Windows 8: möglicher Schädlingsbefall

	
Code: 

Alles auswählenAufklappen 
ATTFilter

  
	
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-12-2014 01
Ran by fabia_000 (administrator) on FABIAN-PC on 22-12-2014 17:37:51
Running from C:\Users\fabia_000\Desktop
Loaded Profile: fabia_000 (Available profiles: fabia_000)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneNss.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17499_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
() C:\Program Files (x86)\Opera\26.0.1656.60\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.60\opera.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-06-29] (IDT, Inc.)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491320 2012-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-07-17] (cyberlink)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\runner_avp.exe [24504 2012-10-25] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-12-16] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Run: [Spotify Web Helper] => C:\Users\fabia_000\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-10-25] (Spotify Ltd)
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Run: [Akamai NetSession Interface] => C:\Users\fabia_000\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Run: [Spotify] => C:\Users\fabia_000\AppData\Roaming\Spotify\spotify.exe [6553144 2014-10-25] (Spotify Ltd)
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Run: [Google Update] => C:\Users\fabia_000\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-04-06] (Google Inc.)
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2014-05-15] (Raptr, Inc)
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
Startup: C:\Users\fabia_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (No File)
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL No File
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL No File
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT13/4
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT13/4
SearchScopes: HKLM -> {470BE3E6-2099-4F7E-84F1-F3DA4739DF9A} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2421751392-2424621156-167442884-1001 -> DefaultScope {40DE32B4-29A8-4A2E-9F5D-49938D13C0F0} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=501549&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2421751392-2424621156-167442884-1001 -> {40DE32B4-29A8-4A2E-9F5D-49938D13C0F0} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=501549&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2421751392-2424621156-167442884-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll No File
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL No File
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2421751392-2424621156-167442884-1001: @citrixonline.com/appdetectorplugin -> C:\Users\fabia_000\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKU\S-1-5-21-2421751392-2424621156-167442884-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\fabia_000\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-2421751392-2424621156-167442884-1001: @talk.google.com/O1DPlugin -> C:\Users\fabia_000\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-2421751392-2424621156-167442884-1001: @tools.google.com/Google Update;version=3 -> C:\Users\fabia_000\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2421751392-2424621156-167442884-1001: @tools.google.com/Google Update;version=9 -> C:\Users\fabia_000\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\fabia_000\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\fabia_000\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013-01-11]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013-01-11]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013-01-11]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013-01-11]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013-01-11]
FF HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-02-13]

Chrome: 
=======
CHR Profile: C:\Users\fabia_000\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Kaspersky Protection) - C:\Users\fabia_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2014-05-31]
CHR Extension: (Google Wallet) - C:\Users\fabia_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-31]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2012-10-25]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [244752 2012-07-16] (CyberLink)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-03-09] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-13] (Advanced Micro Devices, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 ElgatoGC658Y; C:\Windows\System32\Drivers\ElgatoGC658.sys [50288 2012-11-12] (UB658)
S3 iscFlash; C:\swsetup\sp62218\iscflashx64.sys [69216 2013-07-06] (Insyde Software)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-12-11] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [627296 2014-05-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-12-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-10] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [50448 2013-04-23] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178448 2013-04-23] (Kaspersky Lab ZAO)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-24] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-12-13] ()
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-22 17:37 - 2014-12-22 17:38 - 00023744 _____ () C:\Users\fabia_000\Desktop\FRST.txt
2014-12-22 17:36 - 2014-12-22 17:36 - 00000480 _____ () C:\Users\fabia_000\Desktop\defogger_disable.log
2014-12-22 17:36 - 2014-12-22 17:36 - 00000000 _____ () C:\Users\fabia_000\defogger_reenable
2014-12-22 17:35 - 2014-12-22 17:34 - 00050477 _____ () C:\Users\fabia_000\Desktop\Defogger (1).exe
2014-12-22 17:34 - 2014-12-22 17:34 - 00050477 _____ () C:\Users\fabia_000\Downloads\Defogger.exe
2014-12-22 17:34 - 2014-12-22 17:34 - 00050477 _____ () C:\Users\fabia_000\Downloads\Defogger (1).exe
2014-12-22 17:16 - 2014-12-22 15:50 - 02122240 _____ (Farbar) C:\Users\fabia_000\Desktop\FRST64.exe
2014-12-22 17:10 - 2014-12-22 17:37 - 00000000 ____D () C:\FRST
2014-12-19 14:57 - 2014-12-19 18:04 - 00035558 _____ () C:\Users\fabia_000\Desktop\Google Nutzungsbedingungen.odt
2014-12-14 23:45 - 2014-12-14 23:45 - 00000324 _____ () C:\Users\fabia_000\Downloads\BK_ACX0_019813DE_LC_64_22050_ster_A2UO2MTAIZHLHK.adh
2014-12-14 15:04 - 2014-12-15 00:42 - 00000000 ____D () C:\Users\fabia_000\.gimp-2.8
2014-12-14 15:04 - 2014-12-14 15:04 - 00000000 ____D () C:\Users\fabia_000\AppData\Local\gegl-0.2
2014-12-14 15:03 - 2014-12-14 15:03 - 00000910 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-12-14 15:01 - 2014-12-14 15:03 - 00000000 ____D () C:\Program Files\GIMP 2
2014-12-14 14:54 - 2014-12-14 14:55 - 91670064 _____ (The GIMP Team ) C:\Users\fabia_000\Downloads\gimp-2.8.14-setup.exe
2014-12-14 12:01 - 2014-12-14 12:03 - 00019392 _____ () C:\Users\fabia_000\Desktop\Hollywood.vf
2014-12-14 12:01 - 2014-12-14 12:01 - 00019392 _____ () C:\Users\fabia_000\Desktop\Hollywood.vf.bak
2014-12-13 10:11 - 2014-12-13 10:11 - 00001280 _____ () C:\Users\fabia_000\Desktop\Revo Uninstaller.lnk
2014-12-13 10:11 - 2014-12-13 10:11 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-13 09:57 - 2014-12-13 09:59 - 00000000 ____D () C:\AdwCleaner
2014-12-13 09:32 - 2014-12-13 09:32 - 00006407 _____ () C:\Users\fabia_000\Desktop\JRT.txt
2014-12-13 09:28 - 2014-12-13 09:28 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-12-13 09:27 - 2014-12-13 09:27 - 01707646 _____ (Thisisu) C:\Users\fabia_000\Desktop\JRT64.exe
2014-12-12 18:45 - 2014-12-22 17:22 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-12-12 18:43 - 2014-12-12 18:43 - 04909382 _____ () C:\Users\fabia_000\Desktop\mbam-chameleon-3.1.7.0.zip
2014-12-12 18:42 - 2014-12-12 18:45 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-12-12 18:42 - 2014-12-12 18:42 - 00001114 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-12 18:42 - 2014-12-12 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-12 18:42 - 2014-12-12 18:42 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-12 18:42 - 2014-12-12 18:42 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-12-12 18:42 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-12-12 18:42 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-12-12 18:20 - 2014-12-15 00:42 - 00000000 ____D () C:\Users\fabia_000\AppData\Local\Audible
2014-12-12 18:08 - 2014-12-12 18:08 - 00255352 _____ (Audible, Inc.) C:\WINDOWS\SysWOW64\awrdscdc.ax
2014-12-12 18:08 - 2014-12-12 18:08 - 00001981 _____ () C:\Users\fabia_000\Desktop\Audible Manager.lnk
2014-12-12 18:08 - 2014-12-12 18:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudibleManager
2014-12-12 18:07 - 2014-12-12 18:08 - 00000000 ____D () C:\Users\fabia_000\Documents\Audible
2014-12-12 18:07 - 2014-12-12 18:08 - 00000000 ____D () C:\Program Files (x86)\Audible
2014-12-12 18:07 - 2014-12-12 18:07 - 00000000 ____D () C:\Users\Public\Documents\Audible
2014-12-12 18:07 - 2003-03-18 21:20 - 01060864 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2014-12-12 18:06 - 2014-12-12 18:07 - 01730272 _____ (Audible Inc.) C:\Users\fabia_000\Downloads\ActiveSetupN (1).exe
2014-12-12 18:05 - 2014-12-12 18:06 - 01730272 _____ (Audible Inc.) C:\Users\fabia_000\Downloads\ActiveSetupN.exe
2014-12-10 22:47 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-10 22:47 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-10 22:46 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-10 22:46 - 2014-10-13 03:43 - 00238912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-12-10 22:46 - 2014-10-13 03:43 - 00153920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-12-10 22:46 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-12-10 22:46 - 2014-10-13 03:43 - 00039744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-12-10 22:45 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-12-10 22:45 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-10 22:45 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-12-10 22:45 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-12-10 22:45 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-10 22:45 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-10 22:45 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-10 22:45 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-10 22:45 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-12-10 22:45 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-12-10 22:45 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-12-10 22:45 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-10 22:45 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-12-10 22:45 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-10 22:45 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-12-10 22:45 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-10 22:45 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-12-10 22:45 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-10 22:45 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-10 22:45 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-10 22:45 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-10 22:45 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-10 22:45 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-10 22:45 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-12-10 22:45 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-10 22:45 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-10 22:45 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-12-10 22:45 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-10 22:45 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-12-10 22:45 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-10 22:45 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-10 22:45 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-10 22:45 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-10 22:45 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-10 22:45 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-12-10 22:45 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-10 22:45 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-10 22:45 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-12-10 22:40 - 2014-12-10 22:41 - 00331704 _____ () C:\Users\fabia_000\Desktop\winfo.sfk
2014-12-10 22:40 - 2014-12-10 22:40 - 42449964 _____ () C:\Users\fabia_000\Desktop\winfo.wav
2014-12-10 17:57 - 2014-12-10 17:57 - 00000000 __SHD () C:\Users\fabia_000\AppData\Local\EmieBrowserModeList
2014-12-10 17:53 - 2014-12-10 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-10 17:53 - 2014-09-26 18:42 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-12-10 17:53 - 2014-09-26 18:36 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-12-10 17:53 - 2014-09-26 18:36 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-12-10 17:53 - 2014-09-26 18:35 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-12-10 17:51 - 2014-12-10 17:53 - 00004397 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_71-b14.log
2014-12-08 16:04 - 2014-12-08 16:04 - 00000053 _____ () C:\Users\fabia_000\Downloads\google9d89aed2450f815c.html
2014-12-08 16:04 - 2014-12-08 16:04 - 00000053 _____ () C:\Users\fabia_000\Downloads\google9d89aed2450f815c (1).html
2014-11-28 19:06 - 2014-11-28 19:06 - 00808640 _____ () C:\Users\fabia_000\Downloads\penis (1).sfk
2014-11-28 19:02 - 2014-11-28 19:03 - 103497772 _____ () C:\Users\fabia_000\Downloads\penis (1).wav
2014-11-28 18:47 - 2014-12-05 16:50 - 00023840 _____ () C:\Users\fabia_000\Desktop\dual mit zockerritze vegas.vf
2014-11-28 18:40 - 2014-11-28 18:50 - 00808640 _____ () C:\Users\fabia_000\Downloads\penis.sfk
2014-11-28 17:37 - 2014-11-28 17:42 - 52256172 _____ () C:\Users\fabia_000\Downloads\penis.wav
2014-11-28 17:25 - 2014-11-28 17:25 - 00000000 ____D () C:\Users\fabia_000\Desktop\Dual mit Zockerritze_data
2014-11-28 15:45 - 2014-11-28 17:50 - 00000000 ____D () C:\Users\fabia_000\AppData\Roaming\TS3Client
2014-11-28 15:43 - 2014-11-28 15:43 - 00001174 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-11-28 15:43 - 2014-11-28 15:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-11-28 15:43 - 2014-11-28 15:43 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client
2014-11-28 15:41 - 2014-11-28 15:41 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\fabia_000\Downloads\TeamSpeak3-Client-win32-3.0.16.exe
2014-11-28 15:41 - 2014-11-28 15:41 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\fabia_000\Downloads\TeamSpeak3-Client-win32-3.0.16 (1).exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-22 17:36 - 2014-03-09 12:03 - 00000000 ____D () C:\Users\fabia_000
2014-12-22 17:27 - 2013-01-11 23:32 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-12-22 17:21 - 2014-11-03 21:05 - 00000606 _____ () C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2421751392-2424621156-167442884-1001.job
2014-12-22 17:12 - 2013-11-14 08:27 - 01980998 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-22 17:12 - 2013-11-14 08:11 - 00842568 _____ () C:\WINDOWS\system32\perfh007.dat
2014-12-22 17:12 - 2013-11-14 08:11 - 00191764 _____ () C:\WINDOWS\system32\perfc007.dat
2014-12-22 17:09 - 2013-07-14 10:17 - 00001138 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-22 17:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-22 16:48 - 2013-02-05 21:02 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-12-22 16:46 - 2014-04-06 20:20 - 00001156 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2421751392-2424621156-167442884-1001UA.job
2014-12-22 16:10 - 2014-03-09 11:59 - 01473185 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-22 15:09 - 2013-07-14 10:17 - 00001134 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-22 11:12 - 2014-03-09 13:31 - 00000000 ___DO () C:\Users\fabia_000\SkyDrive
2014-12-22 06:57 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-20 18:21 - 2013-10-22 16:33 - 00000000 ____D () C:\Users\fabia_000\Documents\Vegas Movie Studio HD Platinum 11.0 Projekte
2014-12-20 18:04 - 2013-08-05 20:55 - 01323520 ___SH () C:\Users\fabia_000\Downloads\Thumbs.db
2014-12-20 15:08 - 2014-01-30 16:07 - 00003190 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForfabia_000
2014-12-20 15:08 - 2014-01-30 16:07 - 00000368 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForfabia_000.job
2014-12-20 15:07 - 2013-01-26 18:00 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2014-12-20 15:06 - 2013-01-26 18:00 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-12-20 09:00 - 2013-02-13 15:56 - 00427520 ___SH () C:\Users\fabia_000\Desktop\Thumbs.db
2014-12-19 23:24 - 2013-07-31 21:59 - 00000000 ____D () C:\Users\fabia_000\AppData\Roaming\Skype
2014-12-19 06:51 - 2013-01-06 00:30 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2421751392-2424621156-167442884-1001
2014-12-18 16:33 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-12-17 16:09 - 2014-06-07 20:20 - 00003854 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1373039394
2014-12-17 16:09 - 2013-07-05 16:49 - 00001057 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-12-17 16:09 - 2013-02-05 12:01 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-12-15 08:39 - 2014-11-03 21:05 - 00003616 _____ () C:\WINDOWS\System32\Tasks\G2MUpdateTask-S-1-5-21-2421751392-2424621156-167442884-1001
2014-12-15 08:29 - 2013-01-12 08:44 - 00000000 ____D () C:\Users\fabia_000\AppData\Roaming\Spotify
2014-12-15 08:16 - 2013-01-12 08:45 - 00000000 ____D () C:\Users\fabia_000\AppData\Local\Spotify
2014-12-14 10:34 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-14 10:34 - 2013-08-22 14:25 - 01048576 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-14 00:46 - 2014-04-06 20:20 - 00001104 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2421751392-2424621156-167442884-1001Core.job
2014-12-13 17:57 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-13 10:24 - 2013-11-13 23:18 - 00423464 _____ () C:\WINDOWS\PFRO.log
2014-12-13 10:10 - 2014-04-12 19:22 - 00002195 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-13 09:18 - 2014-06-17 09:07 - 00016152 _____ () C:\WINDOWS\system32\Drivers\SWDUMon.sys
2014-12-12 22:10 - 2012-10-11 05:36 - 00000000 ____D () C:\WINDOWS\Hewlett-Packard
2014-12-11 17:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-12-11 07:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-11 06:25 - 2013-10-15 15:51 - 00000000 ____D () C:\Users\fabia_000\AppData\Roaming\Audacity
2014-12-10 23:11 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-12-10 23:11 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-12-10 23:11 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-10 21:14 - 2014-06-07 20:28 - 00000000 ____D () C:\ProgramData\Oracle
2014-12-10 17:53 - 2014-06-07 20:22 - 00000000 ____D () C:\Program Files (x86)\Java
2014-12-09 20:50 - 2013-02-05 21:02 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-12-05 21:09 - 2014-09-04 16:13 - 00038912 ___SH () C:\Users\fabia_000\Documents\Thumbs.db
2014-11-26 22:10 - 2014-05-14 20:02 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-26 22:10 - 2014-05-14 20:02 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\fabia_000\AppData\Local\Temp\-8vstwrd.dll
C:\Users\fabia_000\AppData\Local\Temp\-ehjdkkg.dll
C:\Users\fabia_000\AppData\Local\Temp\-funalat.dll
C:\Users\fabia_000\AppData\Local\Temp\-y2ok7a4.dll
C:\Users\fabia_000\AppData\Local\Temp\0ngvfycl.dll
C:\Users\fabia_000\AppData\Local\Temp\0sjpd5uh.dll
C:\Users\fabia_000\AppData\Local\Temp\0wtcazdd.dll
C:\Users\fabia_000\AppData\Local\Temp\0zwnlkao.dll
C:\Users\fabia_000\AppData\Local\Temp\1auv3jpl.dll
C:\Users\fabia_000\AppData\Local\Temp\1bvqllk1.dll
C:\Users\fabia_000\AppData\Local\Temp\1cgqdnbr.dll
C:\Users\fabia_000\AppData\Local\Temp\1e2piu3l.dll
C:\Users\fabia_000\AppData\Local\Temp\1egxkzbv.dll
C:\Users\fabia_000\AppData\Local\Temp\1fbq6d0m.dll
C:\Users\fabia_000\AppData\Local\Temp\1jctjzcs.dll
C:\Users\fabia_000\AppData\Local\Temp\1jyg9nhm.dll
C:\Users\fabia_000\AppData\Local\Temp\1uciq0m1.dll
C:\Users\fabia_000\AppData\Local\Temp\1yruudcb.dll
C:\Users\fabia_000\AppData\Local\Temp\1zd8lwt_.dll
C:\Users\fabia_000\AppData\Local\Temp\1zmwmonr.dll
C:\Users\fabia_000\AppData\Local\Temp\24upsmt1.dll
C:\Users\fabia_000\AppData\Local\Temp\2fpiqiie.dll
C:\Users\fabia_000\AppData\Local\Temp\2iudpwa4.dll
C:\Users\fabia_000\AppData\Local\Temp\3acpq6cp.dll
C:\Users\fabia_000\AppData\Local\Temp\44xzjafa.dll
C:\Users\fabia_000\AppData\Local\Temp\48av6ks8.dll
C:\Users\fabia_000\AppData\Local\Temp\4cqg3ohv.dll
C:\Users\fabia_000\AppData\Local\Temp\4gdxaqyv.dll
C:\Users\fabia_000\AppData\Local\Temp\4njaoy_1.dll
C:\Users\fabia_000\AppData\Local\Temp\4ojikpkb.dll
C:\Users\fabia_000\AppData\Local\Temp\5jz3ppnm.dll
C:\Users\fabia_000\AppData\Local\Temp\5kkwfrlx.dll
C:\Users\fabia_000\AppData\Local\Temp\5q6vk02g.dll
C:\Users\fabia_000\AppData\Local\Temp\5zjambso.dll
C:\Users\fabia_000\AppData\Local\Temp\6-lojkmd.dll
C:\Users\fabia_000\AppData\Local\Temp\6hi1rung.dll
C:\Users\fabia_000\AppData\Local\Temp\6hl3u4h9.dll
C:\Users\fabia_000\AppData\Local\Temp\6juhg08k.dll
C:\Users\fabia_000\AppData\Local\Temp\6yykgtro.dll
C:\Users\fabia_000\AppData\Local\Temp\7ejvtqsb.dll
C:\Users\fabia_000\AppData\Local\Temp\7rqpwwt6.dll
C:\Users\fabia_000\AppData\Local\Temp\7tm3y3on.dll
C:\Users\fabia_000\AppData\Local\Temp\7yoocnog.dll
C:\Users\fabia_000\AppData\Local\Temp\87yh-a-l.dll
C:\Users\fabia_000\AppData\Local\Temp\88fjj8ob.dll
C:\Users\fabia_000\AppData\Local\Temp\8fsyocdy.dll
C:\Users\fabia_000\AppData\Local\Temp\8pdqkvww.dll
C:\Users\fabia_000\AppData\Local\Temp\8qdaz2yc.dll
C:\Users\fabia_000\AppData\Local\Temp\8scr5pws.dll
C:\Users\fabia_000\AppData\Local\Temp\8xyjiyk-.dll
C:\Users\fabia_000\AppData\Local\Temp\92drxdch.dll
C:\Users\fabia_000\AppData\Local\Temp\9lmxwybj.dll
C:\Users\fabia_000\AppData\Local\Temp\9t0dhmjx.dll
C:\Users\fabia_000\AppData\Local\Temp\9zdkrmn8.dll
C:\Users\fabia_000\AppData\Local\Temp\a03o5057.dll
C:\Users\fabia_000\AppData\Local\Temp\a0vcg_jo.dll
C:\Users\fabia_000\AppData\Local\Temp\a5hd7s_a.dll
C:\Users\fabia_000\AppData\Local\Temp\a6zl08zt.dll
C:\Users\fabia_000\AppData\Local\Temp\acd5hqoo.dll
C:\Users\fabia_000\AppData\Local\Temp\ad3s6b1p.dll
C:\Users\fabia_000\AppData\Local\Temp\adr9mh9m.dll
C:\Users\fabia_000\AppData\Local\Temp\afrfewnn.dll
C:\Users\fabia_000\AppData\Local\Temp\aipwvfiq.dll
C:\Users\fabia_000\AppData\Local\Temp\ajiebccc.dll
C:\Users\fabia_000\AppData\Local\Temp\APNSetup.exe
C:\Users\fabia_000\AppData\Local\Temp\auffjfqt.dll
C:\Users\fabia_000\AppData\Local\Temp\aukv5q6s.dll
C:\Users\fabia_000\AppData\Local\Temp\aw0o0vy3.dll
C:\Users\fabia_000\AppData\Local\Temp\awvjpk67.dll
C:\Users\fabia_000\AppData\Local\Temp\azo3927q.dll
C:\Users\fabia_000\AppData\Local\Temp\b5-e4his.dll
C:\Users\fabia_000\AppData\Local\Temp\b7hzjrcm.dll
C:\Users\fabia_000\AppData\Local\Temp\bftmz-dm.dll
C:\Users\fabia_000\AppData\Local\Temp\bhvi30xv.dll
C:\Users\fabia_000\AppData\Local\Temp\bk_fthfa.dll
C:\Users\fabia_000\AppData\Local\Temp\bltsosvi.dll
C:\Users\fabia_000\AppData\Local\Temp\bsdfu1bt.dll
C:\Users\fabia_000\AppData\Local\Temp\bupsqhzf.dll
C:\Users\fabia_000\AppData\Local\Temp\b_hslozu.dll
C:\Users\fabia_000\AppData\Local\Temp\c7kksnxh.dll
C:\Users\fabia_000\AppData\Local\Temp\c9uahik-.dll
C:\Users\fabia_000\AppData\Local\Temp\caxbw0cf.dll
C:\Users\fabia_000\AppData\Local\Temp\cbmvsxjd.dll
C:\Users\fabia_000\AppData\Local\Temp\cc3ld6wy.dll
C:\Users\fabia_000\AppData\Local\Temp\chhtwynt.dll
C:\Users\fabia_000\AppData\Local\Temp\chpfexfj.dll
C:\Users\fabia_000\AppData\Local\Temp\cjyqft5j.dll
C:\Users\fabia_000\AppData\Local\Temp\clj1im43.dll
C:\Users\fabia_000\AppData\Local\Temp\cpssfef0.dll
C:\Users\fabia_000\AppData\Local\Temp\da4iyclu.dll
C:\Users\fabia_000\AppData\Local\Temp\dhak1jzp.dll
C:\Users\fabia_000\AppData\Local\Temp\diitqtz5.dll
C:\Users\fabia_000\AppData\Local\Temp\dmv6svae.dll
C:\Users\fabia_000\AppData\Local\Temp\do901ucp.dll
C:\Users\fabia_000\AppData\Local\Temp\dqojvc0r.dll
C:\Users\fabia_000\AppData\Local\Temp\drahpdu7.dll
C:\Users\fabia_000\AppData\Local\Temp\dt_qtzhk.dll
C:\Users\fabia_000\AppData\Local\Temp\e-6ennhj.dll
C:\Users\fabia_000\AppData\Local\Temp\ecknoude.dll
C:\Users\fabia_000\AppData\Local\Temp\eclmk9sz.dll
C:\Users\fabia_000\AppData\Local\Temp\ehrwyy8b.dll
C:\Users\fabia_000\AppData\Local\Temp\ekkbr5go.dll
C:\Users\fabia_000\AppData\Local\Temp\elfiwzwc.dll
C:\Users\fabia_000\AppData\Local\Temp\em89ekik.dll
C:\Users\fabia_000\AppData\Local\Temp\en0sg5xr.dll
C:\Users\fabia_000\AppData\Local\Temp\enbsnais.dll
C:\Users\fabia_000\AppData\Local\Temp\enunzhns.dll
C:\Users\fabia_000\AppData\Local\Temp\eugjfv1n.dll
C:\Users\fabia_000\AppData\Local\Temp\evfgde8a.dll
C:\Users\fabia_000\AppData\Local\Temp\ex1dsaga.dll
C:\Users\fabia_000\AppData\Local\Temp\Extract.exe
C:\Users\fabia_000\AppData\Local\Temp\e_yzi9re.dll
C:\Users\fabia_000\AppData\Local\Temp\f58e2zi8.dll
C:\Users\fabia_000\AppData\Local\Temp\fahqwjmz.dll
C:\Users\fabia_000\AppData\Local\Temp\fffcxi6p.dll
C:\Users\fabia_000\AppData\Local\Temp\fiqiih1n.dll
C:\Users\fabia_000\AppData\Local\Temp\fsqawjq0.dll
C:\Users\fabia_000\AppData\Local\Temp\fvhy__ao.dll
C:\Users\fabia_000\AppData\Local\Temp\g0wbzpgt.dll
C:\Users\fabia_000\AppData\Local\Temp\gceue8pf.dll
C:\Users\fabia_000\AppData\Local\Temp\ghhgpsuy.dll
C:\Users\fabia_000\AppData\Local\Temp\gkavvxvv.dll
C:\Users\fabia_000\AppData\Local\Temp\gkwpddhm.dll
C:\Users\fabia_000\AppData\Local\Temp\glhidaye.dll
C:\Users\fabia_000\AppData\Local\Temp\gqgsl3ls.dll
C:\Users\fabia_000\AppData\Local\Temp\gsvbzs3m.dll
C:\Users\fabia_000\AppData\Local\Temp\gu3k0yep.dll
C:\Users\fabia_000\AppData\Local\Temp\guo69rld.dll
C:\Users\fabia_000\AppData\Local\Temp\hekzxejp.dll
C:\Users\fabia_000\AppData\Local\Temp\hfcaanqe.dll
C:\Users\fabia_000\AppData\Local\Temp\hjpbp4oh.dll
C:\Users\fabia_000\AppData\Local\Temp\hnk-_xjh.dll
C:\Users\fabia_000\AppData\Local\Temp\hopw_9ve.dll
C:\Users\fabia_000\AppData\Local\Temp\hwria2gk.dll
C:\Users\fabia_000\AppData\Local\Temp\i7xol8gh.dll
C:\Users\fabia_000\AppData\Local\Temp\ichz3lhw.dll
C:\Users\fabia_000\AppData\Local\Temp\idv9cmkl.dll
C:\Users\fabia_000\AppData\Local\Temp\iipemhq9.dll
C:\Users\fabia_000\AppData\Local\Temp\ikzhpl03.dll
C:\Users\fabia_000\AppData\Local\Temp\irextbj8.dll
C:\Users\fabia_000\AppData\Local\Temp\it9ltib6.dll
C:\Users\fabia_000\AppData\Local\Temp\iwpundob.dll
C:\Users\fabia_000\AppData\Local\Temp\j9fhne3t.dll
C:\Users\fabia_000\AppData\Local\Temp\jdalouc0.dll
C:\Users\fabia_000\AppData\Local\Temp\jemldahv.dll
C:\Users\fabia_000\AppData\Local\Temp\jgrhwtkt.dll
C:\Users\fabia_000\AppData\Local\Temp\jlkafktn.dll
C:\Users\fabia_000\AppData\Local\Temp\jmbtujxi.dll
C:\Users\fabia_000\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\fabia_000\AppData\Local\Temp\jvblbgwx.dll
C:\Users\fabia_000\AppData\Local\Temp\jwy2666f.dll
C:\Users\fabia_000\AppData\Local\Temp\jz0aydrz.dll
C:\Users\fabia_000\AppData\Local\Temp\jzuwif6h.dll
C:\Users\fabia_000\AppData\Local\Temp\k1cibcbm.dll
C:\Users\fabia_000\AppData\Local\Temp\k2gdtqor.dll
C:\Users\fabia_000\AppData\Local\Temp\k38osvo6.dll
C:\Users\fabia_000\AppData\Local\Temp\k8k9sq4k.dll
C:\Users\fabia_000\AppData\Local\Temp\kek0l88n.dll
C:\Users\fabia_000\AppData\Local\Temp\kjobyr7l.dll
C:\Users\fabia_000\AppData\Local\Temp\kkdkue2r.dll
C:\Users\fabia_000\AppData\Local\Temp\kkqdekkh.dll
C:\Users\fabia_000\AppData\Local\Temp\knejggrh.dll
C:\Users\fabia_000\AppData\Local\Temp\knkhxm4f.dll
C:\Users\fabia_000\AppData\Local\Temp\kqt0h39b.dll
C:\Users\fabia_000\AppData\Local\Temp\kusca-1i.dll
C:\Users\fabia_000\AppData\Local\Temp\l1esyoe7.dll
C:\Users\fabia_000\AppData\Local\Temp\l2tqdrv-.dll
C:\Users\fabia_000\AppData\Local\Temp\l5r0nn8s.dll
C:\Users\fabia_000\AppData\Local\Temp\l9q4i0fv.dll
C:\Users\fabia_000\AppData\Local\Temp\lanmspk5.dll
C:\Users\fabia_000\AppData\Local\Temp\lcx5wnhe.dll
C:\Users\fabia_000\AppData\Local\Temp\lgswtbra.dll
C:\Users\fabia_000\AppData\Local\Temp\ljt1ouly.dll
C:\Users\fabia_000\AppData\Local\Temp\lm8hfdey.dll
C:\Users\fabia_000\AppData\Local\Temp\lozpot0i.dll
C:\Users\fabia_000\AppData\Local\Temp\lp0hxn6c.dll
C:\Users\fabia_000\AppData\Local\Temp\lu8nbhjp.dll
C:\Users\fabia_000\AppData\Local\Temp\lupicb_a.dll
C:\Users\fabia_000\AppData\Local\Temp\luqqpwyk.dll
C:\Users\fabia_000\AppData\Local\Temp\lwdnkeqk.dll
C:\Users\fabia_000\AppData\Local\Temp\lwjl1xa7.dll
C:\Users\fabia_000\AppData\Local\Temp\lyeqblbr.dll
C:\Users\fabia_000\AppData\Local\Temp\lzn6jboo.dll
C:\Users\fabia_000\AppData\Local\Temp\m4p5tfwe.dll
C:\Users\fabia_000\AppData\Local\Temp\mar2j87_.dll
C:\Users\fabia_000\AppData\Local\Temp\mghcytpk.dll
C:\Users\fabia_000\AppData\Local\Temp\mj1foycj.dll
C:\Users\fabia_000\AppData\Local\Temp\mjnjhadq.dll
C:\Users\fabia_000\AppData\Local\Temp\n0thk4ou.dll
C:\Users\fabia_000\AppData\Local\Temp\nck_zm45.dll
C:\Users\fabia_000\AppData\Local\Temp\nd7naokb.dll
C:\Users\fabia_000\AppData\Local\Temp\nll9jgmy.dll
C:\Users\fabia_000\AppData\Local\Temp\nn5mt49r.dll
C:\Users\fabia_000\AppData\Local\Temp\nu6ievbj.dll
C:\Users\fabia_000\AppData\Local\Temp\nvsqxycv.dll
C:\Users\fabia_000\AppData\Local\Temp\nwmzakcl.dll
C:\Users\fabia_000\AppData\Local\Temp\n_bptyqm.dll
C:\Users\fabia_000\AppData\Local\Temp\o0crqnxu.dll
C:\Users\fabia_000\AppData\Local\Temp\o1l9pfbi.dll
C:\Users\fabia_000\AppData\Local\Temp\o5zbqfsn.dll
C:\Users\fabia_000\AppData\Local\Temp\ofud_wdl.dll
C:\Users\fabia_000\AppData\Local\Temp\ogkz7lpo.dll
C:\Users\fabia_000\AppData\Local\Temp\oijqilb5.dll
C:\Users\fabia_000\AppData\Local\Temp\on6xq4h2.dll
C:\Users\fabia_000\AppData\Local\Temp\ooi6avda.dll
C:\Users\fabia_000\AppData\Local\Temp\op7gpjqw.dll
C:\Users\fabia_000\AppData\Local\Temp\opyyvwcj.dll
C:\Users\fabia_000\AppData\Local\Temp\orcwb5ec.dll
C:\Users\fabia_000\AppData\Local\Temp\otcnyees.dll
C:\Users\fabia_000\AppData\Local\Temp\ov8drpv6.dll
C:\Users\fabia_000\AppData\Local\Temp\oxb_w4di.dll
C:\Users\fabia_000\AppData\Local\Temp\oyemvkyp.dll
C:\Users\fabia_000\AppData\Local\Temp\p-anzafj.dll
C:\Users\fabia_000\AppData\Local\Temp\peolompg.dll
C:\Users\fabia_000\AppData\Local\Temp\pftmyhlw.dll
C:\Users\fabia_000\AppData\Local\Temp\piaym6bz.dll
C:\Users\fabia_000\AppData\Local\Temp\pjcb1pnh.dll
C:\Users\fabia_000\AppData\Local\Temp\pmvwwu2y.dll
C:\Users\fabia_000\AppData\Local\Temp\po4lktq9.dll
C:\Users\fabia_000\AppData\Local\Temp\pohaijgk.dll
C:\Users\fabia_000\AppData\Local\Temp\poz3xw98.dll
C:\Users\fabia_000\AppData\Local\Temp\pqduhp7k.dll
C:\Users\fabia_000\AppData\Local\Temp\q-t6rlbt.dll
C:\Users\fabia_000\AppData\Local\Temp\q0wopyz1.dll
C:\Users\fabia_000\AppData\Local\Temp\qevauf__.dll
C:\Users\fabia_000\AppData\Local\Temp\qh5kf3uu.dll
C:\Users\fabia_000\AppData\Local\Temp\qic1rdpi.dll
C:\Users\fabia_000\AppData\Local\Temp\qoh_itcz.dll
C:\Users\fabia_000\AppData\Local\Temp\qu1ow-xa.dll
C:\Users\fabia_000\AppData\Local\Temp\Quarantine.exe
C:\Users\fabia_000\AppData\Local\Temp\qujetzrj.dll
C:\Users\fabia_000\AppData\Local\Temp\q__qkz4y.dll
C:\Users\fabia_000\AppData\Local\Temp\r2eomat7.dll
C:\Users\fabia_000\AppData\Local\Temp\r4xeamqp.dll
C:\Users\fabia_000\AppData\Local\Temp\r6dfahbf.dll
C:\Users\fabia_000\AppData\Local\Temp\rbrrnn-1.dll
C:\Users\fabia_000\AppData\Local\Temp\rcydvzk6.dll
C:\Users\fabia_000\AppData\Local\Temp\rdmpc9ym.dll
C:\Users\fabia_000\AppData\Local\Temp\rkh6qu3k.dll
C:\Users\fabia_000\AppData\Local\Temp\ronovymr.dll
C:\Users\fabia_000\AppData\Local\Temp\rpavoauc.dll
C:\Users\fabia_000\AppData\Local\Temp\rq_kppqg.dll
C:\Users\fabia_000\AppData\Local\Temp\ryjfrrut.dll
C:\Users\fabia_000\AppData\Local\Temp\s1ikmrnc.dll
C:\Users\fabia_000\AppData\Local\Temp\sbzdwtrn.dll
C:\Users\fabia_000\AppData\Local\Temp\SearchProtectionSetup.exe
C:\Users\fabia_000\AppData\Local\Temp\semswlzv.dll
C:\Users\fabia_000\AppData\Local\Temp\SkypeSetup.exe
C:\Users\fabia_000\AppData\Local\Temp\SP58519.exe
C:\Users\fabia_000\AppData\Local\Temp\SP63599.exe
C:\Users\fabia_000\AppData\Local\Temp\sqlite3.dll
C:\Users\fabia_000\AppData\Local\Temp\sqvzi9cl.dll
C:\Users\fabia_000\AppData\Local\Temp\szgq2sfp.dll
C:\Users\fabia_000\AppData\Local\Temp\t66soksj.dll
C:\Users\fabia_000\AppData\Local\Temp\t7ai-eww.dll
C:\Users\fabia_000\AppData\Local\Temp\t8tjbodg.dll
C:\Users\fabia_000\AppData\Local\Temp\tabha84h.dll
C:\Users\fabia_000\AppData\Local\Temp\tdmndydb.dll
C:\Users\fabia_000\AppData\Local\Temp\tj6qys1t.dll
C:\Users\fabia_000\AppData\Local\Temp\tl2qkluq.dll
C:\Users\fabia_000\AppData\Local\Temp\tltyf7pv.dll
C:\Users\fabia_000\AppData\Local\Temp\tpop-qkr.dll
C:\Users\fabia_000\AppData\Local\Temp\ttlalyib.dll
C:\Users\fabia_000\AppData\Local\Temp\tvg1socg.dll
C:\Users\fabia_000\AppData\Local\Temp\twm85hrp.dll
C:\Users\fabia_000\AppData\Local\Temp\u-oichwk.dll
C:\Users\fabia_000\AppData\Local\Temp\u1rftsbs.dll
C:\Users\fabia_000\AppData\Local\Temp\u38u3jdw.dll
C:\Users\fabia_000\AppData\Local\Temp\u8gb7erc.dll
C:\Users\fabia_000\AppData\Local\Temp\ua9aohpe.dll
C:\Users\fabia_000\AppData\Local\Temp\ud3m1dkd.dll
C:\Users\fabia_000\AppData\Local\Temp\ueuf15wp.dll
C:\Users\fabia_000\AppData\Local\Temp\uigmmr29.dll
C:\Users\fabia_000\AppData\Local\Temp\uqqubzjy.dll
C:\Users\fabia_000\AppData\Local\Temp\utomdl7l.dll
C:\Users\fabia_000\AppData\Local\Temp\uv34j3xy.dll
C:\Users\fabia_000\AppData\Local\Temp\uz27a2vr.dll
C:\Users\fabia_000\AppData\Local\Temp\v3z6r9ea.dll
C:\Users\fabia_000\AppData\Local\Temp\v465w8lz.dll
C:\Users\fabia_000\AppData\Local\Temp\vddpeocd.dll
C:\Users\fabia_000\AppData\Local\Temp\vm5cktzs.dll
C:\Users\fabia_000\AppData\Local\Temp\vo4w4urd.dll
C:\Users\fabia_000\AppData\Local\Temp\votkig8z.dll
C:\Users\fabia_000\AppData\Local\Temp\vpempjra.dll
C:\Users\fabia_000\AppData\Local\Temp\vqd5bwjg.dll
C:\Users\fabia_000\AppData\Local\Temp\vqgycajf.dll
C:\Users\fabia_000\AppData\Local\Temp\w21tafge.dll
C:\Users\fabia_000\AppData\Local\Temp\w3ozlsjf.dll
C:\Users\fabia_000\AppData\Local\Temp\w7qcwb4z.dll
C:\Users\fabia_000\AppData\Local\Temp\wamgo_mt.dll
C:\Users\fabia_000\AppData\Local\Temp\wh-gorgh.dll
C:\Users\fabia_000\AppData\Local\Temp\wij8xa1x.dll
C:\Users\fabia_000\AppData\Local\Temp\wjppyqyz.dll
C:\Users\fabia_000\AppData\Local\Temp\wninrybh.dll
C:\Users\fabia_000\AppData\Local\Temp\ws7ebw0j.dll
C:\Users\fabia_000\AppData\Local\Temp\wtrdvmbe.dll
C:\Users\fabia_000\AppData\Local\Temp\wtzezpek.dll
C:\Users\fabia_000\AppData\Local\Temp\ww_hbge5.dll
C:\Users\fabia_000\AppData\Local\Temp\wxg1_2he.dll
C:\Users\fabia_000\AppData\Local\Temp\x2eoulmu.dll
C:\Users\fabia_000\AppData\Local\Temp\x4jasn-5.dll
C:\Users\fabia_000\AppData\Local\Temp\xao7ruh6.dll
C:\Users\fabia_000\AppData\Local\Temp\xcsindxv.dll
C:\Users\fabia_000\AppData\Local\Temp\xeestwju.dll
C:\Users\fabia_000\AppData\Local\Temp\xk4u4jwp.dll
C:\Users\fabia_000\AppData\Local\Temp\xt11f_h-.dll
C:\Users\fabia_000\AppData\Local\Temp\xyvxtzzr.dll
C:\Users\fabia_000\AppData\Local\Temp\xz7pyrra.dll
C:\Users\fabia_000\AppData\Local\Temp\y0ajr5oi.dll
C:\Users\fabia_000\AppData\Local\Temp\y1ulzt04.dll
C:\Users\fabia_000\AppData\Local\Temp\y3hryv-w.dll
C:\Users\fabia_000\AppData\Local\Temp\yd6iznry.dll
C:\Users\fabia_000\AppData\Local\Temp\ygsn7imm.dll
C:\Users\fabia_000\AppData\Local\Temp\yixg_nxb.dll
C:\Users\fabia_000\AppData\Local\Temp\yk0en764.dll
C:\Users\fabia_000\AppData\Local\Temp\ykppnnne.dll
C:\Users\fabia_000\AppData\Local\Temp\yoiu6ttl.dll
C:\Users\fabia_000\AppData\Local\Temp\ypcpr_su.dll
C:\Users\fabia_000\AppData\Local\Temp\ypknkebl.dll
C:\Users\fabia_000\AppData\Local\Temp\ywon9ib7.dll
C:\Users\fabia_000\AppData\Local\Temp\yyvfwutn.dll
C:\Users\fabia_000\AppData\Local\Temp\y_etlcwb.dll
C:\Users\fabia_000\AppData\Local\Temp\z-b-lybx.dll
C:\Users\fabia_000\AppData\Local\Temp\zjhxr4lr.dll
C:\Users\fabia_000\AppData\Local\Temp\zks87i96.dll
C:\Users\fabia_000\AppData\Local\Temp\zsptvst3.dll
C:\Users\fabia_000\AppData\Local\Temp\zxt61ipv.dll
C:\Users\fabia_000\AppData\Local\Temp\_gsqlnkb.dll
C:\Users\fabia_000\AppData\Local\Temp\_j1mrqh6.dll
C:\Users\fabia_000\AppData\Local\Temp\_thmxu5o.dll
C:\Users\fabia_000\AppData\Local\Temp\_xegagwz.dll
C:\Users\fabia_000\AppData\Local\Temp\_y23goax.dll
C:\Users\fabia_000\AppData\Local\Temp\_zpg58uo.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-19 10:30

==================== End Of Log ============================
         
 
 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-12-2014 01
Ran by fabia_000 at 2014-12-22 17:39:00
Running from C:\Users\fabia_000\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{3FAEEEBE-48F4-84C1-2B49-96AE73E67E3E}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 2.0.4 (HKLM-x32\...\Audacity_is1) (Version: 2.0.4 - Audacity Team)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 16777472.4759644.48.2147344384 - Audible, Inc.)
Citrix Online Launcher (HKLM-x32\...\{77463C86-BB3A-426E-A6C2-06B4D28C250F}) (Version: 1.0.223 - Citrix)
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5407 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3119 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1926 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.6.4319 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DVD Architect Studio 5.0 (HKLM-x32\...\{3870B92E-08F8-11E3-A5E1-F04DA23A5C58}) (Version: 5.0.186 - Sony)
Elgato Game Capture HD (HKLM-x32\...\{C194E0DE-F02C-4290-95AC-4FCBCE6C85A3}) (Version: 1.43.32.632 - Elgato Systems GmbH)
Free YouTube Download version 3.2.32.327 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.32.327 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.32.327 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.32.327 - DVDVideoSoft Ltd.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GoToMeeting 6.4.8.2093 (HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\GoToMeeting) (Version: 6.4.8.2093 - CitrixOnline)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{18DE31AE-70D0-43A7-9E3C-2ED7283ECE8A}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)
HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{D2462056-BA75-4B2C-8267-DFEA2B6AC4AE}) (Version: 4.6.10.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Utility Center (HKLM-x32\...\{0C57987A-A03A-4B95-A309-D23F78F406CA}) (Version: 1.0.7 - Hewlett-Packard)
HP Wireless Button Driver (HKLM-x32\...\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}) (Version: 1.0.6.1 - Hewlett-Packard Company)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6425.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)
Kaspersky Internet Security 2013 (HKLM-x32\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab)
Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190 - Kaspersky Lab) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Opera Stable 26.0.1656.60 (HKLM-x32\...\Opera 26.0.1656.60) (Version: 26.0.1656.60 - Opera Software ASA)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Ralink RT5390R 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.5.0 - Ralink)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29029 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Sound Forge Audio Studio 10.0 (HKLM-x32\...\{0AA0DA00-A1D3-11E0-B9A9-005056C00008}) (Version: 10.0.176 - Sony)
Spotify (HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.12 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Vegas Movie Studio HD Platinum 11.0 (HKLM-x32\...\{7ED73E5E-7F67-11E1-9898-F04DA23A5C58}) (Version: 11.0.322 - Sony)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
XMedia Recode Version 3.1.9.0 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.9.0 - XMedia Recode)
Yahoo Community Smartbar (HKLM-x32\...\{D62304BE-D5D3-4CCF-8973-123909491ADB}) (Version: 11.62.66.17712 - Linkury Inc.) <==== ATTENTION
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Citrix\GoToMeeting\1831\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2421751392-2424621156-167442884-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\fabia_000\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points  =========================

05-12-2014 18:25:20 Geplanter Prüfpunkt
10-12-2014 17:46:58 Installed Java 7 Update 71
13-12-2014 10:13:17 Revo Uninstaller's restore point - DriverUpdate
20-12-2014 16:03:23 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0BA4521A-BBFF-417B-845A-D7AB4A352354} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.)
Task: {13852A04-ADAF-44DD-BFBC-075DF8F2D729} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-10-21] (Hewlett-Packard)
Task: {2033AE80-2775-483E-B16E-0CBCCBCA5D1E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2421751392-2424621156-167442884-1001UA => C:\Users\fabia_000\AppData\Local\Google\Update\GoogleUpdate.exe [2014-04-06] (Google Inc.)
Task: {398778FE-C2E4-44B4-8851-8C4A01F4A907} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2421751392-2424621156-167442884-1001Core => C:\Users\fabia_000\AppData\Local\Google\Update\GoogleUpdate.exe [2014-04-06] (Google Inc.)
Task: {5B0B5EA3-0E2F-4B15-B511-99744B4F2736} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {660E75F5-904D-4F0B-91C7-F7BCDE9DBA64} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)
Task: {688463C9-A24B-4975-942E-A50E7B685230} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {719B9908-EAA1-4D82-A586-38FE99729E0E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {7984E58C-9869-4AD0-8123-E43DE6129D29} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-10-21] (Hewlett-Packard)
Task: {7A030B52-BF71-470C-A3C6-F818BE85F8FC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-19] (Microsoft Corporation)
Task: {7F6922C2-947C-4030-923D-587F4662937C} - System32\Tasks\G2MUpdateTask-S-1-5-21-2421751392-2424621156-167442884-1001 => C:\Users\fabia_000\AppData\Local\Citrix\GoToMeeting\2093\g2mupdate.exe [2014-12-15] (Citrix Online, a division of Citrix Systems, Inc.)
Task: {A2C8D68B-50A6-44CE-B491-D6AEA92C519F} - System32\Tasks\HPCeeScheduleForfabia_000 => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {B4C1F8A8-9849-45D2-8FC3-6D7FC45751C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {CE7C2112-EC42-4C8D-B33C-0205998D3EE3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-09] (Adobe Systems Incorporated)
Task: {F2333F8D-A74C-4B2A-BDB0-6833B62694DB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {F282FE63-46DD-424C-B3E6-7ACB06C6E26B} - System32\Tasks\Opera scheduled Autoupdate 1373039394 => C:\Program Files (x86)\Opera\launcher.exe [2014-12-17] (Opera Software)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2421751392-2424621156-167442884-1001.job => C:\Users\fabia_000\AppData\Local\Citrix\GoToMeeting\2093\g2mupdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2421751392-2424621156-167442884-1001Core.job => C:\Users\fabia_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2421751392-2424621156-167442884-1001UA.job => C:\Users\fabia_000\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForfabia_000.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (whitelisted) =============

2014-01-25 02:22 - 2014-01-25 02:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-12-17 16:09 - 2014-12-17 16:09 - 00535160 _____ () C:\Program Files (x86)\Opera\26.0.1656.60\opera_crashreporter.exe
2012-08-17 21:39 - 2013-01-12 00:01 - 01310136 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\kpcengine.2.2.dll
2012-10-11 05:31 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2012-10-11 05:48 - 2012-06-08 04:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 10:34 - 2012-06-08 10:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-12-17 16:09 - 2014-12-17 16:09 - 00156792 _____ () C:\Program Files (x86)\Opera\26.0.1656.60\message_center_win8.dll
2014-12-17 16:09 - 2014-12-17 16:09 - 09312888 _____ () C:\Program Files (x86)\Opera\26.0.1656.60\pdf.dll
2014-12-17 16:09 - 2014-12-17 16:09 - 00991352 _____ () C:\Program Files (x86)\Opera\26.0.1656.60\ffmpegsumo.dll
2014-12-17 16:09 - 2014-12-17 16:09 - 01358456 _____ () C:\Program Files (x86)\Opera\26.0.1656.60\libglesv2.dll
2014-12-17 16:09 - 2014-12-17 16:09 - 00219256 _____ () C:\Program Files (x86)\Opera\26.0.1656.60\libegl.dll
2012-08-17 21:38 - 2012-08-17 21:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
2012-08-17 21:40 - 2012-08-17 21:40 - 00068024 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtWebKit\qmlwebkitplugin4.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\fabia_000\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\fabia_000\Desktop\FRST64.exe:xdg.origin.url
AlternateDataStreams: C:\Users\fabia_000\Downloads\Geschäftsvorstellung .eml:OECustomProperty
AlternateDataStreams: C:\Users\fabia_000\Downloads\Trainingsplan.eml:OECustomProperty

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run: => "Zune Launcher"
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\StartupApproved\Run: => "PC Speed Maximizer"
HKU\S-1-5-21-2421751392-2424621156-167442884-1001\...\StartupApproved\Run: => "Raptr"

========================= Accounts: ==========================

Administrator (S-1-5-21-2421751392-2424621156-167442884-500 - Administrator - Disabled)
fabia_000 (S-1-5-21-2421751392-2424621156-167442884-1001 - Administrator - Enabled) => C:\Users\fabia_000
Gast (S-1-5-21-2421751392-2424621156-167442884-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2421751392-2424621156-167442884-1005 - Limited - Enabled)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/22/2014 05:26:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm chrome.exe, Version 39.0.2171.95 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2bdc

Startzeit: 01d01e03be4ff3b9

Endzeit: 4438

Anwendungspfad: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Berichts-ID: 30c399f6-89f7-11e4-bf17-8434976ebaaa

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/22/2014 11:22:53 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/20/2014 10:01:55 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/19/2014 06:32:01 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.

Error: (12/17/2014 11:32:30 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.

Error: (12/17/2014 11:20:29 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.

Error: (12/17/2014 04:12:21 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/16/2014 02:07:34 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/14/2014 07:19:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.3.9600.17284 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 544

Startzeit: 01d017815b5482ec

Endzeit: 513

Anwendungspfad: C:\WINDOWS\Explorer.EXE

Berichts-ID: b18d1488-83bd-11e4-bf17-8434976ebaaa

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/14/2014 10:27:25 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm avp.exe, Version 13.0.1.4359 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: cf8

Startzeit: 01d017789148797f

Endzeit: 331

Anwendungspfad: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe

Berichts-ID: 67d7cc84-8373-11e4-bf16-8434976ebaaa

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


System errors:
=============
Error: (12/20/2014 10:39:43 PM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (12/20/2014 10:39:42 PM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (12/20/2014 10:39:41 PM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (12/20/2014 10:39:41 PM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (12/20/2014 10:39:40 PM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (12/20/2014 00:38:27 PM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}

Error: (12/19/2014 10:18:57 PM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}

Error: (12/19/2014 08:56:56 AM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/19/2014 08:56:23 AM) (Source: DCOM) (EventID: 10010) (User: FABIAN-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/17/2014 05:16:46 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (12/22/2014 05:26:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: chrome.exe39.0.2171.952bdc01d01e03be4ff3b94438C:\Program Files (x86)\Google\Chrome\Application\chrome.exe30c399f6-89f7-11e4-bf17-8434976ebaaa

Error: (12/22/2014 11:22:53 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/20/2014 10:01:55 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/19/2014 06:32:01 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: 0x8898008d

Error: (12/17/2014 11:32:30 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: 0x8898008d

Error: (12/17/2014 11:20:29 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: 0x8898008d

Error: (12/17/2014 04:12:21 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/16/2014 02:07:34 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/14/2014 07:19:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.3.9600.1728454401d017815b5482ec513C:\WINDOWS\Explorer.EXEb18d1488-83bd-11e4-bf17-8434976ebaaa

Error: (12/14/2014 10:27:25 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: avp.exe13.0.1.4359cf801d017789148797f331C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe67d7cc84-8373-11e4-bf16-8434976ebaaa


CodeIntegrity Errors:
===================================
  Date: 2013-06-29 13:43:55.684
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 13:26:57.022
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 13:23:32.365
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 13:09:16.410
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 13:09:01.116
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 13:08:51.714
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 12:46:03.182
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 12:45:58.613
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 12:21:27.257
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-06-29 12:18:45.439
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\EEL64A.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Percentage of memory in use: 64%
Total physical RAM: 3988.27 MB
Available physical RAM: 1413.36 MB
Total Pagefile: 6205.95 MB
Available Pagefile: 2084.11 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:913.59 GB) (Free:305.09 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:16.81 GB) (Free:2.09 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (tools) (Removable) (Total:14.56 GB) (Free:14.44 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 9EC65A10)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 14.6 GB) (Disk ID: BBE7C878)
Partition 1: (Not Active) - (Size=14.6 GB) - (Type=07 NTFS)

==================== End Of Log ============================