ () C:\Windows\system32\2014-12-15-11-58-35.064-AvastVBoxSVC.exe-5068.log
2014-12-15 12:28 - 2014-12-15 12:28 - 00000197 _____ () C:\Windows\system32\2014-12-15-11-28-35.017-AvastVBoxSVC.exe-8860.log
2014-12-14 18:35 - 2014-12-14 18:36 - 00000197 _____ () C:\Windows\system32\2014-12-14-17-35-36.049-AvastVBoxSVC.exe-5092.log
2014-12-14 18:02 - 2014-12-14 18:03 - 00000197 _____ () C:\Windows\system32\2014-12-14-17-02-45.051-AvastVBoxSVC.exe-6528.log
2014-12-14 17:30 - 2014-12-14 17:30 - 00000197 _____ () C:\Windows\system32\2014-12-14-16-30-29.001-AvastVBoxSVC.exe-4244.log
2014-12-13 14:37 - 2014-12-13 14:37 - 00000197 _____ () C:\Windows\system32\2014-12-13-13-37-12.042-AvastVBoxSVC.exe-9508.log
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Users\David\AppData\Local\AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Program Files (x86)\Zemana AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Program Files (x86)\KeyCryptSDK
2014-12-13 14:17 - 2014-11-13 12:20 - 00071400 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\KeyCrypt64.sys
2014-12-13 13:58 - 2014-12-13 13:58 - 00000197 _____ () C:\Windows\system32\2014-12-13-12-58-24.096-AvastVBoxSVC.exe-8640.log
2014-12-13 13:57 - 2014-12-13 13:57 - 00130576 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-13 13:53 - 2014-12-30 14:01 - 00005178 _____ () C:\Windows\setupact.log
2014-12-13 13:53 - 2014-12-13 13:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-13 13:52 - 2014-12-13 13:54 - 05113760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-13 13:31 - 2014-12-13 13:31 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-12-13 13:30 - 2014-12-13 14:50 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-12-13 13:30 - 2014-12-13 13:40 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-12-13 13:30 - 2014-12-13 13:30 - 00001405 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-12-13 13:30 - 2014-12-13 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-12-13 13:30 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-12-13 13:26 - 2014-12-20 20:23 - 00000000 ____D () C:\Users\David\AppData\Roaming\Nico Mak Computing
2014-12-13 13:19 - 2014-12-13 13:20 - 00000197 _____ () C:\Windows\system32\2014-12-13-12-19-28.053-AvastVBoxSVC.exe-4572.log
2014-12-12 21:20 - 2014-12-12 21:20 - 00000197 _____ () C:\Windows\system32\2014-12-12-20-20-52.096-AvastVBoxSVC.exe-3652.log
2014-12-12 21:16 - 2014-12-12 21:16 - 00006696 ____N () C:\bootsqm.dat
2014-12-12 20:05 - 2014-12-12 20:05 - 00000197 _____ () C:\Windows\system32\2014-12-12-19-05-46.076-AvastVBoxSVC.exe-2796.log
2014-12-12 19:31 - 2014-12-12 19:31 - 00000197 _____ () C:\Windows\system32\2014-12-12-18-31-14.040-AvastVBoxSVC.exe-5036.log
2014-12-12 19:09 - 2014-12-12 19:21 - 00000000 ____D () C:\Users\David\AppData\Roaming\Dungeonmans
2014-12-12 18:55 - 2014-12-12 18:55 - 00000197 _____ () C:\Windows\system32\2014-12-12-17-55-37.055-AvastVBoxSVC.exe-3956.log
2014-12-12 18:22 - 2014-12-12 18:22 - 00000197 _____ () C:\Windows\system32\2014-12-12-17-22-35.093-AvastVBoxSVC.exe-2480.log
2014-12-12 17:50 - 2014-12-12 17:50 - 00000197 _____ () C:\Windows\system32\2014-12-12-16-50-54.007-AvastVBoxSVC.exe-4212.log
2014-12-12 15:40 - 2014-12-12 15:41 - 00000197 _____ () C:\Windows\system32\2014-12-12-14-40-44.093-AvastVBoxSVC.exe-4440.log
2014-12-12 15:04 - 2014-12-12 15:05 - 00000197 _____ () C:\Windows\system32\2014-12-12-14-04-54.059-AvastVBoxSVC.exe-4660.log
2014-12-11 13:46 - 2014-12-11 13:46 - 00000197 _____ () C:\Windows\system32\2014-12-11-12-46-28.031-AvastVBoxSVC.exe-3728.log
2014-12-11 13:13 - 2014-12-11 13:13 - 00000197 _____ () C:\Windows\system32\2014-12-11-12-13-14.032-AvastVBoxSVC.exe-3664.log
2014-12-11 11:45 - 2014-12-11 11:45 - 00000197 _____ () C:\Windows\system32\2014-12-11-10-45-08.054-AvastVBoxSVC.exe-3568.log
2014-12-10 19:52 - 2014-12-10 19:52 - 00000197 _____ () C:\Windows\system32\2014-12-10-18-52-11.067-AvastVBoxSVC.exe-4604.log
2014-12-10 18:46 - 2014-12-10 18:46 - 00000197 _____ () C:\Windows\system32\2014-12-10-17-46-33.082-AvastVBoxSVC.exe-4644.log
2014-12-10 18:13 - 2014-12-10 18:13 - 00000000 ____D () C:\Users\David\AppData\Roaming\com.stateofplaygames.LuminoCity
2014-12-10 18:10 - 2014-12-10 18:10 - 00000197 _____ () C:\Windows\system32\2014-12-10-17-10-39.067-AvastVBoxSVC.exe-5200.log
2014-12-10 17:34 - 2014-12-10 17:34 - 00000197 _____ () C:\Windows\system32\2014-12-10-16-34-12.020-AvastVBoxSVC.exe-4136.log
2014-12-10 14:51 - 2014-12-10 14:51 - 00000197 _____ () C:\Windows\system32\2014-12-10-13-51-12.066-AvastVBoxSVC.exe-4272.log
2014-12-10 14:20 - 2014-12-10 14:20 - 15453832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xlive.dll
2014-12-10 14:13 - 2014-12-10 14:13 - 00000197 _____ () C:\Windows\system32\2014-12-10-13-13-45.099-AvastVBoxSVC.exe-8880.log
2014-12-10 13:56 - 2014-12-10 13:56 - 00000247 _____ () C:\Windows\system32\2014-12-10-12-56-45.027-aswFe.exe-3684.log
2014-12-10 13:50 - 2014-12-10 13:56 - 00000247 _____ () C:\Windows\system32\2014-12-10-12-50-32.089-aswFe.exe-3020.log
2014-12-10 13:50 - 2014-12-10 13:50 - 00000197 _____ () C:\Windows\system32\2014-12-10-12-50-20.077-AvastVBoxSVC.exe-1564.log
2014-12-10 13:46 - 2014-12-10 13:46 - 00003256 _____ () C:\Windows\System32\Tasks\{FC85E084-C44F-41A8-96F7-9210F9904A27}
2014-12-10 13:39 - 2014-12-10 13:40 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-12-10 13:39 - 2014-12-10 13:40 - 00000000 ____D () C:\Windows\system32\vbox
2014-12-09 19:44 - 2014-12-09 19:43 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-09 19:43 - 2014-12-09 19:43 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-12-09 18:32 - 2014-12-09 18:32 - 00000000 ____D () C:\Users\David\AppData\Roaming\Yacht Club Games
2014-12-09 09:45 - 2014-12-09 19:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-12-09 09:45 - 2014-12-09 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2014-12-09 09:45 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-12-09 09:45 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-12-09 09:45 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-12-09 09:45 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-12-09 09:44 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-12-09 09:44 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-12-09 09:44 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-12-09 09:44 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-12-09 09:44 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-12-09 09:44 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-12-09 09:44 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-12-09 09:44 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-12-09 09:44 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-12-09 09:44 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-12-09 09:44 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-12-09 09:44 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-12-09 09:44 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-12-09 09:44 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-12-09 09:44 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-12-09 09:44 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-12-09 09:44 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-12-09 09:44 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-12-09 09:44 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-12-09 09:44 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-12-09 09:44 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-12-09 09:44 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-12-09 09:44 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-12-09 09:44 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-12-09 09:44 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-12-09 09:44 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-12-09 09:44 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-12-09 09:44 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-12-09 09:44 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-12-09 09:44 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-12-09 09:44 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-12-09 09:44 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-12-09 09:44 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-12-09 09:44 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-12-09 09:44 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-12-09 09:44 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-12-09 09:44 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-12-09 09:44 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-12-09 09:44 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-12-09 09:44 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-12-09 09:44 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-12-09 09:44 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-12-09 09:44 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-12-09 09:44 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-12-09 09:44 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-12-09 09:44 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-12-09 09:44 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-12-09 09:44 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-12-09 09:44 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-12-09 09:44 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-12-09 09:44 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-12-09 09:44 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-12-09 09:43 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-12-09 09:43 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-12-09 09:43 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-12-09 09:43 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-12-09 09:43 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-12-09 09:43 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-12-09 09:43 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-12-09 09:43 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-12-09 09:43 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-12-09 09:43 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-12-09 09:43 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-12-09 09:43 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-12-09 09:43 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-12-09 09:43 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-12-09 09:43 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-12-09 09:43 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-12-09 09:43 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-12-09 09:43 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-12-09 09:43 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-12-09 09:43 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-12-09 09:43 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-12-09 09:43 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-12-09 09:34 - 2014-12-09 09:34 - 00000000 ____D () C:\Program Files (x86)\Capcom
2014-12-09 09:32 - 2014-12-09 09:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-12-09 09:32 - 2014-12-09 09:32 - 00000000 ____D () C:\GOG Games
2014-12-08 17:43 - 2014-12-30 13:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-08 17:43 - 2014-12-12 15:40 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-08 17:43 - 2014-12-12 15:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-08 17:43 - 2014-12-12 15:40 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-08 16:16 - 2014-12-08 16:16 - 00002974 _____ () C:\Windows\System32\Tasks\Launch 19578
2014-12-08 15:52 - 2014-12-09 19:56 - 00000165 _____ () C:\AdwCleanerDebug.txt
2014-12-08 08:18 - 2014-12-08 08:18 - 00000000 ____D () C:\Users\David\AppData\Roaming\11bitstudios
2014-12-08 07:58 - 2014-12-08 08:02 - 00000000 ____D () C:\Users\David\AppData\Local\qbqbqb
2014-12-08 07:58 - 2014-12-08 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QbQbQb
2014-12-08 07:58 - 2014-12-08 07:58 - 00000000 ____D () C:\Program Files (x86)\QbQbQb
2014-12-06 20:42 - 2003-04-19 00:39 - 00006659 _____ () C:\Windows\SysWOW64\TANDPL.VXD
2014-12-06 20:42 - 2003-04-19 00:32 - 00004736 _____ () C:\Windows\SysWOW64\Drivers\tandpl.sys
2014-12-06 20:42 - 2003-03-02 17:44 - 00007552 _____ () C:\Windows\SysWOW64\Drivers\enodpl.sys
2014-12-06 20:42 - 2001-08-31 15:16 - 00006532 _____ () C:\Windows\SysWOW64\ENODPL.VXD
2014-12-06 20:01 - 2014-12-06 20:01 - 00000000 ____D () C:\Users\David\AppData\Roaming\fr.ratzngodz.1Quest
2014-12-03 19:24 - 2014-12-03 19:24 - 00001653 _____ () C:\Users\user\Desktop\Xenominer.lnk
2014-12-02 19:10 - 2014-12-08 10:24 - 00000000 ____D () C:\Users\David\AppData\Local\GeometryWars3Dimensions
2014-12-02 18:22 - 2014-12-02 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Darksiders II
2014-12-02 18:18 - 2014-12-02 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra Activision Aspyr
2014-12-02 18:17 - 2014-12-02 18:17 - 00000000 ____D () C:\Program Files (x86)\Sierra Activision Aspyr
2014-12-02 17:44 - 2014-12-02 18:22 - 00000000 ____D () C:\Program Files (x86)\Darksiders II
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-30 14:13 - 2014-06-17 18:49 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-30 14:13 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-30 14:13 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-30 14:09 - 2013-09-04 16:44 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-30 14:08 - 2014-06-04 18:09 - 01337318 _____ () C:\Windows\WindowsUpdate.log
2014-12-30 14:04 - 2012-07-24 15:06 - 00000000 ____D () C:\ProgramData\clear.fi
2014-12-30 14:03 - 2013-09-04 16:44 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-30 14:02 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-30 12:22 - 2014-05-27 17:19 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-30 12:12 - 2014-07-09 16:56 - 00000000 ____D () C:\Users\David\AppData\Local\CrashDumps
2014-12-30 12:03 - 2013-09-04 16:44 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-30 12:03 - 2012-08-27 17:44 - 00000000 ____D () C:\Users\David\AppData\Local\Google
2014-12-30 11:51 - 2014-06-10 06:39 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-12-29 15:28 - 2014-11-11 12:11 - 00000000 ____D () C:\Program Files (x86)\osu!
2014-12-29 13:58 - 2014-02-22 16:57 - 00000000 ____D () C:\AdwCleaner
2014-12-28 09:48 - 2013-10-29 18:07 - 00000000 ____D () C:\Users\David\AppData\Roaming\.technic
2014-12-28 09:47 - 2012-08-27 18:25 - 00000000 ____D () C:\Users\David\AppData\Roaming\.minecraft
2014-12-28 09:19 - 2014-04-05 16:28 - 00000000 ____D () C:\Users\David\Documents\My Games
2014-12-28 08:23 - 2014-09-02 14:40 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-22 20:40 - 2013-05-04 09:36 - 00000000 ____D () C:\Users\Dxtory2.0
2014-12-22 20:40 - 2013-02-21 18:58 - 00000000 ____D () C:\Users\pizza
2014-12-22 20:37 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-12-21 14:18 - 2012-08-27 18:16 - 00000000 ____D () C:\Users\David\AppData\Roaming\vlc
2014-12-20 19:38 - 2013-02-05 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-12-18 20:22 - 2014-09-01 09:34 - 00000000 ___RD () C:\Users\David\Desktop\-
2014-12-17 17:20 - 2014-06-10 06:39 - 00003856 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1402378750
2014-12-16 20:32 - 2013-02-04 18:14 - 00000000 ____D () C:\schule
2014-12-16 20:21 - 2014-09-27 15:49 - 00259072 ___SH () C:\Users\David\Desktop\Thumbs.db
2014-12-14 18:23 - 2012-09-14 14:46 - 00000000 ____D () C:\Users\David\AppData\Roaming\Skype
2014-12-14 18:04 - 2014-09-21 18:20 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-14 18:04 - 2011-10-14 04:30 - 00000000 ____D () C:\ProgramData\Skype
2014-12-13 14:22 - 2014-11-17 13:54 - 00003052 _____ () C:\Windows\System32\Tasks\{B960A761-DB7D-441F-B492-F36E2AD2345F}
2014-12-13 13:44 - 2014-04-19 19:16 - 00000000 ____D () C:\Users\David\AppData\Roaming\DAEMON Tools Pro
2014-12-13 13:44 - 2013-05-21 11:23 - 00000000 ____D () C:\Users\David\AppData\Roaming\uTorrent
2014-12-13 13:32 - 2013-09-04 16:21 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-12 15:29 - 2014-10-12 19:07 - 00000000 ____D () C:\Users\David\AppData\Local\Adobe
2014-12-12 15:18 - 2013-09-04 17:23 - 00000000 ____D () C:\Program Files\WinRAR
2014-12-12 15:18 - 2012-08-27 18:17 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-12 15:18 - 2012-08-27 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-11 13:18 - 2012-07-27 06:46 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-12-10 18:21 - 2013-09-28 11:14 - 00000000 ____D () C:\Users\David\.VirtualBox
2014-12-10 18:13 - 2012-07-23 15:05 - 00000000 ____D () C:\Users\David\AppData\Roaming\Macromedia
2014-12-10 17:54 - 2014-07-30 18:38 - 00000000 ____D () C:\Users\David\Documents\CAPCOM
2014-12-10 13:43 - 2011-10-14 04:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-09 19:45 - 2014-11-25 18:03 - 00000000 ____D () C:\ProgramData\Hi-Rez Studios
2014-12-09 19:45 - 2014-11-25 18:03 - 00000000 ____D () C:\Program Files (x86)\Hi-Rez Studios
2014-12-09 19:45 - 2011-10-14 04:15 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-09 19:44 - 2014-05-27 17:19 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-12-09 19:43 - 2014-05-27 17:29 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-12-09 19:43 - 2014-05-27 17:29 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-12-09 19:42 - 2014-09-11 14:50 - 00000000 ___RD () C:\Users\David\Desktop\GGebra
2014-12-09 19:12 - 2012-07-23 15:48 - 00000000 ____D () C:\Users\David\AppData\Roaming\Adobe
2014-12-09 09:46 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-08 16:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-12-08 16:06 - 2011-12-16 13:26 - 00701576 _____ () C:\Windows\system32\perfh007.dat
2014-12-08 16:06 - 2011-12-16 13:26 - 00150444 _____ () C:\Windows\system32\perfc007.dat
2014-12-08 16:06 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-08 15:51 - 2013-10-12 17:31 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-07 14:48 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-06 21:26 - 2014-05-03 20:30 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-12-06 20:57 - 2011-10-14 04:49 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-12-03 19:23 - 2014-03-16 13:11 - 00000000 ____D () C:\Games
2014-12-02 18:54 - 2014-04-19 20:34 - 00000000 ____D () C:\Users\David\AppData\Local\SKIDROW
Files to move or delete:
====================
C:\Users\Dxtory2.0\AudioStreamSplitter.exe
C:\Users\Dxtory2.0\AVIFix.exe
C:\Users\Dxtory2.0\AVIMux.exe
C:\Users\Dxtory2.0\AVIMuxCore.dll
C:\Users\Dxtory2.0\Dxtory.exe
C:\Users\Dxtory2.0\Dxtory64.exe
C:\Users\Dxtory2.0\DxtoryAudioHelper.dll
C:\Users\Dxtory2.0\DxtoryCore.dll
C:\Users\Dxtory2.0\DxtoryCore64.dll
C:\Users\Dxtory2.0\DxtoryHK.dll
C:\Users\Dxtory2.0\DxtoryHK64.dll
C:\Users\Dxtory2.0\DxtoryMM.dll
C:\Users\Dxtory2.0\DxtoryMM64.dll
C:\Users\Dxtory2.0\DxtoryVideo.dll
C:\Users\Dxtory2.0\DxtoryVideo64.dll
C:\Users\Dxtory2.0\DxtoryVideo64_Install.bat
C:\Users\Dxtory2.0\DxtoryVideo64_Uninstall.bat
C:\Users\Dxtory2.0\DxtoryVideoSetting.exe
C:\Users\Dxtory2.0\DxtoryVideo_Install.bat
C:\Users\Dxtory2.0\DxtoryVideo_Uninstall.bat
C:\Users\Dxtory2.0\LicReg.exe
C:\Users\Dxtory2.0\RawCapConv.exe
C:\Users\Dxtory2.0\RCStream.dll
C:\Users\Dxtory2.0\unins000.dat
C:\Users\Dxtory2.0\unins000.exe
C:\Users\Dxtory2.0\UpdateChecker.exe
Some content of TEMP:
====================
C:\Users\David\AppData\Local\Temp\i4jdel0.exe
C:\Users\David\AppData\Local\Temp\Quarantine.exe
C:\Users\David\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-07 18:57
==================== End Of Log ============================
|
|
31.12.2014, 13:28
| #17 |
| /// the machine /// TB-Ausbilder    | Pc stürzt oft ab ! Java, Adobe und Firefox updaten.
__________________Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Program Files\Common Files\System
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3466399659-1618858318-3356278196-1006\User: Group Policy restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Task: {29B81785-BB2F-48E5-839A-E4F452EF813F} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-5 No Task File <==== ATTENTION
Task: {3399E5F2-A952-4774-B30D-CB0073EBB4C2} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-1 No Task File <==== ATTENTION
Task: {4908111F-2CEB-4649-89F6-211BC6CCD24B} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-5_user No Task File <==== ATTENTION
Task: {4B5EBD70-2C5A-4674-BFD9-41A26A902DB5} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-4 No Task File <==== ATTENTION
Task: {8317E2A9-1065-4444-9FAA-4322085FFFE6} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-11 No Task File <==== ATTENTION
Task: {906835B0-AB40-4461-BA83-E5B4C9C0E0A5} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-2 No Task File <==== ATTENTION
Task: {D2ED6DBE-2412-4FB2-841F-ED4407593AEC} - System32\Tasks\RegCure Pro_sch_3B8CEF59-2AF0-11E4-8A6A-DC0EA11D82FE => C:\Program Files (x86)\ParetoLogic\RegCure Pro\RegCurePro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegCure Pro_sch_3B8CEF59-2AF0-11E4-8A6A-DC0EA11D82FE.job => C:\Program Files (x86)\ParetoLogic\RegCure Pro\RegCurePro.exe <==== ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Frisches FRST log bitte.
__________________ |
|
06.01.2015, 19:51
| #18 |
| | Pc stürzt oft ab ! Fixlog.txt:
__________________Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-01-2015
Ran by David at 2015-01-06 19:26:52 Run:1
Running from C:\Users\David\Desktop\Desktop\#ANTI\FRST
Loaded Profiles: UpdatusUser & David (Available profiles: UpdatusUser & David & user)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Program Files\Common Files\System
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-3466399659-1618858318-3356278196-1006\User: Group Policy restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Task: {29B81785-BB2F-48E5-839A-E4F452EF813F} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-5 No Task File <==== ATTENTION
Task: {3399E5F2-A952-4774-B30D-CB0073EBB4C2} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-1 No Task File <==== ATTENTION
Task: {4908111F-2CEB-4649-89F6-211BC6CCD24B} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-5_user No Task File <==== ATTENTION
Task: {4B5EBD70-2C5A-4674-BFD9-41A26A902DB5} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-4 No Task File <==== ATTENTION
Task: {8317E2A9-1065-4444-9FAA-4322085FFFE6} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-11 No Task File <==== ATTENTION
Task: {906835B0-AB40-4461-BA83-E5B4C9C0E0A5} - \a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-2 No Task File <==== ATTENTION
Task: {D2ED6DBE-2412-4FB2-841F-ED4407593AEC} - System32\Tasks\RegCure Pro_sch_3B8CEF59-2AF0-11E4-8A6A-DC0EA11D82FE => C:\Program Files (x86)\ParetoLogic\RegCure Pro\RegCurePro.exe <==== ATTENTION
Task: C:\Windows\Tasks\RegCure Pro_sch_3B8CEF59-2AF0-11E4-8A6A-DC0EA11D82FE.job => C:\Program Files (x86)\ParetoLogic\RegCure Pro\RegCurePro.exe <==== ATTENTION
*****************
C:\Program Files\Common Files\System => Moved successfully.
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\IsMyWinLockerReboot => value deleted successfully.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\IsMyWinLockerReboot => value deleted successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-3466399659-1618858318-3356278196-1006\User => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{29B81785-BB2F-48E5-839A-E4F452EF813F}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29B81785-BB2F-48E5-839A-E4F452EF813F}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-5" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3399E5F2-A952-4774-B30D-CB0073EBB4C2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3399E5F2-A952-4774-B30D-CB0073EBB4C2}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-1" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4908111F-2CEB-4649-89F6-211BC6CCD24B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4908111F-2CEB-4649-89F6-211BC6CCD24B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-5_user" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4B5EBD70-2C5A-4674-BFD9-41A26A902DB5}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B5EBD70-2C5A-4674-BFD9-41A26A902DB5}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-4" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8317E2A9-1065-4444-9FAA-4322085FFFE6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8317E2A9-1065-4444-9FAA-4322085FFFE6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-11" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{906835B0-AB40-4461-BA83-E5B4C9C0E0A5}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{906835B0-AB40-4461-BA83-E5B4C9C0E0A5}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\a7cfbf4a-2fda-407e-b9e2-7e3496b505e9-2" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D2ED6DBE-2412-4FB2-841F-ED4407593AEC} => Key not found.
C:\Windows\System32\Tasks\RegCure Pro_sch_3B8CEF59-2AF0-11E4-8A6A-DC0EA11D82FE not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RegCure Pro_sch_3B8CEF59-2AF0-11E4-8A6A-DC0EA11D82FE => Key not found.
C:\Windows\Tasks\RegCure Pro_sch_3B8CEF59-2AF0-11E4-8A6A-DC0EA11D82FE.job not found.
The system needed a reboot.
==== End of Fixlog 19:26:53 ====
|
|
06.01.2015, 22:05
| #19 |
| /// the machine /// TB-Ausbilder | Pc stürzt oft ab ! das frische FRST Log fehlt noch 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.01.2015, 18:41
| #20 |
| | Pc stürzt oft ab ! Hier noch FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-01-2015
Ran by David (administrator) on DAVID-ACER on 07-01-2015 17:03:37
Running from C:\Users\David\Desktop\Desktop\#ANTI\FRST
Loaded Profile: David (Available profiles: UpdatusUser & David & user)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Malwarebytes Corporation) C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamscheduler.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVCM.EXE
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Sidebar\sidebar.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(Acer Inc.) C:\Program Files (x86)\Acer\clear.fi Client\ExtractDeviceIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-12] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\RunOnce: [Adobe Speed Launcher] => 1420646512
AppInit_DLLs: C:\PROGRA~2\KEYCRY~1\KeyCrypt64(1).dll => C:\Program Files (x86)\KeyCryptSDK\KeyCrypt64(1).dll [96104 2014-11-13] (Zemana Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\KEYCRY~1\KeyCrypt32(1).dll => C:\Program Files (x86)\KeyCryptSDK\KeyCrypt32(1).dll [87840 2014-11-13] (Zemana Ltd.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120914160850.dll (McAfee, Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120914160850.dll (McAfee, Inc.)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
FireFox:
========
FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\3cglpxv0.default-1388087379042
FF DefaultSearchUrl: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3466399659-1618858318-3356278196-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\David\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3466399659-1618858318-3356278196-1001: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Extension: Deutsch (DE) Language Pack - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\3cglpxv0.default-1388087379042\Extensions\langpack-de@firefox.mozilla.org.xpi [2013-12-26]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2011-10-14]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: McAfee ScriptScan for Firefox - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2011-10-14]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-02-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-27]
Chrome:
=======
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-30]
CHR Extension: (TooManyTabs für Chrome) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp [2014-12-30]
CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-30]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-30]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-30]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-30]
CHR Extension: (GMX MailCheck) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-12-30]
CHR Extension: (Adblock Plus) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-30]
CHR Extension: (Google-Suche) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-30]
CHR Extension: (Video Downloader professional) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-12-30]
CHR Extension: (Google Tabellen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-30]
CHR Extension: (Stylish) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2014-12-30]
CHR Extension: (Click&Clean) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2014-12-30]
CHR Extension: (Avast Online Security) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-30]
CHR Extension: (Audio EQ) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfafdlnjaliaghpjdajmlcnnblkgcefh [2014-12-30]
CHR Extension: (FVD Downloader) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2014-12-30]
CHR Extension: (RenameTab) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkailnbloeepkajmoblllhhhckpbbncg [2014-12-30]
CHR Extension: (MuteTab) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmkbaaijgpppbokgnhhoakihofedkgcc [2014-12-30]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-30]
CHR Extension: (Google Mail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-30]
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Präsentationen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-30]
CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-30]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-30]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-30]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-30]
CHR Extension: (Google-Suche) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-30]
CHR Extension: (Google Tabellen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-30]
CHR Extension: (Avast Online Security) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-30]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-30]
CHR Extension: (Google Mail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-09]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S4 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-08-12] (Perfect World Entertainment Inc)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-09] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-09] (Avast Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-01-20] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 MBAMScheduler; C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S4 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [224704 2011-03-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [502064 2012-08-23] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [210616 2012-05-25] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [162224 2012-05-25] (McAfee, Inc.)
S4 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
R2 msoidsvc; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [2079520 2012-05-17] (Microsoft Corp.)
S4 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-09-04] ()
S3 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S3 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S3 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 Spooler; C:\Windows\SysWOW64\spoolsv.exe [316416 2014-04-19] (Microsoft Corporation) [File not signed]
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [598808 2013-06-06] (Wacom Technology, Corp.)
S4 Hamachi2Svc; "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-09] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-09] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-09-22] (AVG Technologies)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [115472 2014-01-20] (BlueStack Systems)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [65264 2012-02-22] (McAfee, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-04-19] (DT Soft Ltd)
R3 keycrypt; C:\Windows\System32\DRIVERS\KeyCrypt64.sys [71400 2014-11-13] (Zemana Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-30] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160792 2012-02-22] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [229528 2012-02-22] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [487296 2012-02-22] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [647208 2012-02-22] (McAfee, Inc.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75936 2012-02-22] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [289664 2012-02-22] (McAfee, Inc.)
S3 ser2at; C:\Windows\System32\DRIVERS\ser2at64.sys [96256 2009-10-15] (ATEN)
S2 tandpl; C:\Windows\SysWOW64\drivers\tandpl.sys [4736 2003-04-19] () [File not signed]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-09] (Avast Software)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115488 2014-05-16] (Oracle Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-07 17:05 - 2015-01-07 17:05 - 00000197 _____ () C:\Windows\system32\2015-01-07-16-05-08.094-AvastVBoxSVC.exe-5176.log
2015-01-07 01:59 - 2015-01-07 01:59 - 00000197 _____ () C:\Windows\system32\2015-01-07-00-59-05.016-AvastVBoxSVC.exe-3748.log
2015-01-06 19:40 - 2015-01-06 19:40 - 00000197 _____ () C:\Windows\system32\2015-01-06-18-40-43.080-AvastVBoxSVC.exe-4792.log
2015-01-06 19:37 - 2015-01-06 19:37 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-01-06 19:08 - 2015-01-06 19:08 - 00000197 _____ () C:\Windows\system32\2015-01-06-18-08-23.063-AvastVBoxSVC.exe-5964.log
2015-01-06 18:56 - 2015-01-06 18:56 - 00638888 _____ (Oracle Corporation) C:\Users\David\Downloads\chromeinstall-8u25 (1).exe
2015-01-06 18:53 - 2015-01-06 18:53 - 00638888 _____ (Oracle Corporation) C:\Users\David\Downloads\chromeinstall-8u25.exe
2015-01-06 18:50 - 2015-01-06 18:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-06 18:39 - 2015-01-06 18:39 - 00000197 _____ () C:\Windows\system32\2015-01-06-17-39-24.033-AvastVBoxSVC.exe-5248.log
2014-12-31 11:07 - 2014-12-31 11:07 - 00000197 _____ () C:\Windows\system32\2014-12-31-10-07-30.080-AvastVBoxSVC.exe-5248.log
2014-12-31 10:31 - 2014-12-31 10:31 - 00000197 _____ () C:\Windows\system32\2014-12-31-09-31-18.031-AvastVBoxSVC.exe-5336.log
2014-12-30 14:06 - 2014-12-30 14:06 - 00000197 _____ () C:\Windows\system32\2014-12-30-13-06-58.077-AvastVBoxSVC.exe-4476.log
2014-12-30 13:58 - 2014-12-30 13:58 - 00000000 __SHD () C:\found.000
2014-12-30 13:19 - 2014-12-30 13:19 - 00000197 _____ () C:\Windows\system32\2014-12-30-12-19-15.083-AvastVBoxSVC.exe-4164.log
2014-12-30 13:12 - 2014-12-30 13:12 - 01174352 _____ () C:\Users\David\Downloads\Pencil - CHIP-Installer.exe
2014-12-30 12:58 - 2014-12-30 12:58 - 00000197 _____ () C:\Windows\system32\2014-12-30-11-58-01.042-AvastVBoxSVC.exe-5892.log
2014-12-30 12:26 - 2014-12-30 12:26 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-30 12:24 - 2014-12-30 12:24 - 00000197 _____ () C:\Windows\system32\2014-12-30-11-24-22.007-AvastVBoxSVC.exe-5324.log
2014-12-30 12:03 - 2014-12-30 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-30 11:49 - 2014-12-30 11:50 - 00000197 _____ () C:\Windows\system32\2014-12-30-10-49-44.008-AvastVBoxSVC.exe-6008.log
2014-12-29 20:01 - 2014-12-29 20:01 - 00000197 _____ () C:\Windows\system32\2014-12-29-19-01-29.075-AvastVBoxSVC.exe-3456.log
2014-12-29 15:46 - 2014-12-29 15:46 - 00000197 _____ () C:\Windows\system32\2014-12-29-14-46-42.010-AvastVBoxSVC.exe-3244.log
2014-12-29 15:45 - 2014-12-29 15:45 - 00000000 ____D () C:\Users\David\AppData\Roaming\WTablet
2014-12-29 15:15 - 2014-12-29 15:15 - 00000197 _____ () C:\Windows\system32\2014-12-29-14-15-09.025-AvastVBoxSVC.exe-4440.log
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins
2014-12-29 14:44 - 2014-12-29 14:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2014-12-29 14:44 - 2014-12-29 14:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2014-12-29 14:44 - 2013-06-06 03:09 - 01959192 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01952536 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01820952 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01818392 ____N (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01614104 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01607448 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01493272 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01489688 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll
2014-12-29 14:44 - 2013-04-30 18:18 - 00085304 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys
2014-12-29 14:44 - 2013-04-30 18:18 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2014-12-29 14:44 - 2012-12-20 23:20 - 00015344 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys
2014-12-29 14:44 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll
2014-12-29 14:43 - 2014-12-29 14:44 - 00000000 ____D () C:\Program Files\Tablet
2014-12-29 14:41 - 2014-12-29 14:41 - 00000197 _____ () C:\Windows\system32\2014-12-29-13-41-07.053-AvastVBoxSVC.exe-4776.log
2014-12-29 14:27 - 2014-12-29 14:28 - 00058994 _____ () C:\Users\David\Downloads\Addition.txt
2014-12-29 14:26 - 2014-12-29 14:28 - 00071759 _____ () C:\Users\David\Downloads\FRST.txt
2014-12-29 14:26 - 2014-12-29 14:26 - 00000000 ____D () C:\Users\David\Downloads\FRST-OlderVersion
2014-12-29 14:11 - 2014-12-29 14:11 - 00000000 ____D () C:\Windows\ERUNT
2014-12-29 14:09 - 2014-12-29 14:09 - 00000197 _____ () C:\Windows\system32\2014-12-29-13-09-49.047-AvastVBoxSVC.exe-1016.log
2014-12-29 13:50 - 2014-12-29 13:50 - 00000197 _____ () C:\Windows\system32\2014-12-29-12-50-13.018-AvastVBoxSVC.exe-1656.log
2014-12-29 13:35 - 2014-12-29 13:35 - 00000197 _____ () C:\Windows\system32\2014-12-29-12-35-42.037-AvastVBoxSVC.exe-3120.log
2014-12-29 12:41 - 2014-12-29 12:41 - 00000197 _____ () C:\Windows\system32\2014-12-29-11-41-35.007-AvastVBoxSVC.exe-4324.log
2014-12-29 11:54 - 2014-12-29 11:54 - 00000197 _____ () C:\Windows\system32\2014-12-29-10-54-03.088-AvastVBoxSVC.exe-4716.log
2014-12-28 10:10 - 2014-12-28 10:10 - 00000197 _____ () C:\Windows\system32\2014-12-28-09-10-45.054-AvastVBoxSVC.exe-4764.log
2014-12-28 09:39 - 2014-12-28 09:39 - 00000197 _____ () C:\Windows\system32\2014-12-28-08-39-11.090-AvastVBoxSVC.exe-5680.log
2014-12-28 09:31 - 2014-12-28 09:31 - 00000000 ____D () C:\Users\David\AppData\Local\Metrocide
2014-12-28 09:08 - 2014-12-28 09:08 - 00000197 _____ () C:\Windows\system32\2014-12-28-08-08-30.032-AvastVBoxSVC.exe-5092.log
2014-12-28 08:29 - 2014-12-28 08:34 - 490788359 _____ () C:\Users\David\Downloads\easyvdr-2.0.0-64-stable.iso.crdownload
2014-12-28 08:08 - 2014-12-28 08:09 - 00000197 _____ () C:\Windows\system32\2014-12-28-07-08-57.070-AvastVBoxSVC.exe-5976.log
2014-12-22 20:40 - 2014-12-22 20:40 - 00066850 _____ () C:\ComboFix.txt
2014-12-22 20:18 - 2014-12-22 20:18 - 00000197 _____ () C:\Windows\system32\2014-12-22-19-18-53.031-AvastVBoxSVC.exe-7636.log
2014-12-22 14:58 - 2014-12-22 20:40 - 00000000 ____D () C:\Qoobox
2014-12-22 14:58 - 2014-12-22 20:38 - 00000000 ____D () C:\Windows\erdnt
2014-12-22 14:58 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-12-22 14:58 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-12-22 14:58 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-12-22 14:58 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-12-22 14:55 - 2014-12-22 14:55 - 00000197 _____ () C:\Windows\system32\2014-12-22-13-55-45.078-AvastVBoxSVC.exe-5076.log
2014-12-22 12:36 - 2014-12-22 12:37 - 00000197 _____ () C:\Windows\system32\2014-12-22-11-36-24.053-AvastVBoxSVC.exe-6216.log
2014-12-21 19:11 - 2014-12-21 19:11 - 00000197 _____ () C:\Windows\system32\2014-12-21-18-11-45.067-AvastVBoxSVC.exe-4688.log
2014-12-21 18:40 - 2014-12-21 18:40 - 00000197 _____ () C:\Windows\system32\2014-12-21-17-40-28.072-AvastVBoxSVC.exe-6036.log
2014-12-21 18:09 - 2014-12-21 18:09 - 00000197 _____ () C:\Windows\system32\2014-12-21-17-09-16.068-AvastVBoxSVC.exe-5644.log
2014-12-21 17:38 - 2014-12-21 17:38 - 00000197 _____ () C:\Windows\system32\2014-12-21-16-38-07.077-AvastVBoxSVC.exe-5464.log
2014-12-21 17:06 - 2014-12-21 17:07 - 00000197 _____ () C:\Windows\system32\2014-12-21-16-06-43.006-AvastVBoxSVC.exe-6168.log
2014-12-21 16:35 - 2014-12-21 16:35 - 00000197 _____ () C:\Windows\system32\2014-12-21-15-35-40.078-AvastVBoxSVC.exe-5000.log
2014-12-21 15:22 - 2014-12-21 15:22 - 00000197 _____ () C:\Windows\system32\2014-12-21-14-22-03.049-AvastVBoxSVC.exe-3444.log
2014-12-21 15:01 - 2014-12-21 15:01 - 00000197 _____ () C:\Windows\system32\2014-12-21-14-01-37.049-AvastVBoxSVC.exe-6128.log
2014-12-21 14:27 - 2014-12-21 14:27 - 00000197 _____ () C:\Windows\system32\2014-12-21-13-27-27.023-AvastVBoxSVC.exe-5808.log
2014-12-21 13:54 - 2014-12-21 13:54 - 00000197 _____ () C:\Windows\system32\2014-12-21-12-54-09.045-AvastVBoxSVC.exe-5824.log
2014-12-21 13:24 - 2014-12-21 13:25 - 00000197 _____ () C:\Windows\system32\2014-12-21-12-24-59.039-AvastVBoxSVC.exe-5640.log
2014-12-21 12:54 - 2014-12-21 12:54 - 00000197 _____ () C:\Windows\system32\2014-12-21-11-54-00.040-AvastVBoxSVC.exe-6224.log
2014-12-21 11:26 - 2014-12-21 11:26 - 00000197 _____ () C:\Windows\system32\2014-12-21-10-26-11.013-AvastVBoxSVC.exe-6960.log
2014-12-21 10:58 - 2014-12-21 10:58 - 00000197 _____ () C:\Windows\system32\2014-12-21-09-58-19.004-AvastVBoxSVC.exe-5368.log
2014-12-21 10:54 - 2014-12-30 12:19 - 00008206 _____ () C:\Windows\PFRO.log
2014-12-21 10:26 - 2014-12-21 10:26 - 00000197 _____ () C:\Windows\system32\2014-12-21-09-26-26.080-AvastVBoxSVC.exe-3556.log
2014-12-20 20:24 - 2014-12-20 20:24 - 00000197 _____ () C:\Windows\system32\2014-12-20-19-24-07.099-AvastVBoxSVC.exe-5396.log
2014-12-20 19:50 - 2014-12-20 19:50 - 00000197 _____ () C:\Windows\system32\2014-12-20-18-50-48.001-AvastVBoxSVC.exe-6456.log
2014-12-20 19:21 - 2014-12-20 19:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-20 19:20 - 2014-12-20 19:20 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\David\Downloads\revosetup95.exe
2014-12-20 19:18 - 2014-12-20 19:18 - 00000197 _____ () C:\Windows\system32\2014-12-20-18-18-28.061-AvastVBoxSVC.exe-6004.log
2014-12-20 19:10 - 2014-12-20 19:10 - 00000000 ____D () C:\Users\David\Downloads\RevoUninstallerPortable
2014-12-20 19:09 - 2014-12-20 19:10 - 02785665 _____ (PortableApps.com) C:\Users\David\Downloads\RevoUninstallerPortable_1.95_Rev_2.paf.exe
2014-12-20 18:44 - 2014-12-20 18:44 - 00000197 _____ () C:\Windows\system32\2014-12-20-17-44-23.011-AvastVBoxSVC.exe-3956.log
2014-12-20 18:16 - 2014-12-20 18:16 - 00000197 _____ () C:\Windows\system32\2014-12-20-17-16-44.094-AvastVBoxSVC.exe-3972.log
2014-12-18 20:17 - 2014-12-18 20:17 - 00000197 _____ () C:\Windows\system32\2014-12-18-19-17-50.072-AvastVBoxSVC.exe-6196.log
2014-12-18 19:45 - 2014-12-18 19:45 - 00000197 _____ () C:\Windows\system32\2014-12-18-18-45-20.095-AvastVBoxSVC.exe-6352.log
2014-12-18 19:14 - 2014-12-18 19:14 - 00000197 _____ () C:\Windows\system32\2014-12-18-18-14-24.042-AvastVBoxSVC.exe-5504.log
2014-12-18 18:48 - 2015-01-07 17:03 - 00000000 ____D () C:\FRST
2014-12-18 18:44 - 2014-12-29 14:26 - 02123264 _____ (Farbar) C:\Users\David\Downloads\FRST64.exe
2014-12-18 18:42 - 2014-12-18 18:43 - 00000197 _____ () C:\Windows\system32\2014-12-18-17-42-32.099-AvastVBoxSVC.exe-3288.log
2014-12-18 18:09 - 2014-12-18 18:09 - 00000197 _____ () C:\Windows\system32\2014-12-18-17-09-01.002-AvastVBoxSVC.exe-5636.log
2014-12-18 17:37 - 2014-12-18 17:37 - 00000197 _____ () C:\Windows\system32\2014-12-18-16-37-39.014-AvastVBoxSVC.exe-6012.log
2014-12-18 17:01 - 2014-12-18 17:01 - 00000197 _____ () C:\Windows\system32\2014-12-18-16-01-03.056-AvastVBoxSVC.exe-3468.log
2014-12-18 02:18 - 2014-12-18 02:18 - 00000197 _____ () C:\Windows\system32\2014-12-18-01-18-44.035-AvastVBoxSVC.exe-3948.log
2014-12-17 18:54 - 2014-12-17 18:55 - 00000197 _____ () C:\Windows\system32\2014-12-17-17-54-55.026-AvastVBoxSVC.exe-5736.log
2014-12-17 17:21 - 2014-12-17 17:21 - 00000280 _____ () C:\Windows\system32\2014-12-17-16-21-20.042-aswFe.exe-4584.log
2014-12-17 17:14 - 2014-12-17 17:15 - 00000197 _____ () C:\Windows\system32\2014-12-17-16-14-40.045-AvastVBoxSVC.exe-1924.log
2014-12-17 13:37 - 2014-12-17 13:37 - 00000197 _____ () C:\Windows\system32\2014-12-17-12-37-00.066-AvastVBoxSVC.exe-3872.log
2014-12-17 08:27 - 2014-12-17 08:28 - 00000197 _____ () C:\Windows\system32\2014-12-17-07-27-59.066-AvastVBoxSVC.exe-5048.log
2014-12-17 08:22 - 2014-12-17 08:22 - 00000197 _____ () C:\Windows\system32\2014-12-17-07-22-03.011-AvastVBoxSVC.exe-3220.log
2014-12-16 20:43 - 2014-12-16 20:48 - 04437584 _____ (FreeDownloadManager.ORG ) C:\Users\David\Downloads\fdminst-lite.exe
2014-12-16 20:37 - 2014-12-16 21:01 - 1835281604 _____ () C:\Users\David\Downloads\Burnout_Paradise_The_Ultimate_Box.iso (2).crdownload
2014-12-16 20:33 - 2014-12-16 20:33 - 00000197 _____ () C:\Windows\system32\2014-12-16-19-33-25.024-AvastVBoxSVC.exe-4356.log
2014-12-16 19:59 - 2014-12-16 19:59 - 00000197 _____ () C:\Windows\system32\2014-12-16-18-59-53.015-AvastVBoxSVC.exe-3416.log
2014-12-16 19:28 - 2014-12-16 19:28 - 00000197 _____ () C:\Windows\system32\2014-12-16-18-28-29.021-AvastVBoxSVC.exe-6908.log
2014-12-16 18:55 - 2014-12-16 18:56 - 00000197 _____ () C:\Windows\system32\2014-12-16-17-55-57.084-AvastVBoxSVC.exe-7516.log
2014-12-16 18:25 - 2014-12-16 18:25 - 00000197 _____ () C:\Windows\system32\2014-12-16-17-25-06.062-AvastVBoxSVC.exe-268.log
2014-12-16 17:50 - 2014-12-16 20:08 - 00014066 ____H () C:\Users\David\Desktop\~WRL0800.tmp
2014-12-16 17:50 - 2014-12-16 19:02 - 00012257 ____H () C:\Users\David\Desktop\~WRL1323.tmp
2014-12-16 17:48 - 2014-12-16 17:58 - 878578501 _____ () C:\Users\David\Downloads\Notfall_DVD_5.0_Free.zip
2014-12-16 17:40 - 2014-12-16 17:40 - 00000197 _____ () C:\Windows\system32\2014-12-16-16-40-24.013-AvastVBoxSVC.exe-4972.log
2014-12-15 12:58 - 2014-12-15 12:58 - 00000197 _____ () C:\Windows\system32\2014-12-15-11-58-35.064-AvastVBoxSVC.exe-5068.log
2014-12-15 12:28 - 2014-12-15 12:28 - 00000197 _____ () C:\Windows\system32\2014-12-15-11-28-35.017-AvastVBoxSVC.exe-8860.log
2014-12-14 18:35 - 2014-12-14 18:36 - 00000197 _____ () C:\Windows\system32\2014-12-14-17-35-36.049-AvastVBoxSVC.exe-5092.log
2014-12-14 18:02 - 2014-12-14 18:03 - 00000197 _____ () C:\Windows\system32\2014-12-14-17-02-45.051-AvastVBoxSVC.exe-6528.log
2014-12-14 17:30 - 2014-12-14 17:30 - 00000197 _____ () C:\Windows\system32\2014-12-14-16-30-29.001-AvastVBoxSVC.exe-4244.log
2014-12-13 14:37 - 2014-12-13 14:37 - 00000197 _____ () C:\Windows\system32\2014-12-13-13-37-12.042-AvastVBoxSVC.exe-9508.log
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Users\David\AppData\Local\AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Program Files (x86)\Zemana AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Program Files (x86)\KeyCryptSDK
2014-12-13 14:17 - 2014-11-13 12:20 - 00071400 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\KeyCrypt64.sys
2014-12-13 13:58 - 2014-12-13 13:58 - 00000197 _____ () C:\Windows\system32\2014-12-13-12-58-24.096-AvastVBoxSVC.exe-8640.log
2014-12-13 13:57 - 2014-12-13 13:57 - 00130576 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-13 13:53 - 2015-01-07 17:00 - 00005738 _____ () C:\Windows\setupact.log
2014-12-13 13:53 - 2014-12-13 13:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-13 13:52 - 2014-12-13 13:54 - 05113760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-13 13:31 - 2014-12-13 13:31 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-12-13 13:30 - 2014-12-13 14:50 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-12-13 13:30 - 2014-12-13 13:40 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-12-13 13:30 - 2014-12-13 13:30 - 00001405 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-12-13 13:30 - 2014-12-13 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-12-13 13:30 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-12-13 13:26 - 2014-12-20 20:23 - 00000000 ____D () C:\Users\David\AppData\Roaming\Nico Mak Computing
2014-12-13 13:19 - 2014-12-13 13:20 - 00000197 _____ () C:\Windows\system32\2014-12-13-12-19-28.053-AvastVBoxSVC.exe-4572.log
2014-12-12 21:20 - 2014-12-12 21:20 - 00000197 _____ () C:\Windows\system32\2014-12-12-20-20-52.096-AvastVBoxSVC.exe-3652.log
2014-12-12 21:16 - 2014-12-12 21:16 - 00006696 ____N () C:\bootsqm.dat
2014-12-12 20:05 - 2014-12-12 20:05 - 00000197 _____ () C:\Windows\system32\2014-12-12-19-05-46.076-AvastVBoxSVC.exe-2796.log
2014-12-12 19:31 - 2014-12-12 19:31 - 00000197 _____ () C:\Windows\system32\2014-12-12-18-31-14.040-AvastVBoxSVC.exe-5036.log
2014-12-12 19:09 - 2014-12-12 19:21 - 00000000 ____D () C:\Users\David\AppData\Roaming\Dungeonmans
2014-12-12 18:55 - 2014-12-12 18:55 - 00000197 _____ () C:\Windows\system32\2014-12-12-17-55-37.055-AvastVBoxSVC.exe-3956.log
2014-12-12 18:22 - 2014-12-12 18:22 - 00000197 _____ () C:\Windows\system32\2014-12-12-17-22-35.093-AvastVBoxSVC.exe-2480.log
2014-12-12 17:50 - 2014-12-12 17:50 - 00000197 _____ () C:\Windows\system32\2014-12-12-16-50-54.007-AvastVBoxSVC.exe-4212.log
2014-12-12 15:40 - 2014-12-12 15:41 - 00000197 _____ () C:\Windows\system32\2014-12-12-14-40-44.093-AvastVBoxSVC.exe-4440.log
2014-12-12 15:04 - 2014-12-12 15:05 - 00000197 _____ () C:\Windows\system32\2014-12-12-14-04-54.059-AvastVBoxSVC.exe-4660.log
2014-12-11 13:46 - 2014-12-11 13:46 - 00000197 _____ () C:\Windows\system32\2014-12-11-12-46-28.031-AvastVBoxSVC.exe-3728.log
2014-12-11 13:13 - 2014-12-11 13:13 - 00000197 _____ () C:\Windows\system32\2014-12-11-12-13-14.032-AvastVBoxSVC.exe-3664.log
2014-12-11 11:45 - 2014-12-11 11:45 - 00000197 _____ () C:\Windows\system32\2014-12-11-10-45-08.054-AvastVBoxSVC.exe-3568.log
2014-12-10 19:52 - 2014-12-10 19:52 - 00000197 _____ () C:\Windows\system32\2014-12-10-18-52-11.067-AvastVBoxSVC.exe-4604.log
2014-12-10 18:46 - 2014-12-10 18:46 - 00000197 _____ () C:\Windows\system32\2014-12-10-17-46-33.082-AvastVBoxSVC.exe-4644.log
2014-12-10 18:13 - 2014-12-10 18:13 - 00000000 ____D () C:\Users\David\AppData\Roaming\com.stateofplaygames.LuminoCity
2014-12-10 18:10 - 2014-12-10 18:10 - 00000197 _____ () C:\Windows\system32\2014-12-10-17-10-39.067-AvastVBoxSVC.exe-5200.log
2014-12-10 17:34 - 2014-12-10 17:34 - 00000197 _____ () C:\Windows\system32\2014-12-10-16-34-12.020-AvastVBoxSVC.exe-4136.log
2014-12-10 14:51 - 2014-12-10 14:51 - 00000197 _____ () C:\Windows\system32\2014-12-10-13-51-12.066-AvastVBoxSVC.exe-4272.log
2014-12-10 14:20 - 2014-12-10 14:20 - 15453832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xlive.dll
2014-12-10 14:13 - 2014-12-10 14:13 - 00000197 _____ () C:\Windows\system32\2014-12-10-13-13-45.099-AvastVBoxSVC.exe-8880.log
2014-12-10 13:56 - 2014-12-10 13:56 - 00000247 _____ () C:\Windows\system32\2014-12-10-12-56-45.027-aswFe.exe-3684.log
2014-12-10 13:50 - 2014-12-10 13:56 - 00000247 _____ () C:\Windows\system32\2014-12-10-12-50-32.089-aswFe.exe-3020.log
2014-12-10 13:50 - 2014-12-10 13:50 - 00000197 _____ () C:\Windows\system32\2014-12-10-12-50-20.077-AvastVBoxSVC.exe-1564.log
2014-12-10 13:46 - 2014-12-10 13:46 - 00003256 _____ () C:\Windows\System32\Tasks\{FC85E084-C44F-41A8-96F7-9210F9904A27}
2014-12-10 13:39 - 2014-12-10 13:40 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2014-12-10 13:39 - 2014-12-10 13:40 - 00000000 ____D () C:\Windows\system32\vbox
2014-12-09 19:44 - 2014-12-09 19:43 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-12-09 19:43 - 2014-12-09 19:43 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-12-09 18:32 - 2014-12-09 18:32 - 00000000 ____D () C:\Users\David\AppData\Roaming\Yacht Club Games
2014-12-09 09:45 - 2014-12-09 19:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-12-09 09:45 - 2014-12-09 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2014-12-09 09:45 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-12-09 09:45 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-12-09 09:45 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-12-09 09:45 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-12-09 09:45 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-12-09 09:45 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-12-09 09:44 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-12-09 09:44 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-12-09 09:44 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-12-09 09:44 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-12-09 09:44 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-12-09 09:44 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-12-09 09:44 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-12-09 09:44 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-12-09 09:44 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-12-09 09:44 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-12-09 09:44 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-12-09 09:44 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-12-09 09:44 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-12-09 09:44 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-12-09 09:44 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-12-09 09:44 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-12-09 09:44 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-12-09 09:44 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-12-09 09:44 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-12-09 09:44 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-12-09 09:44 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-12-09 09:44 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-12-09 09:44 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-12-09 09:44 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-12-09 09:44 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-12-09 09:44 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-12-09 09:44 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-12-09 09:44 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-12-09 09:44 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-12-09 09:44 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-12-09 09:44 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-12-09 09:44 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-12-09 09:44 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-12-09 09:44 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-12-09 09:44 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-12-09 09:44 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-12-09 09:44 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-12-09 09:44 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-12-09 09:44 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-12-09 09:44 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-12-09 09:44 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-12-09 09:44 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-12-09 09:44 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-12-09 09:44 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-12-09 09:44 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-12-09 09:44 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-12-09 09:44 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-12-09 09:44 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-12-09 09:44 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-12-09 09:44 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-12-09 09:44 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-12-09 09:44 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-12-09 09:44 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-12-09 09:44 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-12-09 09:44 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-12-09 09:44 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-12-09 09:44 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-12-09 09:44 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-12-09 09:43 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-12-09 09:43 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-12-09 09:43 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-12-09 09:43 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-12-09 09:43 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-12-09 09:43 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-12-09 09:43 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-12-09 09:43 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-12-09 09:43 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-12-09 09:43 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-12-09 09:43 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-12-09 09:43 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-12-09 09:43 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-12-09 09:43 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-12-09 09:43 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-12-09 09:43 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-12-09 09:43 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-12-09 09:43 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-12-09 09:43 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-12-09 09:43 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-12-09 09:43 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-12-09 09:43 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-12-09 09:34 - 2014-12-09 09:34 - 00000000 ____D () C:\Program Files (x86)\Capcom
2014-12-09 09:32 - 2014-12-09 09:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-12-09 09:32 - 2014-12-09 09:32 - 00000000 ____D () C:\GOG Games
2014-12-08 17:43 - 2014-12-31 10:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-08 17:43 - 2014-12-12 15:40 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-08 17:43 - 2014-12-12 15:40 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-08 17:43 - 2014-12-12 15:40 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-08 16:16 - 2014-12-08 16:16 - 00002974 _____ () C:\Windows\System32\Tasks\Launch 19578
2014-12-08 15:52 - 2014-12-09 19:56 - 00000165 _____ () C:\AdwCleanerDebug.txt
2014-12-08 08:18 - 2014-12-08 08:18 - 00000000 ____D () C:\Users\David\AppData\Roaming\11bitstudios
2014-12-08 07:58 - 2014-12-08 08:02 - 00000000 ____D () C:\Users\David\AppData\Local\qbqbqb
2014-12-08 07:58 - 2014-12-08 07:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QbQbQb
2014-12-08 07:58 - 2014-12-08 07:58 - 00000000 ____D () C:\Program Files (x86)\QbQbQb
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-07 17:03 - 2012-07-24 15:06 - 00000000 ____D () C:\ProgramData\clear.fi
2015-01-07 17:01 - 2013-09-04 16:44 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-07 17:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-07 02:10 - 2013-09-04 16:44 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-07 02:04 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-07 02:04 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-07 02:00 - 2014-06-10 06:39 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-07 02:00 - 2014-06-04 18:09 - 01578760 _____ () C:\Windows\WindowsUpdate.log
2015-01-06 20:01 - 2011-10-14 04:48 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-06 19:58 - 2012-07-23 15:48 - 00000000 ____D () C:\Users\David\AppData\Roaming\Adobe
2015-01-06 19:57 - 2011-10-14 04:48 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-06 19:50 - 2014-10-12 19:07 - 00000000 ____D () C:\Users\David\AppData\Local\Adobe
2015-01-06 19:38 - 2014-05-03 20:34 - 00000008 __RSH () C:\Users\David\ntuser.pol
2015-01-06 19:38 - 2012-07-23 15:05 - 00000000 ____D () C:\Users\David
2015-01-06 19:26 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-01-06 19:24 - 2012-08-27 18:07 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-06 19:07 - 2014-05-27 17:19 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-01-06 19:04 - 2012-08-27 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-06 18:59 - 2014-07-27 10:32 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-01-06 18:59 - 2014-07-27 10:31 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-01-06 18:59 - 2014-07-27 10:31 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-01-06 18:59 - 2014-07-27 10:31 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-06 18:55 - 2013-12-13 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-06 18:54 - 2013-12-13 21:27 - 00000000 ____D () C:\ProgramData\Oracle
2014-12-30 14:13 - 2014-06-17 18:49 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-30 12:12 - 2014-07-09 16:56 - 00000000 ____D () C:\Users\David\AppData\Local\CrashDumps
2014-12-30 12:03 - 2013-09-04 16:44 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-30 12:03 - 2012-08-27 17:44 - 00000000 ____D () C:\Users\David\AppData\Local\Google
2014-12-29 15:28 - 2014-11-11 12:11 - 00000000 ____D () C:\Program Files (x86)\osu!
2014-12-29 13:58 - 2014-02-22 16:57 - 00000000 ____D () C:\AdwCleaner
2014-12-28 09:48 - 2013-10-29 18:07 - 00000000 ____D () C:\Users\David\AppData\Roaming\.technic
2014-12-28 09:47 - 2012-08-27 18:25 - 00000000 ____D () C:\Users\David\AppData\Roaming\.minecraft
2014-12-28 09:19 - 2014-04-05 16:28 - 00000000 ____D () C:\Users\David\Documents\My Games
2014-12-28 08:23 - 2014-09-02 14:40 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-22 20:40 - 2013-05-04 09:36 - 00000000 ____D () C:\Users\Dxtory2.0
2014-12-22 20:40 - 2013-02-21 18:58 - 00000000 ____D () C:\Users\pizza
2014-12-22 20:37 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-12-21 14:18 - 2012-08-27 18:16 - 00000000 ____D () C:\Users\David\AppData\Roaming\vlc
2014-12-20 19:38 - 2013-02-05 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-12-18 20:22 - 2014-09-01 09:34 - 00000000 ___RD () C:\Users\David\Desktop\-
2014-12-17 17:20 - 2014-06-10 06:39 - 00003856 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1402378750
2014-12-16 20:32 - 2013-02-04 18:14 - 00000000 ____D () C:\schule
2014-12-16 20:21 - 2014-09-27 15:49 - 00259072 ___SH () C:\Users\David\Desktop\Thumbs.db
2014-12-14 18:23 - 2012-09-14 14:46 - 00000000 ____D () C:\Users\David\AppData\Roaming\Skype
2014-12-14 18:04 - 2014-09-21 18:20 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-14 18:04 - 2011-10-14 04:30 - 00000000 ____D () C:\ProgramData\Skype
2014-12-13 14:22 - 2014-11-17 13:54 - 00003052 _____ () C:\Windows\System32\Tasks\{B960A761-DB7D-441F-B492-F36E2AD2345F}
2014-12-13 13:44 - 2014-04-19 19:16 - 00000000 ____D () C:\Users\David\AppData\Roaming\DAEMON Tools Pro
2014-12-13 13:44 - 2013-05-21 11:23 - 00000000 ____D () C:\Users\David\AppData\Roaming\uTorrent
2014-12-13 13:32 - 2013-09-04 16:21 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-12 15:18 - 2013-09-04 17:23 - 00000000 ____D () C:\Program Files\WinRAR
2014-12-12 15:18 - 2012-08-27 18:17 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-12 15:18 - 2012-08-27 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-11 13:18 - 2012-07-27 06:46 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-12-10 18:21 - 2013-09-28 11:14 - 00000000 ____D () C:\Users\David\.VirtualBox
2014-12-10 18:13 - 2012-07-23 15:05 - 00000000 ____D () C:\Users\David\AppData\Roaming\Macromedia
2014-12-10 17:54 - 2014-07-30 18:38 - 00000000 ____D () C:\Users\David\Documents\CAPCOM
2014-12-10 13:43 - 2011-10-14 04:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-12-09 19:45 - 2014-11-25 18:03 - 00000000 ____D () C:\ProgramData\Hi-Rez Studios
2014-12-09 19:45 - 2014-11-25 18:03 - 00000000 ____D () C:\Program Files (x86)\Hi-Rez Studios
2014-12-09 19:45 - 2011-10-14 04:15 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-09 19:44 - 2014-05-27 17:19 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-12-09 19:43 - 2014-05-27 17:29 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-12-09 19:43 - 2014-05-27 17:29 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-12-09 19:43 - 2014-05-27 17:19 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-12-09 19:42 - 2014-09-11 14:50 - 00000000 ___RD () C:\Users\David\Desktop\GGebra
2014-12-09 09:46 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-08 16:06 - 2011-12-16 13:26 - 00701576 _____ () C:\Windows\system32\perfh007.dat
2014-12-08 16:06 - 2011-12-16 13:26 - 00150444 _____ () C:\Windows\system32\perfc007.dat
2014-12-08 16:06 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-08 15:51 - 2013-10-12 17:31 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-08 10:24 - 2014-12-02 19:10 - 00000000 ____D () C:\Users\David\AppData\Local\GeometryWars3Dimensions
Files to move or delete:
====================
C:\Users\Dxtory2.0\AudioStreamSplitter.exe
C:\Users\Dxtory2.0\AVIFix.exe
C:\Users\Dxtory2.0\AVIMux.exe
C:\Users\Dxtory2.0\AVIMuxCore.dll
C:\Users\Dxtory2.0\Dxtory.exe
C:\Users\Dxtory2.0\Dxtory64.exe
C:\Users\Dxtory2.0\DxtoryAudioHelper.dll
C:\Users\Dxtory2.0\DxtoryCore.dll
C:\Users\Dxtory2.0\DxtoryCore64.dll
C:\Users\Dxtory2.0\DxtoryHK.dll
C:\Users\Dxtory2.0\DxtoryHK64.dll
C:\Users\Dxtory2.0\DxtoryMM.dll
C:\Users\Dxtory2.0\DxtoryMM64.dll
C:\Users\Dxtory2.0\DxtoryVideo.dll
C:\Users\Dxtory2.0\DxtoryVideo64.dll
C:\Users\Dxtory2.0\DxtoryVideo64_Install.bat
C:\Users\Dxtory2.0\DxtoryVideo64_Uninstall.bat
C:\Users\Dxtory2.0\DxtoryVideoSetting.exe
C:\Users\Dxtory2.0\DxtoryVideo_Install.bat
C:\Users\Dxtory2.0\DxtoryVideo_Uninstall.bat
C:\Users\Dxtory2.0\LicReg.exe
C:\Users\Dxtory2.0\RawCapConv.exe
C:\Users\Dxtory2.0\RCStream.dll
C:\Users\Dxtory2.0\unins000.dat
C:\Users\Dxtory2.0\unins000.exe
C:\Users\Dxtory2.0\UpdateChecker.exe
Some content of TEMP:
====================
C:\Users\David\AppData\Local\Temp\i4jdel0.exe
C:\Users\David\AppData\Local\Temp\Quarantine.exe
C:\Users\David\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-07 18:57
==================== End Of Log ============================
|
|
07.01.2015, 19:55
| #21 |
| /// the machine /// TB-Ausbilder | Pc stürzt oft ab ! Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Pc stürzt oft ab ! |
|
08.01.2015, 12:24
| #22 |
| | Pc stürzt oft ab ! Leider ist mein Problem nicht gelöst... Bleibt mir wohl nur noch Systemwiederherstellung  Danke für deine Hilfe |
|
08.01.2015, 12:36
| #23 |
| /// the machine /// TB-Ausbilder | Pc stürzt oft ab ! Bleibt er hängen oder stürzt er richtig ab mit Bluescreen`?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.01.2015, 16:39
| #24 |
| | Pc stürzt oft ab ! Er bleibt immer hängen. |
|
08.01.2015, 18:52
| #25 |
| /// the machine /// TB-Ausbilder | Pc stürzt oft ab ! FRST öffnen, Haken setzen bei Addition und scannen, poste bitte beide Logfiles.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
10.01.2015, 11:05
| #26 |
| | Pc stürzt oft ab ! Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-01-2015
Ran by David at 2015-01-10 11:01:55
Running from C:\Users\David\Desktop\Desktop\#ANTI\FRST
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {86355677-4064-3EA7-ABB3-1B136EB04637}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {3D54B793-665E-3129-9103-206115370C8A}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: McAfee Firewall (Disabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
"Tropico 4" (HKLM-x32\...\{C276D408-F88A-4E69-9CE3-B785CFA276BD}_is1) (Version: - )
«Cabela's Big Game Hunter Pro Hunts» (HKLM-x32\...\{77B9D608-84EC-4F26-9541-D92F1C223851}_is1) (Version: 1.0 - © R.G. Revenants)
µTorrent (HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
7 Days to Die - Alpha version 0.9.1 (HKLM-x32\...\{967E55B4-6DDD-4A2F-BFC7-07F1E327971E}_is1) (Version: 0.9.1 - The Fun Pimps LLC)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2904.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.2904.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3504 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0913.2011 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.5 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKLM-x32\...\{01011662-76A8-41E8-B1A8-4F8821570AC5}) (Version: 4.54.48.1338 - Elcomsoft Co. Ltd.)
AirMech (HKLM-x32\...\Steam App 206500) (Version: - Carbon Games)
Alien Swarm (HKLM-x32\...\Steam App 630) (Version: - Valve)
Among The Sleep (HKLM-x32\...\Among The Sleep_is1) (Version: - )
ANDY OS (HKLM\...\ANDY OS) (Version: 1.1 - andyroid.net)
Anno 2070 version 2.0 (HKLM-x32\...\{B6249B57-3A35-4E06-A747-F79AE49F275D}_is1) (Version: 2.0 - )
AntiLogger Free version 1.8.2.16 (HKLM-x32\...\{A80DB23D-0618-405B-89D9-28F99814E287}_is1) (Version: 1.8.2.16 - Zemana Ltd.)
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version: - Reloaded Productions)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.00 - Ubisoft)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.0.2208 - AVAST Software)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Battlefield Heroes (HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}) (Version: - EA Digital illusions)
Big Fun Zug Um Zug (HKLM-x32\...\Zug Um Zug) (Version: - )
BigRigs over the road Racing (HKLM-x32\...\BigRigs over the road Racing_is1) (Version: - Stellar Stone Group)
Blender (HKLM\...\Blender) (Version: 2.64a-release - Blender Foundation)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.5.3042 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{783DCCCB-FBD0-4D1D-928D-7075DA8015E6}) (Version: 0.8.5.3042 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
'Borderlands' (v.1.4.1) (HKLM-x32\...\'Borderlands'_is1) (Version: - )
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.8.2.2 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.8.4.1 - Broadcom Corporation)
BumpTop (HKLM-x32\...\{71702641-2849-45A4-8E62-4B85974B24A0}_is1) (Version: 2.1.6225 - Bump Technologies, Inc.)
BumpTop (HKLM-x32\...\{AC28B5E8-B5D6-4917-B686-DED2212926BB}) (Version: 1.0.3038 - Bump Technologies, Inc.)
Capsized (HKLM-x32\...\Capsized_is1) (Version: - )
Cat Licking Screen Cleaner Screensaver (HKLM-x32\...\Cat Licking Screen Cleaner Screensaver) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.00 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
Cinema 4D version R12 (HKLM-x32\...\{7D9D8134-9FA3-4FFF-ADA1-BF609F29997A}_is1) (Version: R12 - Salat Production)
clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.)
clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 1.0.2024.00 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8026 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Costume Quest 2 (HKLM-x32\...\Costume Quest 2_is1) (Version: 1.0 - PLAZA)
Craften Terminal 3.3.4897.28268 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.3.4897.28268 - Craften Dev Team)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
CursorFX (x32 Version: 2.00 - Stardock Corporation) Hidden
CursorFX Plus (HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\CursorFX Plus) (Version: - Stardock Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Pro Advanced (HKLM-x32\...\DAEMON Tools Pro Advanced) (Version: - )
Depth (HKLM-x32\...\Depth_is1) (Version: - )
Die Sims™ 4 Erstelle einen Sim-Demo (HKLM-x32\...\{6908ED99-F02B-4E99-A202-3FAC99C510ED}) (Version: 1.0.237.100 - Electronic Arts Inc.)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Duke Nukem 3D Megaton Edition version 1.00 (HKLM-x32\...\Duke Nukem 3D Megaton Edition_is1) (Version: 1.00 - )
Dxtory 2.0.104 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.104 - Dxtory Software)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ETDWare PS/2-X64 8.0.6.3_WHQL (HKLM\...\Elantech) (Version: 8.0.6.3 - ELAN Microelectronic Corp.)
Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FEZ (HKLM-x32\...\FEZ_is1) (Version: - R.G. Origami)
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
FMS (HKLM-x32\...\FMS) (Version: - )
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GeoGebra 4.4 (HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\GeoGebra 4.4) (Version: 4.4.43.0 - International GeoGebra Institute)
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.24.0 - International GeoGebra Institute)
Geometry Wars 3 Dimensions (HKLM-x32\...\Geometry Wars 3 Dimensions_is1) (Version: - )
GIMP 2.8.2 (HKLM\...\GIMP-2_is1) (Version: 2.8.2 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Gunpoint Exclusive Edition 1.0 (HKLM-x32\...\Gunpoint Exclusive Edition 1.0) (Version: 1.0 - Focus Home Interactive)
Gunpoint version v1.1 (HKLM-x32\...\{B33EDF25-91DF-40FC-B2F7-FA19E3F0489F}}_is1) (Version: v1.1 - )
Haunt 1.1 (HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\Haunt 1.1) (Version: - )
Haunt 1.1 (HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\Haunt 1.1) (Version: - )
HAWKEN (HKLM-x32\...\Steam App 271290) (Version: - Adhesive Games)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photosmart 5510 series - Grundlegende Software für das Gerät (HKLM\...\{5409411D-CD72-432D-B823-1B520B24BD3C}) (Version: 25.0.621.0 - Hewlett-Packard Co.)
HP Photosmart 5510 series Hilfe (HKLM-x32\...\{E02964EA-0E1B-4620-A26E-CBAB0341B1BB}) (Version: 140.0.2.2 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Igneous (HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\Igneous) (Version: - )
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.0.0 - LIGHTNING UK!)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3223 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest (HKLM-x32\...\Jewel Quest_is1) (Version: - My Real Games Ltd)
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Joystick 2 Mouse 3 (HKLM-x32\...\Joystick 2 Mouse 3) (Version: - )
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Jurassic Park Operation Genesis Demo (HKLM-x32\...\InstallShield_{5066E836-D960-45A2-AB12-81545003451D}) (Version: 1.00.0000 - Universal Interactive)
Jurassic Park Operation Genesis Demo (x32 Version: 1.00.0000 - Universal Interactive) Hidden
Kill The Bad Guy (HKLM-x32\...\Kill The Bad Guy_is1) (Version: - )
Killer is Dead (HKLM-x32\...\Killer is Dead_is1) (Version: - )
Knight Rider PC Demo (HKLM-x32\...\Knight Rider PC Demo) (Version: - Davilex Games B.V.)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - )
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LEGO MINDSTORMS NXT - (Deutsch) Sprachenpaket (HKLM-x32\...\{4614C36E-AABF-42AD-9419-0B8051547B96}) (Version: 2.0.100.0 - The LEGO Group)
LEGO MINDSTORMS NXT Driver for x64 (HKLM\...\{74E85F31-573F-45BF-8939-4D2BCDCC2083}) (Version: 1.17.770 - LEGO)
LEGO MINDSTORMS NXT Migration Package (HKLM-x32\...\{6C1D47CC-682C-4673-8CA8-DEE659628599}) (Version: 1.2.8.0 - LEGO)
LEGO MINDSTORMS NXT Software v2.0 (HKLM-x32\...\{5B7EDCF8-E6AD-4E99-972C-34BF1F07B349}) (Version: 2.0.114.0 - LEGO)
LibreOffice 3.5 (HKLM-x32\...\{B1F9C834-0594-4563-B344-4ED9599A5945}) (Version: 3.5.5.3 - The Document Foundation)
LibreOffice 3.5 Help Pack (German) (HKLM-x32\...\{63DAF1E5-2FE9-4CE1-871F-BBE6E5630E12}) (Version: 3.5.5.3 - The Document Foundation)
Licking Dog Screen Clean Screensaver (HKLM-x32\...\Licking Dog Screen Clean Screensaver) (Version: - )
LIMBO (HKLM-x32\...\LIMBO) (Version: - )
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.1.0.166 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.1.0.166 - LogMeIn, Inc.) Hidden
MagicDisc 2.7.106 (HKLM-x32\...\MagicDisc 2.7.106) (Version: - )
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Max Payne 2 (HKLM-x32\...\Max Payne 2) (Version: - )
McAfee Internet Security Suite (HKLM-x32\...\MSC) (Version: 11.0.678 - McAfee, Inc.)
MegaDownloader 0.82 (HKLM\...\{C12C2297-65A4-4E64-9AE1-29F0D947FDA0}}_is1) (Version: 0.82 - Andres_age)
Megapolis (HKLM-x32\...\Megapolis_is1) (Version: - FreeGamePick.com)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Online Services-Anmeldeassistent (HKLM\...\{46E637E2-AC34-4B45-B5DF-D20903A3DB61}) (Version: 7.250.4303.0 - Microsoft Corporation)
Microsoft SharePoint Designer 2013 - de-de (HKLM\...\SPDRetail - de-de) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft Visual C# 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C# 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 11.030.01.21.75 - Huawei Technologies Co.,Ltd)
Monaco What's Yours Is Mine (HKLM-x32\...\Monaco What's Yours Is Mine_is1) (Version: Monaco What's Yours Is Mine - )
Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
Mutant Factions v0.92 (HKLM-x32\...\{192DCFA4-5AD8-44B2-B08E-38D7BC8980C6}_is1) (Version: - Ben Johnson)
My Game Long Name (HKLM\...\UDK-e40e093f-8cca-4bae-b236-c4c49ce4598f) (Version: - Epic Games, Inc.)
My Game Long Name (HKLM\...\UDK-fa558830-5bb0-41aa-b74c-0e62877dd866) (Version: - Epic Games, Inc.)
MyFreeCodec (HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MyFreeCodec) (Version: - )
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
Need For Speed™ World (HKLM-x32\...\{3AF1B16A-7DC9-4C80-BAEC-70B088A7C5B8}) (Version: 1.0.0.0 - Electronic Arts)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Nitronic Rush (2012-12-21 .2) version 20121221.1 (HKLM-x32\...\{9B55759D-424F-4CB1-B84E-AAE83CC1D20A}_is1) (Version: 20121221.1 - DigiPen)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9002 - NTI Corporation) Hidden
NVIDIA Grafiktreiber 285.64 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 285.64 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}) (Version: 9.10.0514 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
One Button Bob (HKLM-x32\...\{00F0982D-CBB7-47FE-BAA1-4C0589D43A8A}_is1) (Version: - ePlaybus.com)
Opera Stable 26.0.1656.60 (HKLM-x32\...\Opera 26.0.1656.60) (Version: 26.0.1656.60 - Opera Software ASA)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{58152609-fc38-4925-8ef4-c2548453c6fb}) (Version: latest - ppy Pty Ltd)
osu! (HKLM-x32\...\{e2eadd0d-7e2d-4ed3-808b-921824a1913a}) (Version: latest - ppy Pty Ltd)
Outland (HKLM-x32\...\Outland_is1) (Version: 1.0 - PLAZA)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.4.3 - Frank Heindörfer, Philip Chinery)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
PhotoFiltre 7 (HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\PhotoFiltre 7) (Version: - )
Planetary Annihilation (HKLM-x32\...\Planetary Annihilation_is1) (Version: - )
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Poker Night 2 (HKLM-x32\...\Poker Night 2_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Portal (HKLM-x32\...\Portal) (Version: - )
Portal 2 version 1.16 (HKLM-x32\...\{2ED84EF7-0C8D-3P20-BIO2-7B42A5D4E0EB}_is1) (Version: 1.16 - Black Box)
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Postal 2 Complete (HKLM-x32\...\Postal 2 Complete_is1) (Version: - )
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.6 - Power Software Ltd)
Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - )
Prototype 2 version 5.1 (HKLM-x32\...\{B810D852-DFD6-PROT2L-89A5-CC4D47756DAF}_is1) (Version: 5.1 - Black_Box)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QbQbQb version 1.1.0 (HKLM-x32\...\{6AC0001C-30BB-4582-959E-6BF89172AB09}_is1) (Version: 1.1.0 - Rezoner)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.1 r2290 - )
Randal's Monday (HKLM-x32\...\Randal's Monday_is1) (Version: - Daedalic Entertainment)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.)
RegHunter (HKLM\...\{F94A63D7-9A61-403B-8F6F-90B1BF77211A}) (Version: 1.3.3.1613 - Enigma Software Group USA, LLC)
Remo Repair RAR (HKLM-x32\...\{665680CE-EABF-4678-94AA-F3253AD70B0A}_is1) (Version: 2.0.0.17 - Remo Software)
Resident Evil - Operation Raccoon City (HKLM-x32\...\Resident Evil - Operation Raccoon City_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Salt 1.2.9.2 (HKLM-x32\...\Salt 1.2.9.2) (Version: 1.2.9.2 - TJTITAN199)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.3.2.12074_13 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.3.2.12074_13 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.6.0 - SAMSUNG Electronics Co., Ltd.)
Serious Sam Test 2 (HKLM-x32\...\Serious Sam Test 2) (Version: - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Shape Shape (HKLM-x32\...\Shape Shape_is1) (Version: - Shmehao.com)
Shockwave (HKLM-x32\...\Shockwave) (Version: - )
Shovel Knight (HKLM-x32\...\1207664823_is1) (Version: 2.0.0.5 - GOG.com)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Southpark Stick of Truth (HKLM-x32\...\U291dGhwYXJrU3RpY2tvZlRydXRo_is1) (Version: 1 - )
Spelunky HD 1.0 (HKLM-x32\...\Spelunky HD 1.0) (Version: 1.0 - Cat-A-Cat)
Spintires (HKLM-x32\...\Spintires_is1) (Version: - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Street Fighter X Tekken (HKLM-x32\...\{43430FA5-AF68-4A2D-A7D4-891000008200}) (Version: 1.0.0.0 - CAPCOM U.S.A., INC)
Studie zur Verbesserung von HP Photosmart 5510 series Produkten (HKLM\...\{EDBC8AED-78A3-424E-ADB6-C7B1424FFAFD}) (Version: 25.0.621.0 - Hewlett-Packard Co.)
Super Meat Boy v1.5 (HKLM-x32\...\Super Meat Boy v1.5_is1) (Version: - Team Meat)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 7 (HKLM-x32\...\TeamViewer 7) (Version: 7.0.13989 - TeamViewer)
The Room (HKLM-x32\...\The Room_is1) (Version: - Fireproof Games)
The Walking Dead: Season 2 Episode 3 (HKLM-x32\...\VGhlV2Fsa2luZ0RlYWRTZWFzb24y_is1) (Version: 1 - )
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
Tribes: Ascend (HKLM-x32\...\Steam App 17080) (Version: - Hi-Rez Studios)
Tropico 5 (HKLM-x32\...\Tropico 5_is1) (Version: - )
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UC232A_Win 7_64bit (HKLM-x32\...\{437BDACD-9584-4A01-A814-27EA01B452A6}) (Version: 1.0.078 - Aten International Co., Ltd.)
Unity Web Player (HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
Vegas Pro 12.0 (64-bit) (HKLM\...\{A1A75F4F-9C9F-11E2-8FCB-F04DA23A5C58}) (Version: 12.0.563 - Sony)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - )
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.6-3 - Wacom Technology Corp.)
Warsow 1.02 (HKLM-x32\...\{24508D50-EB8F-4FE6-B69D-B4935D8745EF}_is1) (Version: 1.02 - Chasseur de bots)
WebcamMax (HKLM-x32\...\WebcamMax) (Version: 7.0.9.8.MultiLanguage - )
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Wing Commander III (HKLM-x32\...\{F96B9930-E22A-44D6-81B5-6C8E92C21B4B}) (Version: 2.0.0.2 - Electronic Arts)
WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
XSplit Broadcaster (HKLM-x32\...\{4BC33FAB-4249-44D7-88A3-22682C577EE3}) (Version: 1.3.1310.1103 - SplitMediaLabs)
Yet Another Zombie Defense (HKLM-x32\...\WWV0QW5vdGhlclpvbWJpZURlZmVuc2U=_is1) (Version: 1 - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001_Classes\CLSID\{01E9FAE9-3819-4dd9-B1D9-998A1C62D1F8}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001_Classes\CLSID\{092dfa86-5807-5a94-bf3b-5a53ba9e5308}\InprocServer32 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
CustomCLSID: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files (x86)\Blender Foundation\Blender\BlendThumb64.dll ()
==================== Restore Points =========================
08-01-2015 11:41:24 Ende der Bereinigung
08-01-2015 12:05:19 Revo Uninstaller's restore point - Darksiders II
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2014-12-22 15:21 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0342BFD4-5050-4C2B-8AE3-A40D108757DA} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-11-12] (Microsoft Corporation)
Task: {08E7991B-1383-4377-BEDA-14D0F26A7409} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-08-24] (Acer Incorporated)
Task: {0C3CB652-4410-4852-A2B5-C433841839BC} - System32\Tasks\{B960A761-DB7D-441F-B492-F36E2AD2345F} => C:\Users\David\Desktop\IGG-The.Escapists.0.792\Neuer Ordner\The Escapists\TheEscapists.exe
Task: {15F2A646-5DE5-485A-9213-E4A7D2670688} - System32\Tasks\{848CE327-C827-4159-A571-79A8981EFB54} => pcalua.exe -a "C:\Program Files (x86)\Portal\Portal.exe" -d "C:\Program Files (x86)\Portal\portal\sound\weapons\rocket"
Task: {177D876B-F170-4499-A814-BAF6AD943E35} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30] (Hewlett-Packard)
Task: {1DAA2393-F7FE-40DC-A291-FC977EB52FD1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {1DCBED23-97E8-47D7-8CB8-935767F4E6E5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-11-17] (Microsoft Corporation)
Task: {2CF4A184-DFBF-43E1-AF67-51A887F04F49} - System32\Tasks\{0A7E012B-4D8E-48BB-A719-4A57FD4D2C28} => pcalua.exe -a "C:\Program Files (x86)\Steam\steamapps\common\Alien Swarm\bin\addoninstaller.exe" -d "C:\Program Files (x86)\Steam\steamapps\common\Alien Swarm" -c /register
Task: {2D1E89ED-BF8E-4919-874C-2A3A070F535E} - System32\Tasks\HPCustParticipation HP Photosmart 5510 series => C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPCustPartic.exe [2011-09-16] (Hewlett-Packard Co.)
Task: {31B454B7-8A78-4193-8B39-D962AD5311E5} - System32\Tasks\{2E1BC973-FB55-475C-AB91-7E2AF64512AA} => pcalua.exe -a E:\Redist\vcredist_x86.exe -d E:\Redist
Task: {3817BD51-2743-4031-BAE8-66415FA67768} - System32\Tasks\{C70F2032-FF8C-4D1C-A97B-C8186CB7C12A} => pcalua.exe -a C:\Users\David\Desktop\serioussam.exe -d C:\Users\David\Desktop
Task: {39FC84F7-631F-48DD-98D9-2A1E0E55A17D} - System32\Tasks\{868495F6-ECBD-4925-81F3-720A2EE1E54A} => pcalua.exe -a C:\Users\David\Downloads\dxwebsetup(1).exe -d C:\Users\David\Downloads
Task: {3F572DED-F780-4880-B653-DEA49C7D78CF} - System32\Tasks\Launch 19578 => C:\Program Files (x86)\YTDownloader\YTDownloader.exe
Task: {4244BFD1-7259-4908-873E-EE86BC202A69} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-08-24] (CyberLink Corp.)
Task: {477F45F8-5B79-4B1D-BEFC-08AD95E39AC1} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20] (Adobe Systems Incorporated)
Task: {4D47168B-2802-4D1E-B252-0D1E997C5766} - System32\Tasks\{065B4F65-EC5A-406A-B1BF-51665159EE90} => pcalua.exe -a "C:\Program Files (x86)\Alientrap Games Inc\Capsized\Dependencies\dotnetfx35.exe" -d "C:\Program Files (x86)\Alientrap Games Inc\Capsized\Dependencies"
Task: {52096399-6CB7-4D23-8447-7BB4A6E198BA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {526BBCEA-16B6-43E9-81CC-A3B42891661C} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {556A8282-344D-475C-AC3C-9C3A62004FE7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-11-21] (Piriform Ltd)
Task: {601C76F1-93F4-4124-ABDF-DEEE85043577} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-09] (AVAST Software)
Task: {66DBEAE5-CE4D-4310-B480-2E2DE6D1EB06} - System32\Tasks\{E185E58D-45E6-484E-9487-A57A3278B40F} => E:\Install.exe
Task: {68B169C3-1246-48A2-9217-64F8B58ED286} - System32\Tasks\{EA2934C7-4D43-4F47-8E36-9314EFB5FA20} => pcalua.exe -a "C:\Users\David\Desktop\Desktop\Bioshock\IGG-Bioshock.1\Bioshock\#README#\DirectX 9c (2007)\DXSETUP.exe" -d "C:\Users\David\Desktop\Desktop\Bioshock\IGG-Bioshock.1\Bioshock\#README#\DirectX 9c (2007)"
Task: {69E2DEA5-63B2-460A-9855-B92AD52005D0} - System32\Tasks\{A36C69E5-17AC-4B1D-A6D6-FE418062131A} => pcalua.exe -a C:\Users\David\Desktop\uc232a_win7_xp_vista_v1.0.075-alternativ\UC232A_Windows_Setup_V1.0.075.exe -d C:\Users\David\Desktop\uc232a_win7_xp_vista_v1.0.075-alternativ
Task: {6A276532-1B42-412E-9F2B-1E58474A60A9} - System32\Tasks\{4D6378C9-1B39-4645-82D6-B50B2003D818} => pcalua.exe -a C:\Users\David\Desktop\IGG-Return.to.Blockland\IGG-Return.to.Blockland\RTB1045full.exe -d C:\Users\David\Desktop\IGG-Return.to.Blockland\IGG-Return.to.Blockland
Task: {6BBDBD42-4139-4F50-B00E-2C2D9987B4A6} - System32\Tasks\{32EA14EE-1B21-4161-9767-0E05A2B92C30} => pcalua.exe -a C:\Users\David\Desktop\UC232A_Windows_Setup_V1.0.075.exe -d C:\Users\David\Desktop
Task: {6D192E25-7783-4387-A04E-B0279B611274} - System32\Tasks\{FC85E084-C44F-41A8-96F7-9210F9904A27} => pcalua.exe -a "C:\Program Files (x86)\Capcom\Street Fighter X Tekken\GDFInstall.exe" -d "C:\Program Files (x86)\Capcom\Street Fighter X Tekken"
Task: {7A5CEB00-1B27-4B83-9D16-EE48E67BD9F3} - System32\Tasks\{4BA1C9B7-C196-4EA4-83DE-BB4F70D02D3D} => pcalua.exe -a C:\Users\David\Downloads\setup_de.exe -d C:\Users\David\Downloads
Task: {7B2B34F5-4085-437A-BFC2-4B5518027C67} - System32\Tasks\Opera scheduled Autoupdate 1402378750 => C:\Program Files (x86)\Opera\launcher.exe [2014-12-17] (Opera Software)
Task: {8E14E3F8-2F52-4F82-AE5B-EBEFABB5C164} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-12] (Adobe Systems Incorporated)
Task: {90FA3741-5BE2-4C4D-8EDD-BF24C662DA32} - System32\Tasks\{4B9F3708-561A-4736-9DA8-62AE7BDC499D} => pcalua.exe -a "C:\Users\David\Downloads\uc232a_windows_setup_v1.0.078 (1)\UC232A_Windows_Setup.exe" -d "C:\Users\David\Downloads\uc232a_windows_setup_v1.0.078 (1)"
Task: {927EAAA0-F2E1-4579-AA90-FB15E55C699E} - System32\Tasks\{4DC151BF-6976-44B0-9444-E099F0FA40AA} => E:\Install.exe
Task: {A078D10B-62C5-4164-8F15-0F1C8D4B5FF2} - System32\Tasks\{AFF2F52F-EF43-4E4B-B7C3-AF306358CAFF} => pcalua.exe -a C:\Users\David\Desktop\desktop\igneous_setup\igneous_setup.exe -d C:\Users\David\Desktop\desktop\igneous_setup
Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: {A59976D5-9298-4D00-815B-909FA1D0AF29} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-11-17] (Microsoft Corporation)
Task: {A6055463-7302-474B-B41F-97B6DCFE80A3} - System32\Tasks\{30B6B71D-360A-4990-A89F-CDD344DC9335} => E:\Install.exe
Task: {A6502404-9038-4665-B2D8-8B18A07BDA5F} - System32\Tasks\{3798E432-BD79-4B0C-B9C8-6302DA50E04B} => pcalua.exe -a E:\Downloads\dotnetfx2.exe -d E:\Downloads
Task: {B01CD576-E006-4C2D-8B6A-2098664AAEBE} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-08-24] (CyberLink)
Task: {B18DF795-9544-4CC8-B4C2-58513749B5C5} - System32\Tasks\{A7DB6150-3B52-4F49-9F91-FBC0624BFD61} => C:\Program Files (x86)\Black Box\Portal 2\portal2.exe [2012-02-21] ()
Task: {B954B984-0A79-473C-9A00-EFB479BF2BC2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {C3C95896-ADFC-454C-AE05-C23335A93F78} - System32\Tasks\{508081F0-5FC7-4271-8CDC-1E61763ECB6A} => pcalua.exe -a "C:\Users\David\Desktop\Desktop\CD\emedia 1\games\Erotik\Bustout\bo3dinst.exe" -d "C:\Users\David\Desktop\Desktop\CD\emedia 1\games\Erotik\Bustout"
Task: {CBB4A1C4-B70A-4BE3-86FD-D58C1F7DE5B1} - System32\Tasks\{860E53FE-8F1F-45E9-BA57-D276414F06DB} => pcalua.exe -a C:\Users\David\Downloads\vcredist_x86.exe -d C:\Users\David\Downloads
Task: {CCEF0C18-19F2-49F5-8EC2-85CAB08653AE} - System32\Tasks\{5C16AEF4-46C9-49A6-9611-1E112B28285F} => E:\Install.exe
Task: {D817B95F-878F-403C-9983-AF7E963D183D} - System32\Tasks\{0C44E482-14D5-44D4-BED0-95F68DAA076B} => E:\Install.exe
Task: {E0974176-D160-47A1-A820-923295320CC2} - System32\Tasks\{E2709E61-FC50-47E8-B8E6-B63C51EF9AAA} => pcalua.exe -a C:\Users\David\Downloads\dxwebsetup(2).exe -d C:\Users\David\Downloads
Task: {E0D99CE9-E454-40D0-BC5F-63DFFECC6D23} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {E9B2832A-8D63-4EF9-B5F2-8A3F4F46CEF7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {EC44ABFE-B79F-4C91-B75D-BDEB2CB1D73D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {F565E689-75FD-466B-A601-2D52FBFFFBB3} - System32\Tasks\{6C8B5439-577B-46BA-8421-3D94A2A0E99A} => pcalua.exe -a C:\Users\David\Desktop\Joy2Mouse3.exe -d C:\Users\David\Desktop
Task: {FCAB90B4-8FD1-4020-A4CC-62C286707DEC} - System32\Tasks\Open Chrome => Chrome.exe --new-window hxxp://toolbar.avg.com/almost-done?pid=avg&lang=de
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Open Chrome.job => c:\program files (x86)\Google\Chrome\Application\chrome.exe
==================== Loaded Modules (whitelisted) =============
2014-09-02 14:40 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-06-04 18:59 - 2014-09-04 08:55 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2011-10-14 04:57 - 2011-06-10 18:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-12-29 14:43 - 2013-06-06 03:09 - 01185048 ____N () C:\Program Files\Tablet\Wacom\libxml2.dll
2014-12-09 19:42 - 2014-12-09 19:42 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-12-09 19:42 - 2014-12-09 19:42 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2015-01-08 11:30 - 2015-01-08 11:30 - 02909696 _____ () C:\Program Files\AVAST Software\Avast\defs\15010800\algo.dll
2014-12-09 19:42 - 2014-12-09 19:43 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2015-01-10 10:58 - 2015-01-10 10:58 - 02909696 _____ () C:\Program Files\AVAST Software\Avast\defs\15011000\algo.dll
2013-05-14 16:33 - 2013-05-14 16:33 - 00002560 _____ () C:\Program Files (x86)\DAEMON Tools Pro Advanced\MSIMG32.dll
2011-08-24 18:03 - 2011-08-24 18:03 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2014-12-09 19:43 - 2014-12-09 19:43 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 07816192 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avcodec-54.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 00188416 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avutil-52.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 01425920 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avformat-54.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 00336896 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\swscale-2.dll
2013-03-08 06:17 - 2013-03-08 06:17 - 00096256 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\swresample-0.dll
2014-12-30 12:03 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2014-12-30 12:03 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2014-12-30 12:03 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-30 12:03 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: ArcService => 3
MSCONFIG\Services: AxInstSV => 3
MSCONFIG\Services: BackupStack => 2
MSCONFIG\Services: BBSvc => 3
MSCONFIG\Services: BBUpdate => 2
MSCONFIG\Services: BDESVC => 3
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: BstHdAndroidSvc => 2
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: CertPropSvc => 3
MSCONFIG\Services: CryptSvc => 2
MSCONFIG\Services: DsiWMIService => 2
MSCONFIG\Services: EgisTec Ticket Service => 3
MSCONFIG\Services: ePowerSvc => 2
MSCONFIG\Services: FLEXnet Licensing Service => 3
MSCONFIG\Services: GREGService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: Live Updater Service => 2
MSCONFIG\Services: McAfee SiteAdvisor Service => 2
MSCONFIG\Services: McAWFwk => 3
MSCONFIG\Services: mcmscsvc => 2
MSCONFIG\Services: McNaiAnn => 2
MSCONFIG\Services: McNASvc => 2
MSCONFIG\Services: McODS => 3
MSCONFIG\Services: McProxy => 2
MSCONFIG\Services: MSK80Service => 2
MSCONFIG\Services: NOBU => 2
MSCONFIG\Services: NTI IScheduleSvc => 2
MSCONFIG\Services: savesenselive => 2
MSCONFIG\Services: savesenselivem => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SmdmFService => 2
MSCONFIG\Services: SrvUpdater => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\Services: TuneUp.UtilitiesSvc => 2
MSCONFIG\Services: vToolbarUpdater18.1.9 => 2
MSCONFIG\Services: Wpm => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BumpTop.lnk => C:\Windows\pss\BumpTop.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^BumpTop.lnk => C:\Windows\pss\BumpTop.lnk.Startup
MSCONFIG\startupfolder: C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk => C:\Windows\pss\MagicDisc.lnk.Startup
MSCONFIG\startupfolder: C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk => C:\Windows\pss\MyPC Backup.lnk.Startup
MSCONFIG\startupfolder: C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk => C:\Windows\pss\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: Andy => C:\Program Files\Andy\HandyAndy.exe
MSCONFIG\startupreg: ArcadeMovieService => "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe"
MSCONFIG\startupreg: BackupManagerTray => "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTAgent.exe" -autorun
MSCONFIG\startupreg: DATAMNGR => C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE
MSCONFIG\startupreg: Dxtory Update Checker 2.0 => C:\Users\Dxtory2.0\UpdateChecker.exe
MSCONFIG\startupreg: ETDCtrl => %ProgramFiles%\Elantech\ETDCtrl.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: IntelTBRunOnce => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPDLR => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: LightShot => C:\Users\David\AppData\Local\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue
MSCONFIG\startupreg: LManager => C:\Program Files (x86)\Launch Manager\LManager.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: mcui_exe => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: NextLive => C:\Windows\SysWOW64\rundll32.exe "C:\Users\David\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: SearchProtect => C:\Users\David\AppData\Roaming\SearchProtect\bin\cltmng.exe
MSCONFIG\startupreg: SearchProtectAll => C:\Program Files (x86)\SearchProtect\bin\cltmng.exe
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: WebcamMaxAutoRun => "C:\Program Files (x86)\WebcamMax\WebcamMax.exe" -a
MSCONFIG\startupreg: Yontoo Desktop => "C:\Users\David\AppData\Roaming\Yontoo\YontooDesktop.exe"
MSCONFIG\startupreg: ZALFree => "C:\Program Files (x86)\Zemana AntiLogger Free\AntiLogger Free.exe" /MINIMIZED
========================= Accounts: ==========================
Administrator (S-1-5-21-3466399659-1618858318-3356278196-500 - Administrator - Disabled)
David (S-1-5-21-3466399659-1618858318-3356278196-1001 - Administrator - Enabled) => C:\Users\David
Gast (S-1-5-21-3466399659-1618858318-3356278196-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3466399659-1618858318-3356278196-1004 - Limited - Enabled)
UpdatusUser (S-1-5-21-3466399659-1618858318-3356278196-1000 - Limited - Enabled) => C:\Users\UpdatusUser
user (S-1-5-21-3466399659-1618858318-3356278196-1006 - Limited - Enabled) => C:\Users\user
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Hamachi Network Interface
Description: Hamachi Network Interface
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn, Inc.
Service: hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/10/2015 10:54:05 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/10/2015 10:54:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/08/2015 04:58:15 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Vorgang:
Für die Sicherung initialisieren
Error: (01/08/2015 04:58:15 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Vorgang:
Für die Sicherung initialisieren
Error: (01/08/2015 04:33:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/08/2015 04:33:02 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/08/2015 03:34:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/08/2015 03:33:49 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/08/2015 03:25:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/08/2015 03:24:30 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
System errors:
=============
Error: (01/10/2015 10:54:27 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (01/10/2015 10:54:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (01/10/2015 10:53:41 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\drivers\tandpl.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (01/08/2015 04:34:09 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (01/08/2015 04:33:02 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (01/08/2015 04:32:42 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\drivers\tandpl.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (01/08/2015 04:31:46 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 08.01.2015 um 15:41:15 unerwartet heruntergefahren.
Error: (01/08/2015 03:34:53 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (01/08/2015 03:33:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (01/08/2015 03:33:26 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\drivers\tandpl.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Microsoft Office Sessions:
=========================
Error: (01/10/2015 10:54:05 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/10/2015 10:54:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/08/2015 04:58:15 PM) (Source: VSS) (EventID: 8193) (User: )
Description: OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)0x8007045b, Der Computer wird heruntergefahren.
Vorgang:
Für die Sicherung initialisieren
Error: (01/08/2015 04:58:15 PM) (Source: VSS) (EventID: 8193) (User: )
Description: OpenSCManager(NULL,NULL,SC_MANAGER_CONNECT)0x8007045b, Der Computer wird heruntergefahren.
Vorgang:
Für die Sicherung initialisieren
Error: (01/08/2015 04:33:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/08/2015 04:33:02 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/08/2015 03:34:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/08/2015 03:33:49 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/08/2015 03:25:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/08/2015 03:24:30 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
CodeIntegrity Errors:
===================================
Date: 2014-12-22 15:18:34.027
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-12-22 15:18:33.903
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz
Percentage of memory in use: 44%
Total physical RAM: 3947.86 MB
Available physical RAM: 2198.36 MB
Total Pagefile: 7893.9 MB
Available Pagefile: 5687.23 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (DAVID-Acer) (Fixed) (Total:913.41 GB) (Free:253.96 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9A7C392E)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=913.4 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
10.01.2015, 11:06
| #27 |
| | Pc stürzt oft ab ! FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-01-2015
Ran by David (administrator) on DAVID-ACER on 10-01-2015 10:58:16
Running from C:\Users\David\Desktop\Desktop\#ANTI\FRST
Loaded Profiles: UpdatusUser & David (Available profiles: UpdatusUser & David & user)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Malwarebytes Corporation) C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamscheduler.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVCM.EXE
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShellHlp.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Sidebar\sidebar.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\Setup\instup.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-12] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {1fd2defc-0fd9-11e3-b382-dc0ea11d82fe} - F:\LaunchU3.exe -a
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {2812e136-d586-11e2-bdb6-dc0ea11d82fe} - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {3f0b6f0b-c1fe-11e2-8ca3-dc0ea11d82fe} - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {ae06f47d-bfea-11e2-9e09-dc0ea11d82fe} - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\...\MountPoints2: {ae06f48a-bfea-11e2-9e09-dc0ea11d82fe} - E:\AutoRun.exe
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\...\RunOnce: [Adobe Speed Launcher] => 1420883633
AppInit_DLLs: C:\PROGRA~2\KEYCRY~1\KeyCrypt64(1).dll => C:\Program Files (x86)\KeyCryptSDK\KeyCrypt64(1).dll [96104 2014-11-13] (Zemana Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\KEYCRY~1\KeyCrypt32(1).dll => C:\Program Files (x86)\KeyCryptSDK\KeyCrypt32(1).dll [87840 2014-11-13] (Zemana Ltd.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3466399659-1618858318-3356278196-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
HKU\S-1-5-21-3466399659-1618858318-3356278196-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&affID=119776&tt=gc_&babsrc=SP_ss&mntrId=8A9B64273717AA4B
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 -> {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtC0DzztB0F0E0CyD0CtDtN0D0Tzu0CyCyDyBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=1421656380&ir=
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=3054224013274139&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3466399659-1618858318-3356278196-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120914160850.dll (McAfee, Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy -> {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -> C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120914160850.dll (McAfee, Inc.)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\3cglpxv0.default-1388087379042
FF DefaultSearchUrl: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3466399659-1618858318-3356278196-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\David\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3466399659-1618858318-3356278196-1001: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Extension: Deutsch (DE) Language Pack - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\3cglpxv0.default-1388087379042\Extensions\langpack-de@firefox.mozilla.org.xpi [2013-12-26]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2011-10-14]
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: McAfee ScriptScan for Firefox - C:\Program Files (x86)\Common Files\McAfee\SystemCore [2011-10-14]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-02-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-27]
Chrome:
=======
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-30]
CHR Extension: (TooManyTabs für Chrome) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp [2014-12-30]
CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-30]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-30]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-30]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-30]
CHR Extension: (GMX MailCheck) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-12-30]
CHR Extension: (Adblock Plus) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-30]
CHR Extension: (Google-Suche) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-30]
CHR Extension: (Video Downloader professional) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-12-30]
CHR Extension: (Google Tabellen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-30]
CHR Extension: (Stylish) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2014-12-30]
CHR Extension: (Click&Clean) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod [2014-12-30]
CHR Extension: (Avast Online Security) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-30]
CHR Extension: (Audio EQ) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfafdlnjaliaghpjdajmlcnnblkgcefh [2014-12-30]
CHR Extension: (FVD Downloader) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2014-12-30]
CHR Extension: (RenameTab) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkailnbloeepkajmoblllhhhckpbbncg [2014-12-30]
CHR Extension: (MuteTab) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmkbaaijgpppbokgnhhoakihofedkgcc [2014-12-30]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-30]
CHR Extension: (Google Mail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-30]
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Präsentationen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-30]
CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-30]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-30]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-30]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-30]
CHR Extension: (Google-Suche) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-30]
CHR Extension: (Google Tabellen) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-30]
CHR Extension: (Avast Online Security) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-30]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-30]
CHR Extension: (Google Mail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-09]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S4 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-08-12] (Perfect World Entertainment Inc)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-09] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-09] (Avast Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-01-20] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
R2 MBAMScheduler; C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Users\David\Desktop\Desktop\#ANTI\mbam\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S4 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [224704 2011-03-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [502064 2012-08-23] (McAfee, Inc.)
S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
S4 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [210616 2012-05-25] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [162224 2012-05-25] (McAfee, Inc.)
S4 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.)
R2 msoidsvc; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [2079520 2012-05-17] (Microsoft Corp.)
S4 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-09-04] ()
S3 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S3 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S3 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 Spooler; C:\Windows\SysWOW64\spoolsv.exe [316416 2014-04-19] (Microsoft Corporation) [File not signed]
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [598808 2013-06-06] (Wacom Technology, Corp.)
S4 Hamachi2Svc; "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-09] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-09] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-09] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-09-22] (AVG Technologies)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [115472 2014-01-20] (BlueStack Systems)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [65264 2012-02-22] (McAfee, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-04-19] (DT Soft Ltd)
R3 keycrypt; C:\Windows\System32\DRIVERS\KeyCrypt64.sys [71400 2014-11-13] (Zemana Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-30] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [160792 2012-02-22] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [229528 2012-02-22] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [487296 2012-02-22] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [647208 2012-02-22] (McAfee, Inc.)
R1 mfenlfk; C:\Windows\System32\DRIVERS\mfenlfk.sys [75936 2012-02-22] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [289664 2012-02-22] (McAfee, Inc.)
S3 ser2at; C:\Windows\System32\DRIVERS\ser2at64.sys [96256 2009-10-15] (ATEN)
S2 tandpl; C:\Windows\SysWOW64\drivers\tandpl.sys [4736 2003-04-19] () [File not signed]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-09] (Avast Software)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115488 2014-05-16] (Oracle Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-10 10:56 - 2015-01-10 10:58 - 00000000 ____D () C:\FRST
2015-01-10 10:56 - 2015-01-10 10:56 - 00000197 _____ () C:\Windows\system32\2015-01-10-09-56-59.093-AvastVBoxSVC.exe-4744.log
2015-01-08 16:36 - 2015-01-08 16:36 - 00000197 _____ () C:\Windows\system32\2015-01-08-15-36-15.040-AvastVBoxSVC.exe-5416.log
2015-01-08 15:36 - 2015-01-08 15:36 - 00000197 _____ () C:\Windows\system32\2015-01-08-14-36-54.095-AvastVBoxSVC.exe-1532.log
2015-01-08 15:27 - 2015-01-08 15:27 - 00000197 _____ () C:\Windows\system32\2015-01-08-14-27-29.077-AvastVBoxSVC.exe-860.log
2015-01-08 14:54 - 2015-01-08 14:54 - 00000197 _____ () C:\Windows\system32\2015-01-08-13-54-57.033-AvastVBoxSVC.exe-5932.log
2015-01-08 14:20 - 2015-01-08 14:20 - 00000197 _____ () C:\Windows\system32\2015-01-08-13-20-20.073-AvastVBoxSVC.exe-2756.log
2015-01-08 12:22 - 2015-01-08 12:22 - 00000197 _____ () C:\Windows\system32\2015-01-08-11-22-29.057-AvastVBoxSVC.exe-5488.log
2015-01-08 11:50 - 2015-01-08 11:50 - 00000197 _____ () C:\Windows\system32\2015-01-08-10-50-45.091-AvastVBoxSVC.exe-6100.log
2015-01-08 11:35 - 2015-01-08 11:42 - 00003693 _____ () C:\DelFix.txt
2015-01-08 11:34 - 2015-01-08 11:34 - 00709564 _____ () C:\Users\David\Downloads\delfix_10.8.exe
2015-01-08 11:30 - 2015-01-08 11:31 - 00000197 _____ () C:\Windows\system32\2015-01-08-10-30-59.091-AvastVBoxSVC.exe-4644.log
2015-01-07 17:05 - 2015-01-07 17:05 - 00000197 _____ () C:\Windows\system32\2015-01-07-16-05-08.094-AvastVBoxSVC.exe-5176.log
2015-01-07 01:59 - 2015-01-07 01:59 - 00000197 _____ () C:\Windows\system32\2015-01-07-00-59-05.016-AvastVBoxSVC.exe-3748.log
2015-01-06 19:40 - 2015-01-06 19:40 - 00000197 _____ () C:\Windows\system32\2015-01-06-18-40-43.080-AvastVBoxSVC.exe-4792.log
2015-01-06 19:37 - 2015-01-06 19:37 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-01-06 19:08 - 2015-01-06 19:09 - 00000197 _____ () C:\Windows\system32\2015-01-06-18-08-23.063-AvastVBoxSVC.exe-5964.log
2015-01-06 18:56 - 2015-01-06 18:56 - 00638888 _____ (Oracle Corporation) C:\Users\David\Downloads\chromeinstall-8u25 (1).exe
2015-01-06 18:53 - 2015-01-06 18:53 - 00638888 _____ (Oracle Corporation) C:\Users\David\Downloads\chromeinstall-8u25.exe
2015-01-06 18:50 - 2015-01-06 18:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-06 18:39 - 2015-01-06 18:39 - 00000197 _____ () C:\Windows\system32\2015-01-06-17-39-24.033-AvastVBoxSVC.exe-5248.log
2014-12-31 11:07 - 2014-12-31 11:07 - 00000197 _____ () C:\Windows\system32\2014-12-31-10-07-30.080-AvastVBoxSVC.exe-5248.log
2014-12-31 10:31 - 2014-12-31 10:31 - 00000197 _____ () C:\Windows\system32\2014-12-31-09-31-18.031-AvastVBoxSVC.exe-5336.log
2014-12-30 14:06 - 2014-12-30 14:06 - 00000197 _____ () C:\Windows\system32\2014-12-30-13-06-58.077-AvastVBoxSVC.exe-4476.log
2014-12-30 13:58 - 2014-12-30 13:58 - 00000000 __SHD () C:\found.000
2014-12-30 13:19 - 2014-12-30 13:19 - 00000197 _____ () C:\Windows\system32\2014-12-30-12-19-15.083-AvastVBoxSVC.exe-4164.log
2014-12-30 13:12 - 2014-12-30 13:12 - 01174352 _____ () C:\Users\David\Downloads\Pencil - CHIP-Installer.exe
2014-12-30 12:58 - 2014-12-30 12:58 - 00000197 _____ () C:\Windows\system32\2014-12-30-11-58-01.042-AvastVBoxSVC.exe-5892.log
2014-12-30 12:26 - 2014-12-30 12:26 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-30 12:24 - 2014-12-30 12:24 - 00000197 _____ () C:\Windows\system32\2014-12-30-11-24-22.007-AvastVBoxSVC.exe-5324.log
2014-12-30 12:03 - 2014-12-30 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-30 11:49 - 2014-12-30 11:50 - 00000197 _____ () C:\Windows\system32\2014-12-30-10-49-44.008-AvastVBoxSVC.exe-6008.log
2014-12-29 20:01 - 2014-12-29 20:01 - 00000197 _____ () C:\Windows\system32\2014-12-29-19-01-29.075-AvastVBoxSVC.exe-3456.log
2014-12-29 15:46 - 2014-12-29 15:46 - 00000197 _____ () C:\Windows\system32\2014-12-29-14-46-42.010-AvastVBoxSVC.exe-3244.log
2014-12-29 15:45 - 2014-12-29 15:45 - 00000000 ____D () C:\Users\David\AppData\Roaming\WTablet
2014-12-29 15:15 - 2014-12-29 15:15 - 00000197 _____ () C:\Windows\system32\2014-12-29-14-15-09.025-AvastVBoxSVC.exe-4440.log
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ____D () C:\Program Files\TabletPlugins
2014-12-29 14:45 - 2014-12-29 14:45 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins
2014-12-29 14:44 - 2014-12-29 14:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf
2014-12-29 14:44 - 2014-12-29 14:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf
2014-12-29 14:44 - 2013-06-06 03:09 - 01959192 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01952536 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01820952 ____N (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01818392 ____N (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01614104 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01607448 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01493272 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll
2014-12-29 14:44 - 2013-06-06 03:09 - 01489688 ____N (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll
2014-12-29 14:44 - 2013-04-30 18:18 - 00085304 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys
2014-12-29 14:44 - 2013-04-30 18:18 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2014-12-29 14:44 - 2012-12-20 23:20 - 00015344 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys
2014-12-29 14:44 - 2012-12-11 23:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll
2014-12-29 14:43 - 2014-12-29 14:44 - 00000000 ____D () C:\Program Files\Tablet
2014-12-29 14:41 - 2014-12-29 14:41 - 00000197 _____ () C:\Windows\system32\2014-12-29-13-41-07.053-AvastVBoxSVC.exe-4776.log
2014-12-29 14:11 - 2015-01-08 11:35 - 00000000 ____D () C:\Windows\ERUNT
2014-12-29 14:09 - 2014-12-29 14:09 - 00000197 _____ () C:\Windows\system32\2014-12-29-13-09-49.047-AvastVBoxSVC.exe-1016.log
2014-12-29 13:50 - 2014-12-29 13:50 - 00000197 _____ () C:\Windows\system32\2014-12-29-12-50-13.018-AvastVBoxSVC.exe-1656.log
2014-12-29 13:35 - 2014-12-29 13:35 - 00000197 _____ () C:\Windows\system32\2014-12-29-12-35-42.037-AvastVBoxSVC.exe-3120.log
2014-12-29 12:41 - 2014-12-29 12:41 - 00000197 _____ () C:\Windows\system32\2014-12-29-11-41-35.007-AvastVBoxSVC.exe-4324.log
2014-12-29 11:54 - 2014-12-29 11:54 - 00000197 _____ () C:\Windows\system32\2014-12-29-10-54-03.088-AvastVBoxSVC.exe-4716.log
2014-12-28 10:10 - 2014-12-28 10:10 - 00000197 _____ () C:\Windows\system32\2014-12-28-09-10-45.054-AvastVBoxSVC.exe-4764.log
2014-12-28 09:39 - 2014-12-28 09:39 - 00000197 _____ () C:\Windows\system32\2014-12-28-08-39-11.090-AvastVBoxSVC.exe-5680.log
2014-12-28 09:31 - 2014-12-28 09:31 - 00000000 ____D () C:\Users\David\AppData\Local\Metrocide
2014-12-28 09:08 - 2014-12-28 09:08 - 00000197 _____ () C:\Windows\system32\2014-12-28-08-08-30.032-AvastVBoxSVC.exe-5092.log
2014-12-28 08:29 - 2014-12-28 08:34 - 490788359 _____ () C:\Users\David\Downloads\easyvdr-2.0.0-64-stable.iso.crdownload
2014-12-28 08:08 - 2014-12-28 08:09 - 00000197 _____ () C:\Windows\system32\2014-12-28-07-08-57.070-AvastVBoxSVC.exe-5976.log
2014-12-22 20:18 - 2014-12-22 20:18 - 00000197 _____ () C:\Windows\system32\2014-12-22-19-18-53.031-AvastVBoxSVC.exe-7636.log
2014-12-22 14:58 - 2014-12-22 20:38 - 00000000 ____D () C:\Windows\erdnt
2014-12-22 14:55 - 2014-12-22 14:55 - 00000197 _____ () C:\Windows\system32\2014-12-22-13-55-45.078-AvastVBoxSVC.exe-5076.log
2014-12-22 12:36 - 2014-12-22 12:37 - 00000197 _____ () C:\Windows\system32\2014-12-22-11-36-24.053-AvastVBoxSVC.exe-6216.log
2014-12-21 19:11 - 2014-12-21 19:11 - 00000197 _____ () C:\Windows\system32\2014-12-21-18-11-45.067-AvastVBoxSVC.exe-4688.log
2014-12-21 18:40 - 2014-12-21 18:40 - 00000197 _____ () C:\Windows\system32\2014-12-21-17-40-28.072-AvastVBoxSVC.exe-6036.log
2014-12-21 18:09 - 2014-12-21 18:09 - 00000197 _____ () C:\Windows\system32\2014-12-21-17-09-16.068-AvastVBoxSVC.exe-5644.log
2014-12-21 17:38 - 2014-12-21 17:38 - 00000197 _____ () C:\Windows\system32\2014-12-21-16-38-07.077-AvastVBoxSVC.exe-5464.log
2014-12-21 17:06 - 2014-12-21 17:07 - 00000197 _____ () C:\Windows\system32\2014-12-21-16-06-43.006-AvastVBoxSVC.exe-6168.log
2014-12-21 16:35 - 2014-12-21 16:35 - 00000197 _____ () C:\Windows\system32\2014-12-21-15-35-40.078-AvastVBoxSVC.exe-5000.log
2014-12-21 15:22 - 2014-12-21 15:22 - 00000197 _____ () C:\Windows\system32\2014-12-21-14-22-03.049-AvastVBoxSVC.exe-3444.log
2014-12-21 15:01 - 2014-12-21 15:01 - 00000197 _____ () C:\Windows\system32\2014-12-21-14-01-37.049-AvastVBoxSVC.exe-6128.log
2014-12-21 14:27 - 2014-12-21 14:27 - 00000197 _____ () C:\Windows\system32\2014-12-21-13-27-27.023-AvastVBoxSVC.exe-5808.log
2014-12-21 13:54 - 2014-12-21 13:54 - 00000197 _____ () C:\Windows\system32\2014-12-21-12-54-09.045-AvastVBoxSVC.exe-5824.log
2014-12-21 13:24 - 2014-12-21 13:25 - 00000197 _____ () C:\Windows\system32\2014-12-21-12-24-59.039-AvastVBoxSVC.exe-5640.log
2014-12-21 12:54 - 2014-12-21 12:54 - 00000197 _____ () C:\Windows\system32\2014-12-21-11-54-00.040-AvastVBoxSVC.exe-6224.log
2014-12-21 11:26 - 2014-12-21 11:26 - 00000197 _____ () C:\Windows\system32\2014-12-21-10-26-11.013-AvastVBoxSVC.exe-6960.log
2014-12-21 10:58 - 2014-12-21 10:58 - 00000197 _____ () C:\Windows\system32\2014-12-21-09-58-19.004-AvastVBoxSVC.exe-5368.log
2014-12-21 10:54 - 2014-12-30 12:19 - 00008206 _____ () C:\Windows\PFRO.log
2014-12-21 10:26 - 2014-12-21 10:26 - 00000197 _____ () C:\Windows\system32\2014-12-21-09-26-26.080-AvastVBoxSVC.exe-3556.log
2014-12-20 20:24 - 2014-12-20 20:24 - 00000197 _____ () C:\Windows\system32\2014-12-20-19-24-07.099-AvastVBoxSVC.exe-5396.log
2014-12-20 19:50 - 2014-12-20 19:50 - 00000197 _____ () C:\Windows\system32\2014-12-20-18-50-48.001-AvastVBoxSVC.exe-6456.log
2014-12-20 19:21 - 2014-12-20 19:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-20 19:20 - 2014-12-20 19:20 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\David\Downloads\revosetup95.exe
2014-12-20 19:18 - 2014-12-20 19:18 - 00000197 _____ () C:\Windows\system32\2014-12-20-18-18-28.061-AvastVBoxSVC.exe-6004.log
2014-12-20 19:10 - 2014-12-20 19:10 - 00000000 ____D () C:\Users\David\Downloads\RevoUninstallerPortable
2014-12-20 19:09 - 2014-12-20 19:10 - 02785665 _____ (PortableApps.com) C:\Users\David\Downloads\RevoUninstallerPortable_1.95_Rev_2.paf.exe
2014-12-20 18:44 - 2014-12-20 18:44 - 00000197 _____ () C:\Windows\system32\2014-12-20-17-44-23.011-AvastVBoxSVC.exe-3956.log
2014-12-20 18:16 - 2014-12-20 18:16 - 00000197 _____ () C:\Windows\system32\2014-12-20-17-16-44.094-AvastVBoxSVC.exe-3972.log
2014-12-18 20:17 - 2014-12-18 20:17 - 00000197 _____ () C:\Windows\system32\2014-12-18-19-17-50.072-AvastVBoxSVC.exe-6196.log
2014-12-18 19:45 - 2014-12-18 19:45 - 00000197 _____ () C:\Windows\system32\2014-12-18-18-45-20.095-AvastVBoxSVC.exe-6352.log
2014-12-18 19:14 - 2014-12-18 19:14 - 00000197 _____ () C:\Windows\system32\2014-12-18-18-14-24.042-AvastVBoxSVC.exe-5504.log
2014-12-18 18:42 - 2014-12-18 18:43 - 00000197 _____ () C:\Windows\system32\2014-12-18-17-42-32.099-AvastVBoxSVC.exe-3288.log
2014-12-18 18:09 - 2014-12-18 18:09 - 00000197 _____ () C:\Windows\system32\2014-12-18-17-09-01.002-AvastVBoxSVC.exe-5636.log
2014-12-18 17:37 - 2014-12-18 17:37 - 00000197 _____ () C:\Windows\system32\2014-12-18-16-37-39.014-AvastVBoxSVC.exe-6012.log
2014-12-18 17:01 - 2014-12-18 17:01 - 00000197 _____ () C:\Windows\system32\2014-12-18-16-01-03.056-AvastVBoxSVC.exe-3468.log
2014-12-18 02:18 - 2014-12-18 02:18 - 00000197 _____ () C:\Windows\system32\2014-12-18-01-18-44.035-AvastVBoxSVC.exe-3948.log
2014-12-17 18:54 - 2014-12-17 18:55 - 00000197 _____ () C:\Windows\system32\2014-12-17-17-54-55.026-AvastVBoxSVC.exe-5736.log
2014-12-17 17:21 - 2014-12-17 17:21 - 00000280 _____ () C:\Windows\system32\2014-12-17-16-21-20.042-aswFe.exe-4584.log
2014-12-17 17:14 - 2014-12-17 17:15 - 00000197 _____ () C:\Windows\system32\2014-12-17-16-14-40.045-AvastVBoxSVC.exe-1924.log
2014-12-17 13:37 - 2014-12-17 13:37 - 00000197 _____ () C:\Windows\system32\2014-12-17-12-37-00.066-AvastVBoxSVC.exe-3872.log
2014-12-17 08:27 - 2014-12-17 08:28 - 00000197 _____ () C:\Windows\system32\2014-12-17-07-27-59.066-AvastVBoxSVC.exe-5048.log
2014-12-17 08:22 - 2014-12-17 08:22 - 00000197 _____ () C:\Windows\system32\2014-12-17-07-22-03.011-AvastVBoxSVC.exe-3220.log
2014-12-16 20:43 - 2014-12-16 20:48 - 04437584 _____ (FreeDownloadManager.ORG ) C:\Users\David\Downloads\fdminst-lite.exe
2014-12-16 20:37 - 2014-12-16 21:01 - 1835281604 _____ () C:\Users\David\Downloads\Burnout_Paradise_The_Ultimate_Box.iso (2).crdownload
2014-12-16 20:33 - 2014-12-16 20:33 - 00000197 _____ () C:\Windows\system32\2014-12-16-19-33-25.024-AvastVBoxSVC.exe-4356.log
2014-12-16 19:59 - 2014-12-16 19:59 - 00000197 _____ () C:\Windows\system32\2014-12-16-18-59-53.015-AvastVBoxSVC.exe-3416.log
2014-12-16 19:28 - 2014-12-16 19:28 - 00000197 _____ () C:\Windows\system32\2014-12-16-18-28-29.021-AvastVBoxSVC.exe-6908.log
2014-12-16 18:55 - 2014-12-16 18:56 - 00000197 _____ () C:\Windows\system32\2014-12-16-17-55-57.084-AvastVBoxSVC.exe-7516.log
2014-12-16 18:25 - 2014-12-16 18:25 - 00000197 _____ () C:\Windows\system32\2014-12-16-17-25-06.062-AvastVBoxSVC.exe-268.log
2014-12-16 17:50 - 2014-12-16 20:08 - 00014066 ____H () C:\Users\David\Desktop\~WRL0800.tmp
2014-12-16 17:50 - 2014-12-16 19:02 - 00012257 ____H () C:\Users\David\Desktop\~WRL1323.tmp
2014-12-16 17:48 - 2014-12-16 17:58 - 878578501 _____ () C:\Users\David\Downloads\Notfall_DVD_5.0_Free.zip
2014-12-16 17:40 - 2014-12-16 17:40 - 00000197 _____ () C:\Windows\system32\2014-12-16-16-40-24.013-AvastVBoxSVC.exe-4972.log
2014-12-15 12:58 - 2014-12-15 12:58 - 00000197 _____ () C:\Windows\system32\2014-12-15-11-58-35.064-AvastVBoxSVC.exe-5068.log
2014-12-15 12:28 - 2014-12-15 12:28 - 00000197 _____ () C:\Windows\system32\2014-12-15-11-28-35.017-AvastVBoxSVC.exe-8860.log
2014-12-14 18:35 - 2014-12-14 18:36 - 00000197 _____ () C:\Windows\system32\2014-12-14-17-35-36.049-AvastVBoxSVC.exe-5092.log
2014-12-14 18:02 - 2014-12-14 18:03 - 00000197 _____ () C:\Windows\system32\2014-12-14-17-02-45.051-AvastVBoxSVC.exe-6528.log
2014-12-14 17:30 - 2014-12-14 17:30 - 00000197 _____ () C:\Windows\system32\2014-12-14-16-30-29.001-AvastVBoxSVC.exe-4244.log
2014-12-13 14:37 - 2014-12-13 14:37 - 00000197 _____ () C:\Windows\system32\2014-12-13-13-37-12.042-AvastVBoxSVC.exe-9508.log
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Users\David\AppData\Local\AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Program Files (x86)\Zemana AntiLogger Free
2014-12-13 14:17 - 2014-12-13 14:17 - 00000000 ____D () C:\Program Files (x86)\KeyCryptSDK
2014-12-13 14:17 - 2014-11-13 12:20 - 00071400 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\KeyCrypt64.sys
2014-12-13 13:58 - 2014-12-13 13:58 - 00000197 _____ () C:\Windows\system32\2014-12-13-12-58-24.096-AvastVBoxSVC.exe-8640.log
2014-12-13 13:57 - 2014-12-13 13:57 - 00130576 _____ () C:\Users\David\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-13 13:53 - 2015-01-10 10:52 - 00006242 _____ () C:\Windows\setupact.log
2014-12-13 13:53 - 2014-12-13 13:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-13 13:52 - 2014-12-13 13:54 - 05113760 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-13 13:31 - 2014-12-13 13:31 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-12-13 13:30 - 2014-12-13 14:50 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-12-13 13:30 - 2014-12-13 13:40 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-12-13 13:30 - 2014-12-13 13:30 - 00001405 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-12-13 13:30 - 2014-12-13 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-12-13 13:30 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2014-12-13 13:26 - 2014-12-20 20:23 - 00000000 ____D () C:\Users\David\AppData\Roaming\Nico Mak Computing
2014-12-13 13:19 - 2014-12-13 13:20 - 00000197 _____ () C:\Windows\system32\2014-12-13-12-19-28.053-AvastVBoxSVC.exe-4572.log
2014-12-12 21:20 - 2014-12-12 21:20 - 00000197 _____ () C:\Windows\system32\2014-12-12-20-20-52.096-AvastVBoxSVC.exe-3652.log
2014-12-12 21:16 - 2014-12-12 21:16 - 00006696 ____N () C:\bootsqm.dat
2014-12-12 20:05 - 2014-12-12 20:05 - 00000197 _____ () C:\Windows\system32\2014-12-12-19-05-46.076-AvastVBoxSVC.exe-2796.log
2014-12-12 19:31 - 2014-12-12 19:31 - 00000197 _____ () C:\Windows\system32\2014-12-12-18-31-14.040-AvastVBoxSVC.exe-5036.log
2014-12-12 19:09 - 2014-12-12 19:21 - 00000000 ____D () C:\Users\David\AppData\Roaming\Dungeonmans
2014-12-12 18:55 - 2014-12-12 18:55 - 00000197 _____ () C:\Windows\system32\2014-12-12-17-55-37.055-AvastVBoxSVC.exe-3956.log
2014-12-12 18:22 - 2014-12-12 18:22 - 00000197 _____ () C:\Windows\system32\2014-12-12-17-22-35.093-AvastVBoxSVC.exe-2480.log
2014-12-12 17:50 - 2014-12-12 17:50 - 00000197 _____ () C:\Windows\system32\2014-12-12-16-50-54.007-AvastVBoxSVC.exe-4212.log
2014-12-12 15:40 - 2014-12-12 15:41 - 00000197 _____ () C:\Windows\system32\2014-12-12-14-40-44.093-AvastVBoxSVC.exe-4440.log
2014-12-12 15:04 - 2014-12-12 15:05 - 00000197 _____ () C:\Windows\system32\2014-12-12-14-04-54.059-AvastVBoxSVC.exe-4660.log
2014-12-11 13:46 - 2014-12-11 13:46 - 00000197 _____ () C:\Windows\system32\2014-12-11-12-46-28.031-AvastVBoxSVC.exe-3728.log
2014-12-11 13:13 - 2014-12-11 13:13 - 00000197 _____ () C:\Windows\system32\2014-12-11-12-13-14.032-AvastVBoxSVC.exe-3664.log
2014-12-11 11:45 - 2014-12-11 11:45 - 00000197 _____ () C:\Windows\system32\2014-12-11-10-45-08.054-AvastVBoxSVC.exe-3568.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-10 10:59 - 2014-06-04 18:09 - 01610316 _____ () C:\Windows\WindowsUpdate.log
2015-01-10 10:55 - 2012-07-24 15:06 - 00000000 ____D () C:\ProgramData\clear.fi
2015-01-10 10:54 - 2013-09-04 16:44 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-10 10:53 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-08 16:57 - 2014-09-11 14:50 - 00000000 ___RD () C:\Users\David\Desktop\GGebra
2015-01-08 16:41 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-08 16:41 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-08 16:37 - 2014-06-10 06:39 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-01-08 16:35 - 2014-12-08 17:43 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-08 15:10 - 2013-09-04 16:44 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-08 14:52 - 2014-05-27 17:19 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-01-06 20:01 - 2011-10-14 04:48 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-06 19:58 - 2012-07-23 15:48 - 00000000 ____D () C:\Users\David\AppData\Roaming\Adobe
2015-01-06 19:57 - 2011-10-14 04:48 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-06 19:50 - 2014-10-12 19:07 - 00000000 ____D () C:\Users\David\AppData\Local\Adobe
2015-01-06 19:38 - 2014-05-03 20:34 - 00000008 __RSH () C:\Users\David\ntuser.pol
2015-01-06 19:38 - 2012-07-23 15:05 - 00000000 ____D () C:\Users\David
2015-01-06 19:26 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-01-06 19:24 - 2012-08-27 18:07 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-06 19:04 - 2012-08-27 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-06 18:59 - 2014-07-27 10:32 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-01-06 18:59 - 2014-07-27 10:31 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-01-06 18:59 - 2014-07-27 10:31 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-01-06 18:59 - 2014-07-27 10:31 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-06 18:55 - 2013-12-13 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-06 18:54 - 2013-12-13 21:27 - 00000000 ____D () C:\ProgramData\Oracle
2014-12-30 14:13 - 2014-06-17 18:49 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-30 12:12 - 2014-07-09 16:56 - 00000000 ____D () C:\Users\David\AppData\Local\CrashDumps
2014-12-30 12:03 - 2013-09-04 16:44 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-30 12:03 - 2012-08-27 17:44 - 00000000 ____D () C:\Users\David\AppData\Local\Google
2014-12-29 15:28 - 2014-11-11 12:11 - 00000000 ____D () C:\Program Files (x86)\osu!
2014-12-28 09:48 - 2013-10-29 18:07 - 00000000 ____D () C:\Users\David\AppData\Roaming\.technic
2014-12-28 09:47 - 2012-08-27 18:25 - 00000000 ____D () C:\Users\David\AppData\Roaming\.minecraft
2014-12-28 09:19 - 2014-04-05 16:28 - 00000000 ____D () C:\Users\David\Documents\My Games
2014-12-28 08:23 - 2014-09-02 14:40 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-22 20:40 - 2013-05-04 09:36 - 00000000 ____D () C:\Users\Dxtory2.0
2014-12-22 20:40 - 2013-02-21 18:58 - 00000000 ____D () C:\Users\pizza
2014-12-22 20:37 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-12-21 14:18 - 2012-08-27 18:16 - 00000000 ____D () C:\Users\David\AppData\Roaming\vlc
2014-12-20 19:38 - 2013-02-05 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-12-18 20:22 - 2014-09-01 09:34 - 00000000 ___RD () C:\Users\David\Desktop\-
2014-12-17 17:20 - 2014-06-10 06:39 - 00003856 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1402378750
2014-12-16 20:32 - 2013-02-04 18:14 - 00000000 ____D () C:\schule
2014-12-16 20:21 - 2014-09-27 15:49 - 00259072 ___SH () C:\Users\David\Desktop\Thumbs.db
2014-12-14 18:23 - 2012-09-14 14:46 - 00000000 ____D () C:\Users\David\AppData\Roaming\Skype
2014-12-14 18:04 - 2014-09-21 18:20 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-14 18:04 - 2011-10-14 04:30 - 00000000 ____D () C:\ProgramData\Skype
2014-12-13 14:22 - 2014-11-17 13:54 - 00003052 _____ () C:\Windows\System32\Tasks\{B960A761-DB7D-441F-B492-F36E2AD2345F}
2014-12-13 13:44 - 2014-04-19 19:16 - 00000000 ____D () C:\Users\David\AppData\Roaming\DAEMON Tools Pro
2014-12-13 13:44 - 2013-05-21 11:23 - 00000000 ____D () C:\Users\David\AppData\Roaming\uTorrent
2014-12-13 13:32 - 2013-09-04 16:21 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-12 15:40 - 2014-12-08 17:43 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-12 15:40 - 2014-12-08 17:43 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-12 15:40 - 2014-12-08 17:43 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-12 15:18 - 2013-09-04 17:23 - 00000000 ____D () C:\Program Files\WinRAR
2014-12-12 15:18 - 2012-08-27 18:17 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-12 15:18 - 2012-08-27 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-11 13:18 - 2012-07-27 06:46 - 00000000 ____D () C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
Files to move or delete:
====================
C:\Users\Dxtory2.0\AudioStreamSplitter.exe
C:\Users\Dxtory2.0\AVIFix.exe
C:\Users\Dxtory2.0\AVIMux.exe
C:\Users\Dxtory2.0\AVIMuxCore.dll
C:\Users\Dxtory2.0\Dxtory.exe
C:\Users\Dxtory2.0\Dxtory64.exe
C:\Users\Dxtory2.0\DxtoryAudioHelper.dll
C:\Users\Dxtory2.0\DxtoryCore.dll
C:\Users\Dxtory2.0\DxtoryCore64.dll
C:\Users\Dxtory2.0\DxtoryHK.dll
C:\Users\Dxtory2.0\DxtoryHK64.dll
C:\Users\Dxtory2.0\DxtoryMM.dll
C:\Users\Dxtory2.0\DxtoryMM64.dll
C:\Users\Dxtory2.0\DxtoryVideo.dll
C:\Users\Dxtory2.0\DxtoryVideo64.dll
C:\Users\Dxtory2.0\DxtoryVideo64_Install.bat
C:\Users\Dxtory2.0\DxtoryVideo64_Uninstall.bat
C:\Users\Dxtory2.0\DxtoryVideoSetting.exe
C:\Users\Dxtory2.0\DxtoryVideo_Install.bat
C:\Users\Dxtory2.0\DxtoryVideo_Uninstall.bat
C:\Users\Dxtory2.0\LicReg.exe
C:\Users\Dxtory2.0\RawCapConv.exe
C:\Users\Dxtory2.0\RCStream.dll
C:\Users\Dxtory2.0\unins000.dat
C:\Users\Dxtory2.0\unins000.exe
C:\Users\Dxtory2.0\UpdateChecker.exe
Some content of TEMP:
====================
C:\Users\David\AppData\Local\Temp\i4jdel0.exe
C:\Users\David\AppData\Local\Temp\Quarantine.exe
C:\Users\David\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-07 18:57
==================== End Of Log ============================
|
|
10.01.2015, 13:10
| #28 |
| /// the machine /// TB-Ausbilder | Pc stürzt oft ab ! Schau mal im Taskmanager was die CPU Last macht wenn er hängen bleibt. Ebenso bitte das mal abarbeiten: Rechner Temperaturen prüfen und auslesen - so geht's - Anleitungen Zustand der Festplatte herausfinden - so gehts - Anleitungen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.01.2015, 09:58
| #29 |
| | Pc stürzt oft ab ! Festplatte: Code:
ATTFilter ----------------------------------------------------------------------------
CrystalDiskInfo 6.3.0 (C) 2008-2015 hiyohiyo
Crystal Dew World : hxxp://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 7 Home Premium SP1 [6.1 Build 7601] (x64)
Date : 2015/01/11 9:34:04
-- Controller Map ----------------------------------------------------------
+ Intel(R) Mobile Express Chipset SATA AHCI Controller [ATA]
- TOSHIBA MK1059GSMP
- MATSHITA DVD-RAM UJ8B0AW
+ MagicISO SCSI Host Controller [SCSI]
- MagicISO Virtual DVD-ROM0000
- Broadcom Memory Stick [SCSI]
-- Disk List ---------------------------------------------------------------
(1) TOSHIBA MK1059GSMP : 1000,2 GB [0/0/0, pd1]
----------------------------------------------------------------------------
(1) TOSHIBA MK1059GSMP
----------------------------------------------------------------------------
Model : TOSHIBA MK1059GSMP
Firmware : GU001J
Serial Number : Y1GHT1ZMT
Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300 | SATA/300
Power On Hours : 1289 Std.
Power On Count : 957 mal
Temperature : 29 C (84 F)
Health Status : Gut
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0080h [ON]
AAM Level : ----
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _50 000000000000 Lesefehlerrate
02 100 100 _50 000000000000 Datendurchsatz-Leistung
03 100 100 __1 000000000C35 Mittl. Anlaufzeit
04 100 100 __0 00000000045B Start/Stopp-Zyklen d. Spindel
05 100 100 _50 000000000000 Anz. wiederzugewiesener Sektoren
07 100 100 _50 000000000000 Anz. Suchfehler
08 100 100 _50 000000000000 Güte der Suchoperationen
09 _97 _97 __0 000000000509 Betriebsstunden
0A 122 100 _30 000000000000 Anz. misslungener Spindelanläufe
0C 100 100 __0 0000000003BD Anz. Geräte-Einschaltvorgänge
BF 100 100 __0 000000001102 G-Sensor-Fehlerrate
C0 100 100 __0 0000000000A0 Ausschaltungsabbrüche
C1 100 100 __0 000000000C82 Laden/Entladen-Zyklen
C2 100 100 __0 00320009001D Temperatur
C4 100 100 __0 000000000000 Wiederzuweisungsereignisse
C5 100 100 __0 000000000000 Aktuell schwebende Sektoren
C6 100 100 __0 000000000000 Nicht korrigierbare Sektoren
C7 200 200 __0 000000000000 UltraDMA-CRC-Fehler
DC 100 100 __0 000000004020 Festplattenverschiebung
DE _98 _98 __0 00000000048A Stunden geladen
DF 100 100 __0 000000000000 Laden/Entladen-Wiederholungen
E0 100 100 __0 000000000000 Ladereibung
E2 100 100 __0 000000000141 Ladezeit
F0 100 100 __1 000000000000 Kopfpositionierungszeit
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2059 3147 4854 315A 4D54
020: 0000 4000 0000 4755 3030 314A 2020 544F 5348 4942
030: 4120 4D4B 3130 3539 4753 4D50 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0007 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0F06 0004 004C 004C
080: 01F8 0000 746B 7D09 6163 7469 BC09 6163 203F 0085
090: 0085 0080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 0000 5000 0393
110: A180 5533 0000 0000 0000 0000 0000 0000 0000 4018
120: 4018 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 06A5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0B 00 64 64 00 00 00 00 00 00 00 02 05
010: 00 64 64 00 00 00 00 00 00 00 03 27 00 64 64 35
020: 0C 00 00 00 00 00 04 32 00 64 64 5B 04 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 0B
040: 00 64 64 00 00 00 00 00 00 00 08 05 00 64 64 00
050: 00 00 00 00 00 00 09 32 00 61 61 09 05 00 00 00
060: 00 00 0A 33 00 7A 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 BD 03 00 00 00 00 00 BF 32 00 64 64 02
080: 11 00 00 00 00 00 C0 32 00 64 64 A0 00 00 00 00
090: 00 00 C1 32 00 64 64 82 0C 00 00 00 00 00 C2 22
0A0: 00 64 64 1D 00 09 00 32 00 00 C4 32 00 64 64 00
0B0: 00 00 00 00 00 00 C5 32 00 64 64 00 00 00 00 00
0C0: 00 00 C6 30 00 64 64 00 00 00 00 00 00 00 C7 32
0D0: 00 C8 C8 00 00 00 00 00 00 00 DC 02 00 64 64 20
0E0: 40 00 00 00 00 00 DE 32 00 62 62 8A 04 00 00 00
0F0: 00 00 DF 32 00 64 64 00 00 00 00 00 00 00 E0 22
100: 00 64 64 00 00 00 00 00 00 00 E2 26 00 64 64 41
110: 01 00 00 00 00 00 F0 01 00 64 64 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 5B
170: 03 00 01 00 02 FF 00 1B 01 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 00 00 00 00 00 00 00 00 00 02 32
010: 00 00 00 00 00 00 00 00 00 00 03 01 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 32 00 00 00 00 00 00 00 00 00 00 07 32
040: 00 00 00 00 00 00 00 00 00 00 08 32 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 1E 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
080: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
090: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C4 00 00 00 00 00
0B0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0C0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
0D0: 00 00 00 00 00 00 00 00 00 00 DC 00 00 00 00 00
0E0: 00 00 00 00 00 00 DE 00 00 00 00 00 00 00 00 00
0F0: 00 00 DF 00 00 00 00 00 00 00 00 00 00 00 E0 00
100: 00 00 00 00 00 00 00 00 00 00 E2 00 00 00 00 00
110: 00 00 00 00 00 00 F0 01 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36
CPU Core #1 Value: ~43-48°C Max:58°C CPU Core #2 Value: ~43-46°C Max:56°C CPU Package Value: ~43-48°C Max:58°C GPU Core Value:~46-47°C Max:47°C Bei der Temperatur von der Festplatte(TOSHIBA MK1059GSMP) Value:~32°C Max:32°C Ziemlich nah an den Max-Werten... Nach dem Start ist die CPU Auslastung bei ca. 70-90% , dann bei 0-10%(geht selten kurz hoch auf 20%) und für die Auslastung beim Einfrieren muss ich noch mal abwarten (schreibe ich dann per Handy)... und mir fällt gerade auf, dass die CPU Last beim Start von Programmen auf bis zu 90% hoch gehen kann... (Das Lesen von der CPU Last mache ich übrigens mit der Miniaturanwendung "CPU Nutzung"(Standardmäßig bei Win 7 dabei)) Die Miniaturanwendung ist beim Absturz bei 6% hängen geblieben... Ich versuche es mal mit dem TaskManager... |
|
11.01.2015, 10:00
| #30 |
| /// the machine /// TB-Ausbilder | Pc stürzt oft ab ! Ja mach das mal. Die Temps sind schon mal nicht so schön.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Linear-Darstellung
