| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weissWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
03.01.2015, 14:27
| #1 |
 |  W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Guten Tag zusammen, habe mich heute hier neu regestriert weil ich durch die Suche nach meinem Problem auf ihre Seite aufmerksam wurde. Zu meinem Problem: Ich habe seit einigen Monaten das merkwürdige Verhalten an meinem PC, dass kurz nach dem Anmelden (also nach Eingabe meines Benutzerpasswortes) der Bildschirm erst mal weiss wird. Das dauert dann ca. 5-7 Sek., dann erscheint mein Windows 7 und ich kann normal arbeiten. Das habe ich wie erwähnt schon länger und dachte mir nichts dabei, bis vor kurzem auch noch über Nacht plötzlich Probleme mit dem Proxy Server auftraten. Ich muss dazu kurz erwähnen, dass ich sehr viele Musikprogramme für die Musikproduktion auf meinem Rechner habe. Dabei erfolgt die Aktivierungsabfrage der Software oftmals über Service-Center oder Clouds, online. Von einem Tag auf den anderen gab es plötzlich die Meldung das drei Service-Center (oder Clouds) nicht mehr gestartet werden können (bzw. verbunden) da es Probleme mit dem Proxyserver gab. Dabei habe ich nie etwas an den IE-Einstellungen bzgl. des Proxys geändert. Auch meine Anitiviren-Software KASPERSKY konnte keine Updates mehr ziehen, Firefox liess sich nicht mehr starten. Nachdem ich Firefox auf >Automatisch erkennen< gestellt hatte ging er wieder. Dann klappte auch KASPERSKY plötzlich wieder. Im IE (der übrigens von mir nie genutzt wird, sondern nur Firefox) habe ich eine Portnummer vorgefunden unter den Proxy-Einstellungen. Diese habe ich entfernt und den Proxy auf Automatisch gestellt. Zumindest konnte dadurch eine Software-Cloud mit meinen Aktivierungen wieder ans Laufen gebracht werden. Die anderen beiden bekomme ich nach wie vor nicht ans Laufen, eben wegen dieser Proxy Meldungen. Nun erscheint mir auch plötzlich der immer wieder kurze weisse Bildschirm nach dem Anmelden bei W7 nicht ganz sauber. Ich denke ich habe mir hier etwas eingefangen. Ich habe mir auch den adwcleaner sowie Malewarebytes Anti-Malware draufgespeilt und durchlaufen lassen (schon etliche Male). Am Anfang wurde sehr viel gefunden, mittleweile manchmal gar nichts mehr. Ebenso bei Malewarebytes Anti-Malware. Trotzdem bin ich mir sicher das hier im System irgendwo noch etwas ist, sonst würde der Bildschirm nicht kurz weiss bleiben und ich hätte nicht von jetzt auf gleich dieses Proxy Problem gehabt (und habe es ja immer noch). Kaspersky hatte ich eine vollständige Prüfung maxchen lassen, aber wie es so ist hat er nichts verdächtiges gefunden. Daher meine Frage, wie kann ich nun weiter vorgehen um den (oder die) Übeltäter zu finden ? Vielleicht kann mir ja jemand helfen Danke im Vorraus. Mfg |
|
03.01.2015, 14:30
| #2 |
| /// the machine /// TB-Ausbilder    | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
03.01.2015, 14:45
| #3 |
| | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Hallo,
__________________erst Mal vielen Dank für die schnelle Antwort. Habe jetzt mal das FRST durchlaufen lassen. Hier die Logs. FRST - Editor: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-01-2015
Ran by (administrator) on on 03-01-2015 14:37:27
Running from C:\Users\\Downloads
Loaded Profile: (Available profiles:)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Windows\SysWOW64\XSrvSetup.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-05-16] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2350880 2014-05-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [393616 2011-03-30] (KORG Inc.)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation)
HKLM-x32\...\Run: [STCAgent] => "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
HKLM-x32\...\Run: [ZyngaGamesAgent] => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\RunOnce: [EasyTuneVI] => C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [40960 2012-02-01] ()
Winlogon\Notify\klogon: C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
HKU\S-1-5-21-25170337-1842596019-2157349911-1000\...\RunOnce: [Adobe Speed Launcher] => 1420288793
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-03-23] (Microsoft Corporation)
Lsa: [Authentication Packages] msv1_0 relog_ap
ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\shellex.dll (Kaspersky Lab ZAO)
ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\shellex.dll (Kaspersky Lab ZAO)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897
HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Start Page = News - Service - Shopping bei t-online.de
HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {1B293868-8F4D-4b37-89CA-75BBD8747680} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {90DC3FD6-1CAD-415a-8ED1-67062890BB03} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
BHO: IEVkbdBHO Class -> {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: FilterBHO Class -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: IEVkbdBHO Class -> {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\fu0cgvgf.default
FF DefaultSearchUrl: hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF SelectedSearchEngine: Google
FF Homepage: hxxp://t-online.de/
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @ilok.com/iLokHelper,version=3.1.0.7 -> C:\Program Files (x86)\PACE Anti-Piracy\iLok\NPPaceILok.dll ( PACE Anti-Piracy, Inc)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru [2014-11-22]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak [2014-11-22]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2014-11-22]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2014-11-22]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak [2014-11-22]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-11-22]
FF HKLM-x32\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010-02-06]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\virtualKeyboard@kaspersky.ru
FF Extension: Virtuelle Tastatur - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\virtualKeyboard@kaspersky.ru [2013-01-22]
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\linkfilter@kaspersky.ru
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\linkfilter@kaspersky.ru [2013-01-22]
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\KavAntiBanner@Kaspersky.ru
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\FFExt\KavAntiBanner@Kaspersky.ru [2013-01-22]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\urladvisor.crx [2012-08-31]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\virtkbd.crx [2012-08-31]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ChromeExt\ab.crx [2012-08-31]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2009-12-21] (Infowatch)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe [1155072 2008-12-16] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
R3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] ()
R2 LanmanWorkstation; C:\Windows\System32\aptwj1dm3.dll [289280 2012-04-21] (Works Ltd.) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed]
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [5018624 2010-03-25] (Native Instruments GmbH) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 UPnPService; C:\Program Files (x86)\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG) [File not signed]
S2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe -s [X]
S2 TryAndDecideService; "C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch)
S2 cvintdrv; C:\Windows\SysWow64\Drivers\cvintdrv.sys [7140 2003-07-29] () [File not signed]
S3 Fw1082; C:\Windows\System32\Drivers\Fw1082x64.sys [228864 2010-03-03] (TASCAM)
S3 Fw1082WdmService; C:\Windows\System32\Drivers\FW1082Wdmx64.sys [70144 2010-03-16] (TASCAM)
R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-01-03] ()
R3 hypaudio; C:\Windows\System32\DRIVERS\hypaudio64.sys [1484800 2010-11-30] (Universal Audio, Inc.)
R3 hypkern; C:\Windows\System32\drivers\hypkern64.sys [225792 2010-11-30] ()
R3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-04-11] ()
R3 iLokDrvr; C:\Windows\SysWOW64\DRIVERS\iLokDrvr.sys [54328 2009-12-02] (PACE Anti-Piracy, Inc.)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [636760 2012-06-14] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 KORGUMDS; C:\Windows\System32\Drivers\KORGUM64.SYS [33656 2011-03-30] (KORG INC.)
S3 MADFUFTU; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra_DFU.sys [45832 2009-09-25] (M-Audio)
S3 MAUSBFASTTRACKULTRA; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra.sys [180496 2013-06-18] (M-Audio)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-03] (Malwarebytes Corporation)
R3 mlkumidi; C:\Windows\System32\drivers\mlkumidi.sys [55856 2014-08-30] (MusicLab, Inc.)
R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [111696 2012-01-21] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 paeusbaudio; C:\Windows\System32\DRIVERS\paeusbaudio_x64.sys [252280 2012-05-24] ()
S3 paeusbaudiodsp; C:\Windows\System32\DRIVERS\paeusbaudiodsp_x64.sys [71544 2012-05-24] ()
S3 paeusbaudioks; C:\Windows\System32\DRIVERS\paeusbaudioks_x64.sys [53112 2012-05-24] ()
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] ()
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [25504 2013-10-21] (Resplendence Software Projects Sp.)
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [142120 2007-04-27] (SafeNet, Inc.)
R3 SynUSB64; C:\Windows\System32\DRIVERS\SynUSB64.sys [30352 2009-06-26] (Steinberg Media Technologies GmbH)
R0 Tpkd; C:\Windows\SysWow64\Drivers\Tpkd.sys [86528 2008-07-02] (PACE Anti-Piracy, Inc.) [File not signed]
R3 UAD2System; C:\Windows\System32\DRIVERS\UAD2System.sys [58368 2010-11-30] (Universal Audio Inc.)
R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51016 2011-11-01] (Yamaha Corporation)
R3 ysusb64; C:\Windows\System32\drivers\ysusb64.sys [132200 2013-12-17] (Yamaha Corporation)
S3 BEHRINGER_2902; System32\Drivers\BUSB2902.sys [X]
S3 BUSB_AUDIO_WDM; system32\drivers\busbwdm.sys [X]
S3 cpuz134; \??\C:\Program Files (x86)\CPUID\PC Wizard 2010\pcwiz_x64.sys [X]
S3 GMSIPCI; \??\H:\INSTALL\GMSIPCI.SYS [X]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP3\WNt500x64\Sandra.sys [X]
S3 TASCAM_US1800; System32\Drivers\tus1800u.sys [X]
S3 TASCAM_US1800_MIDI; system32\drivers\tus1800m.sys [X]
S3 TASCAM_US1800_WDM; system32\drivers\tus1800a.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-03 14:37 - 2015-01-03 14:37 - 00021783 _____ () C:\Users\\Downloads\FRST.txt
2015-01-03 14:37 - 2015-01-03 14:37 - 00000000 ____D () C:\FRST
2015-01-03 14:36 - 2015-01-03 14:36 - 02123264 _____ (Farbar) C:\Users\\Downloads\FRST64.exe
2015-01-03 13:30 - 2015-01-03 13:31 - 02173952 _____ () C:\Users\\Desktop\adwcleaner_4.106.exe
2015-01-03 12:55 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-03 12:55 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-13 14:46 - 2014-12-13 14:52 - 55248539 _____ () C:\Users\\Downloads\SampleTank_3_3.3.zip
2014-12-13 13:31 - 2014-12-13 13:31 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-13 11:43 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-13 11:43 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-13 11:40 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-13 11:40 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-13 11:40 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-13 11:40 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-13 11:40 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-13 11:40 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-13 11:40 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-13 11:40 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-13 11:40 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-13 11:40 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-13 11:40 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-13 11:40 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-13 11:40 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-13 11:40 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-13 11:40 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-13 11:40 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-13 11:40 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-13 11:40 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-13 11:40 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-13 11:40 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-13 11:40 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-13 11:40 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-13 11:40 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-13 11:40 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-13 11:40 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-13 11:40 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-13 11:40 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-13 11:40 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-13 11:40 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-13 11:40 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-13 11:40 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-13 11:40 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-13 11:40 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-13 11:40 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-13 11:40 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-13 11:40 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-13 11:40 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-13 11:40 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-13 11:40 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-13 11:40 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-13 11:40 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-13 11:40 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-13 11:40 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-13 11:40 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-13 11:40 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-13 11:40 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-13 11:40 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-13 11:40 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-13 11:40 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-13 11:40 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-13 11:40 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-13 11:40 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-13 11:40 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-13 11:40 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-13 11:36 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-13 11:36 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-13 11:34 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-13 11:34 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-13 11:34 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-13 11:34 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-13 11:34 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-13 11:34 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-13 11:34 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-13 11:34 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-13 11:34 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-13 11:34 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-13 11:34 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-13 11:34 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-13 11:34 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-13 11:34 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-13 11:34 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-13 11:34 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-13 11:34 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-06 14:03 - 2014-12-06 14:03 - 00000000 ____D () C:\Program Files\Bonjour
2014-12-06 14:03 - 2014-12-06 14:03 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-12-06 12:32 - 2014-12-06 12:32 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\6A46048A.sys
2014-12-06 12:14 - 2014-12-06 12:14 - 00000055 _____ () C:\AdwCleanerDebug.txt
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-03 14:32 - 2014-11-23 20:07 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-03 14:13 - 2014-11-22 13:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-03 13:53 - 2014-11-23 10:11 - 00000000 ____D () C:\AdwCleaner
2015-01-03 13:46 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-03 13:46 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-03 13:45 - 2009-07-14 18:58 - 11809370 _____ () C:\Windows\system32\perfh007.dat
2015-01-03 13:45 - 2009-07-14 18:58 - 03627950 _____ () C:\Windows\system32\perfc007.dat
2015-01-03 13:45 - 2009-07-14 06:13 - 00006340 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-03 13:40 - 2014-11-24 18:35 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2015-01-03 13:40 - 2013-07-12 12:37 - 00075792 _____ () C:\Windows\setupact.log
2015-01-03 13:40 - 2012-06-12 18:24 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2015-01-03 13:40 - 2012-02-12 14:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-01-03 13:39 - 2012-06-13 08:45 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2015-01-03 13:39 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-03 13:38 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-03 13:38 - 2012-09-17 13:14 - 00077224 _____ () C:\Windows\mlkumidi.log
2015-01-03 13:38 - 2010-01-27 16:29 - 00380210 _____ () C:\Windows\PFRO.log
2015-01-03 13:37 - 2013-07-12 12:41 - 01940553 _____ () C:\Windows\WindowsUpdate.log
2015-01-03 12:58 - 2014-06-21 12:00 - 00000000 ____D () C:\Users\\AppData\Local\Adobe
2015-01-03 12:57 - 2012-06-07 13:31 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-03 12:57 - 2011-05-20 23:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-13 14:00 - 2010-01-31 13:12 - 00000000 ____D () C:\temp
2014-12-13 13:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-12-13 13:31 - 2014-04-26 12:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-13 12:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-13 11:47 - 2013-07-14 15:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-13 11:47 - 2010-02-05 19:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-13 11:44 - 2010-01-25 18:22 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-13 11:28 - 2013-04-13 10:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-06 15:42 - 2013-08-03 09:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XLN Audio
2014-12-06 15:42 - 2011-08-05 15:00 - 00000000 ____D () C:\Program Files (x86)\VstPlugIns
2014-12-06 14:05 - 2014-01-11 11:56 - 00002028 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk
2014-12-06 14:05 - 2014-01-11 11:56 - 00002016 _____ () C:\Users\Public\Desktop\iLok License Manager.lnk
2014-12-06 14:05 - 2014-01-11 11:55 - 00000000 ____D () C:\Program Files (x86)\iLok License Manager
2014-12-06 12:59 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\w3data.vss
2014-12-06 12:59 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\msvcsv60.dll
2014-12-06 12:59 - 2011-05-28 12:21 - 00000096 _____ () C:\Users\\AppData\Roaming\msregsvv.dll
2014-12-06 12:59 - 2011-05-28 12:21 - 00000096 _____ () C:\ProgramData\autobk.inc
2014-12-06 12:59 - 2010-02-15 12:34 - 00000304 _____ () C:\Windows\msocreg32.dat
2014-12-06 12:52 - 2013-01-06 14:02 - 00001220 _____ () C:\Users\\Desktop\Custom Shop.lnk
2014-12-06 12:52 - 2010-02-15 11:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IK Multimedia
2014-12-06 12:29 - 2014-11-23 20:07 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-06 12:29 - 2014-11-23 20:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-12-06 12:29 - 2014-11-23 20:07 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
Files to move or delete:
====================
C:\Users\\SOFTUBE PLUG-INS CONTROL.EXE
Some content of TEMP:
====================
C:\Users\\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-06 16:04
==================== End Of Log ============================
Addition - Editor:FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-01-2015
Ran by at 2015-01-03 14:37:57
Running from C:\Users\\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Kaspersky PURE 2.0 (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky PURE 2.0 (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky PURE 2.0 (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.24 - GIGABYTE)
Acronis*True*Image*Home 2012 (HKLM-x32\...\{C1FDF2F0-2136-42D8-8A64-2B45BBF2C19E}Visible) (Version: 15.0.7119 - Acronis)
Acronis*True*Image*Home 2012 (x32 Version: 15.0.7119 - Acronis) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{626B3D60-A661-4444-AAF5-6C75E55936E8}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}) (Version: 10.1.52.14 - Adobe Systems, Inc.)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AmpegSVX (HKLM-x32\...\{CF1D7323-8A0A-49C7-83B0-088DB90721E2}) (Version: 1.1.3 - IK Multimedia)
AmpliTube 3 (HKLM-x32\...\{5DD152A8-BFB3-439E-90CD-5C00C2116E23}) (Version: 3.0.0 - IK Multimedia)
AmpliTube 3 version 3.14.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.14.0 - IK Multimedia)
AmpliTube Fender (HKLM-x32\...\{B178BACA-880B-4D20-85F9-522F7F2DECBE}) (Version: 1.1.0 - IK Multimedia)
AmpliTube Jimi Hendrix (HKLM-x32\...\{66BA35B0-1911-47EF-B170-1DCFFDA362F1}) (Version: 1.0.3 - IK Multimedia)
AmpliTube2 (HKLM-x32\...\{C95AACD4-9507-4F5C-9D53-22B1ACCFECD1}) (Version: 2.1.4 - IK Multimedia)
Antares Autotune VST RTAS TDM v5.08 (HKLM-x32\...\Antares Autotune VST RTAS TDM_is1) (Version: - Team AiR 2007)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ARC System 2 version 2.2.1 (HKLM\...\{4952A610-D484-4F6A-B1B4-33797CFDB821}_is1) (Version: 2.2.1 - IK Multimedia)
ArcSoft Panorama Maker 6 (HKLM-x32\...\{DABFD34E-BE68-4BC6-9254-5D7A7FF76B99}) (Version: 6.0.8.85 - ArcSoft)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.)
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Basic FX Suite (HKLM-x32\...\InstallShield_{45BBAD53-80DB-4DD2-9C50-B5E09EFFAEA7}) (Version: 1.0.0 - Yamaha Corporation)
Basic FX Suite (Version: 1.0.0 - Yamaha Corporation) Hidden
Best Service Engine 1.0.4 64bit (HKLM-x32\...\Best Service Engine 1.0.4 64bit) (Version: - )
Best Service Galaxy II (HKLM-x32\...\Best Service Galaxy II) (Version: - )
Best Service Galaxy Vintage D (HKLM-x32\...\Best Service Galaxy Vintage D) (Version: - Best Service)
Best Service Galaxy Vintage D (Version: 1.0.0.001 - Best Service) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Boris Continuum Complete 7 Adobe CS5 (HKLM\...\{A31D5812-F0AA-4AFA-B584-C2C4AC141518}) (Version: 7.00.0000 - Boris FX, Inc.)
Canon MP110 (HKLM\...\{B3467C74-0678-459a-9180-722763E0AFDE}) (Version: - )
Canon ScanGear Starter (HKLM-x32\...\{18A5DFF2-8A95-49F3-873F-743CB5549F3D}) (Version: - )
CS-80V2 2.5.4 (HKLM-x32\...\CS-80V2_is1) (Version: 2.5.4 - Arturia)
CSR (HKLM-x32\...\{648C1BFD-6A70-46D8-B855-F84D95C2DC34}) (Version: 1.1.1 - IK Multimedia)
Custom Shop version 1.5.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.5.0 - IK Multimedia)
DVD-lab PRO 2.3 (HKLM-x32\...\DVD-lab PRO 2.3_is1) (Version: - Mediachance)
East West Boesendorfer 290 (HKLM-x32\...\East West Boesendorfer 290) (Version: - )
East West EWQLSO Silver Edition (HKLM-x32\...\East West EWQLSO Silver Edition) (Version: - )
East West Hardcore Bass (HKLM-x32\...\East West Hardcore Bass) (Version: - )
East West Hardcore Bass XP (HKLM-x32\...\East West Hardcore Bass XP) (Version: - )
Easy Tune 6 B12.0402.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0402.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Electronic EZmix pack (HKLM-x32\...\{6450F55E-EE0F-4203-A90D-D533EE3F88E4}) (Version: 1.0.0 - Toontrack)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.8.3.2154 - Steinberg Media Technologies GmbH)
ELS Vocoder (HKLM-x32\...\ELS Vocoder_is1) (Version: 1.6.0 - Eiosis, Inc.)
EZdrummer (HKLM-x32\...\{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}) (Version: 1.3.2 - Toontrack)
EZdrummer 2 32-bit (HKLM-x32\...\{7E36EB5B-0739-4DA7-BF26-E63DD2BECA76}) (Version: 2.0.0 - Toontrack)
EZdrummer 2 32-bit Update (HKLM-x32\...\{CDE1FC7E-3E9A-48BA-BBB9-65C2026CA0A2}) (Version: 2.0.1 - Toontrack)
EZdrummer 2 64-bit (HKLM\...\{B9217824-0EBE-49C7-98A0-A76CC46BBB7D}) (Version: 2.0.0 - Toontrack)
EZdrummer 2 64-bit Update (HKLM\...\{11CC8964-9CB0-46E6-9218-CD39ED4A554D}) (Version: 2.0.1 - Toontrack)
EZDrummer 64 bit (HKLM\...\{6CEFB8E2-2B47-49AB-B97E-AA1ACF6595E5}) (Version: 1.3.0 - Toontrack)
EZDrummer 64-bit (HKLM\...\{80E801DB-5288-4447-AAC2-27F329B61C6E}) (Version: 1.3.2 - Toontrack)
EZmix 32-bit (HKLM-x32\...\{B5AB1F3A-136C-4C87-BB49-0E3ACD5B9F7C}) (Version: 2.0.9 - Toontrack)
EZmix 64-bit (HKLM\...\{3D83CC9F-E2E1-47AE-B1AF-F6D3A8825196}) (Version: 2.0.9 - Toontrack)
EZXAmericana (HKLM-x32\...\{7DB4839F-DFA6-49D2-907F-740CE65B2D10}) (Version: 1.0.0 - Toontrack)
EZXClaustrophobic (HKLM-x32\...\{8094F7AE-CA21-4AF2-A256-BC918CE0E796}) (Version: 1.1.3 - Toontrack)
EZXCocktail (HKLM-x32\...\{147567F0-8575-4BE0-B5B3-62706C67FA5A}) (Version: 1.3.0 - Toontrack)
EZXFunkmasters (HKLM-x32\...\{BB5A44CB-3045-43E2-BEB0-B64E477D4633}) (Version: 1.0.0 - Toontrack)
EZXJazz (HKLM-x32\...\{EED8D44F-CEBB-4298-8D0E-E01AF6AC0663}) (Version: 1.0.0 - Toontrack)
EZXVintage (HKLM-x32\...\{430399DC-98BC-4A7F-8F8E-77981CABAE05}) (Version: 1.2.0 - Toontrack)
FG-X Virtual Mastering Console (HKLM\...\FG-X Virtual Mastering Console_is1) (Version: - Slate Digital)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{19666E73-D9E5-44D4-8F33-037ED151ECBC}) (Version: 2.1.22.0 - MAGIX AG)
Garritan Jazz Big Band (HKLM-x32\...\Garritan Jazz Big Band) (Version: - )
Garritan Personal Orchestra (HKLM-x32\...\Garritan Personal Orchestra) (Version: - )
Garritan Personal Orchestra KP2 (HKLM-x32\...\Garritan Personal Orchestra KP2) (Version: - )
Gigabyte Raid Configurer (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0001 - GIGABYTE Technologies, Inc.)
Halls Of Fame Free - Origami Edition 2.5.2 (HKLM-x32\...\Halls Of Fame Free - Origami Edition 2.5.2) (Version: - )
High-Definition Video Playback (x32 Version: 11.1.11500.4.273 - Nero AG) Hidden
IK Multimedia Authorization Manager version 1.0.11 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.11 - IK Multimedia)
iLok Client Helper (HKLM-x32\...\InstallShield_{DEA491FB-48BC-4B6B-8902-FCD4BAB069BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.)
iLok Client Helper (x32 Version: 5.9.1 - PACE Anti-Piracy, Inc.) Hidden
iLok Client Helper x32x64 (HKLM-x32\...\InstallShield_{27F0B084-8305-4891-B9FD-4F2E3EDF98D4}) (Version: 5.8.12 - PACE Anti-Piracy)
iLok Client Helper x32x64 (x32 Version: 5.8.12 - PACE Anti-Piracy) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)
Incomedia WebSite X5 v9 - Evolution (HKLM-x32\...\{64392EEB-38EF-45FD-822D-5C75CA136860}_is1) (Version: 9.0.0.1597 - Incomedia s.r.l.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.)
iZotope Nectar Elements (HKLM-x32\...\iZotope Nectar Elements_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Nectar Mirrorball Style Pack (HKLM-x32\...\iZotope Nectar Mirrorball Style Pack_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Nectar Style Pack 1 (HKLM-x32\...\iZotope Nectar Style Pack 1_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Nectar Utility Pack 1 (HKLM-x32\...\iZotope Nectar Utility Pack 1_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Ozone 3 (HKLM-x32\...\iZotope Ozone 3_is1) (Version: 3.05 - iZotope, Inc.)
iZotope Ozone 4 (HKLM-x32\...\iZotope Ozone 4_is1) (Version: 4.03 - iZotope, Inc.)
iZotope Spectron (HKLM-x32\...\iZotope Spectron_is1) (Version: 1.05 - iZotope, Inc.)
iZotope Stutter Edit (HKLM-x32\...\iZotope Stutter Edit_is1) (Version: 1.04 - iZotope, Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Jazz and Big Band KP2 (HKLM-x32\...\Jazz and Big Band KP2) (Version: - )
JBridge (HKLM-x32\...\JBridge) (Version: - JBridge) <==== ATTENTION!
Jupiter-8V2 2.5.5 (HKLM-x32\...\jupiter8v25_is1) (Version: 2.5.5 - Arturia)
Kaspersky PURE 2.0 (HKLM-x32\...\InstallWIX_{2D270A67-B7CD-4281-B2FE-60DF18D19B8E}) (Version: 12.0.2.733 - Kaspersky Lab)
Kaspersky PURE 2.0 (x32 Version: 12.0.2.733 - Kaspersky Lab) Hidden
K-Lite Codec Pack 6.4.5 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 6.4.5 - )
K-Lite Mega Codec Pack 8.9.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 8.9.5 - )
KORG padKONTROL Editor Librarian (HKLM-x32\...\{D77332DD-FA53-4E49-9F4B-3863B8D56196}) (Version: 1.01.0010 - KORG Inc.)
KORG USB-MIDI Driver Tools for Windows (HKLM-x32\...\{B3CB5BA3-3E98-4E85-944E-B03D055F8450}) (Version: 1.13.0601 - Korg Inc.)
LatencyMon 6.00 (HKLM\...\LatencyMon_is1) (Version: - Resplendence Software Projects Sp.)
LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe)
Magic Bullet Looks (HKLM-x32\...\InstallShield_{595AC242-897D-494C-A278-2A2781403824}) (Version: 1.4.1 - Red Giant Software)
Magic Bullet Looks (Version: 1.4.1 - Red Giant Software) Hidden
Magic Bullet Mojo (HKLM-x32\...\InstallShield_{40E89076-E040-421E-AEB7-D931F8B07401}) (Version: 1.2.0 - Red Giant Software)
Magic Bullet Mojo (Version: 1.2.0 - Red Giant Software) Hidden
MAGIX 3D Maker (embeded) (HKLM-x32\...\MAGIX 3D Maker D) (Version: 6.0.0.3 - MAGIX AG)
MAGIX Foto Manager 8 6.0.1.457 (D) (HKLM-x32\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.457 - MAGIX AG)
MAGIX Foto Premium 3.1.0.11 (D) (HKLM-x32\...\MAGIX Foto Premium D) (Version: 3.1.0.11 - MAGIX AG)
MAGIX Fotobuch 3.6 (HKLM-x32\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG)
MAGIX MP3 Maker 15 10.0.0.257 (D) (HKLM-x32\...\MAGIX MP3 Maker 15 D) (Version: 10.0.0.257 - MAGIX AG)
MAGIX Online Druck Service 3.4.3.0 (D) (HKLM-x32\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG)
MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Website Maker 4 1.13.0.112 (D) (HKLM-x32\...\MAGIX Website Maker 4 D) (Version: 1.13.0.112 - MAGIX AG)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net)
Melodyne 3.2 (HKLM-x32\...\{A1F143D1-1F0D-44FB-A44B-71D4367D16DE}) (Version: 3.2.0202 - Celemony Software GmbH)
Melodyne 3.2 (x32 Version: 3.2.0202 - Celemony Software GmbH) Hidden
Melodyne Runtime 4.1 (x64) (HKLM\...\{53EE2829-E9DB-4913-B3EA-96F10F84E98B}) (Version: 1.0.1 - Celemony Software GmbH)
Melodyne singletrack (HKLM-x32\...\{16DF894D-FC3F-4B87-908D-671E201CD7A8}) (Version: 2.01.0045 - Celemony Software GmbH)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 1.0.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Windows Media Video 9 VCM (HKLM-x32\...\WMV9_VCM) (Version: - )
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Mini V 2.5.5 (HKLM-x32\...\miniv2_5_is1) (Version: 2.5.5 - Arturia)
minimoog V 1.6 (HKLM-x32\...\minimoog V_is1) (Version: - Arturia)
minimoog V2 2.0 (HKLM-x32\...\minimoog V2_is1) (Version: - Arturia)
Miroslav Philharmonik (HKLM-x32\...\{BA0D0121-A3BA-487D-9C78-7AB0E676C722}) (Version: 1.1.2 - IK Multimedia)
Modular V 2.6.3 (HKLM-x32\...\MMV_2.6.0_is1) (Version: 2.6.3 - Arturia)
Moog Modular V 2.5 (HKLM-x32\...\Moog Modular V 2_is1) (Version: - Arturia)
Movavi Screen Capture Studio 4 (HKLM-x32\...\Movavi Screen Capture Studio 4) (Version: 4.3.3 - MOVAVI)
Mozilla Firefox 33.1.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 de)) (Version: 33.1.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
mp3-2-wav converter 1.14 (HKLM-x32\...\mp3-2-wav) (Version: - )
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MusicLab RealGuitar (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealGuitar (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealGuitar (HKLM-x32\...\{4c7ab715-e30c-4db5-ae25-da050dd80533}) (Version: 3.1.0.7127 - MusicLab, Inc.)
MusicLab RealGuitar Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealLPC (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealLPC (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealLPC (HKLM-x32\...\{a55070fb-e9c5-4a41-b693-7f439a4d02cc}) (Version: 3.1.0.7127 - MusicLab, Inc.)
MusicLab RealLPC Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealStrat (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealStrat (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealStrat (HKLM-x32\...\{85520ea4-3eee-4096-89b7-6df88a92032e}) (Version: 3.1.0.7127 - MusicLab, Inc.)
MusicLab RealStrat Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab Virtual Midi Driver (64-bit) (HKLM\...\{2B019162-86C7-4D14-AED0-2CB5110BA4FF}) (Version: 2.0.2.0 - MusicLab, Inc.)
Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: - Native Instruments)
Native Instruments Abbey Road 60s Drums (HKLM-x32\...\Native Instruments Abbey Road 60s Drums) (Version: - Native Instruments)
Native Instruments Abbey Road 60s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 60s Drums 1.1) (Version: - Native Instruments)
Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: - Native Instruments)
Native Instruments Abbey Road 70s Drums (HKLM-x32\...\Native Instruments Abbey Road 70s Drums) (Version: - Native Instruments)
Native Instruments Abbey Road 70s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 70s Drums 1.1) (Version: - Native Instruments)
Native Instruments Abbey Road Modern Drums (HKLM-x32\...\Native Instruments Abbey Road Modern Drums) (Version: - Native Instruments)
Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: - Native Instruments)
Native Instruments Battery 3 (HKLM-x32\...\Native Instruments Battery 3) (Version: - Native Instruments)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: - Native Instruments)
Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.0.1.288 - Native Instruments)
Native Instruments DrumMicA (HKLM-x32\...\Native Instruments DrumMicA) (Version: - Native Instruments)
Native Instruments Elektrik Piano (HKLM-x32\...\Native Instruments Elektrik Piano) (Version: - )
Native Instruments Elektrik Piano 1.5 (HKLM-x32\...\Native Instruments Elektrik Piano 1.5) (Version: - )
Native Instruments Guitar Rig 3 (HKLM-x32\...\Native Instruments Guitar Rig 3) (Version: - Native Instruments)
Native Instruments Guitar Rig 4 (HKLM-x32\...\Native Instruments Guitar Rig 4) (Version: - Native Instruments)
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.3.0.6464 - Native Instruments)
Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.1.0.6 - Native Instruments)
Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: - Native Instruments)
Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: - Native Instruments)
Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: - Native Instruments)
Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: - Native Instruments)
Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: - Native Instruments)
Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: - Native Instruments)
Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: - Native Instruments)
Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: - Native Instruments)
Nero 10 ClipartPack (HKLM-x32\...\{96ED4B78-300E-4033-AE6C-C115CEB4DF07}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Kwik Themes 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Kwik Themes 2 (HKLM-x32\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.6.10000.2.0 - Nero AG)
Nero 10 Menu TemplatePack 1 (HKLM-x32\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 2 (HKLM-x32\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 3 (HKLM-x32\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Sample ImagePack (HKLM-x32\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Sample Videos (HKLM-x32\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.6.10000.11.0 - Nero AG)
Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.8.10600.6.100 - Nero AG)
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.6.10700.5.100 - Nero AG)
Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.4.10400.2.100 - Nero AG)
Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.6.10600.4.100 - Nero AG)
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10800.6.100 - Nero AG)
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10300.1.100 - Nero AG)
Nero Kwik Media (HKLM-x32\...\{1F7D9F37-C39C-486C-BDF8-8F440FFB3352}) (Version: 1.6.16600.75.100 - Nero AG)
Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.11200 - Nero AG)
Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.10.10700.5.100 - Nero AG)
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.6.10500.3.100 - Nero AG)
Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.10.10500.4.100 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10500.3.100 - Nero AG)
Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.4.11000.9.100 - Nero AG)
Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.10.10700.6.100 - Nero AG)
NF VST 64-bit Installer (HKLM-x32\...\NF VST 64-bit Installer3.0) (Version: 3.0 - Nomad Factory)
NI Service Center (HKLM-x32\...\NI Service Center) (Version: - )
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon)
Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.7.0 - Nikon)
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9745 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.4.3.0756 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.4.3.0756 - PACE Anti-Piracy, Inc.) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.12 - Nikon)
Plus Pack für Acronis True Image Home 2012 (HKLM-x32\...\{A8EFC6C1-DF0C-4F51-8779-EAC4CDB440A4}) (Version: 15.0.6131 - Acronis)
Prophet-V2 2.5.3 (HKLM-x32\...\prophetv2_5_is1) (Version: 2.5.3 - Arturia)
PSP VintageMeter 32bit (HKLM-x32\...\PSP VintageMeter 32bit) (Version: 1.0.0 32bit - PSPaudioware.com)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6554 - Realtek Semiconductor Corp.)
ReValver HPSE x64 (HKLM\...\ReValver HPSE x64_is1) (Version: - )
Roots Sticks MIDI (HKLM-x32\...\{0EEAD139-1ABB-43B9-BBA1-5ECF9C6CCF8B}) (Version: 1.0.0 - Toontrack)
SampleMoog (HKLM-x32\...\{218AA20E-F016-4385-9F74-04FF8E596FB2}) (Version: 1.0.2 - IK Multimedia)
SampleTank 2 (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.4 - IK Multimedia)
SampleTank 3 version 3.0.2 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.0.2 - IK Multimedia)
Sentinel Protection Installer 7.4.0 (HKLM-x32\...\{5A180ED5-0AC1-410A-B790-5E0319CD0A93}) (Version: 7.4.0 - SafeNet, Inc.)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Softube Plug-Ins (VST 32-bit) (HKLM-x32\...\Softube Plug-Ins (VST 32-bit)) (Version: - )
Softube Plug-Ins (VST 64-bit) (HKLM\...\Softube Plug-Ins (VST 64-bit)) (Version: - )
Softube Plug-Ins (VST AAX 64-bit) (HKLM\...\Softube Plug-Ins (VST AAX 64-bit)) (Version: - )
SONiVOX Vocalizer (HKLM-x32\...\SONiVOX Vocalizer_is1) (Version: - )
Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit)_is1) (Version: 1.0.0 - Sonnox Ltd, Oxford, UK)
Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit)_is1) (Version: 1.0.2 - Sonnox Ltd, Oxford, UK)
Spark Vintage Drum Machines 1.7.2 (HKLM-x32\...\Spark Vintage Drum Machines_is1) (Version: - Arturia)
SPL TwinTube 1.3.1 (HKLM-x32\...\SPL TwinTube_is1) (Version: - SPL)
SPL Vitalizer MK2-T 1.3 (HKLM-x32\...\SPL Vitalizer MK2-T_is1) (Version: - SPL)
Splashtop Connect for Firefox (HKLM-x32\...\{EF25F71D-F3E8-42A3-8B5A-DBF83C4B942F}) (Version: 2.0.5.2 - Splashtop Inc.)
Splashtop Connect for IE (HKLM-x32\...\{E2B086BD-75A9-45D1-A675-151624B259A1}) (Version: 2.0.5.1 - Splashtop Inc.)
SSD Sampler (HKLM-x32\...\SSD4) (Version: 1.1 - Yellow Matter Entertainment)
StartUpProject (HKLM-x32\...\{4ABFED1A-0DE9-4864-A89F-1117DECFF672}) (Version: 3.5.0 - Avid Technology, Inc.)
Steinberg CC121 Extension 64bit (HKLM-x32\...\{1D111953-3C70-48E3-BB62-B669C724585C}) (Version: 1.7.1 - Yamaha Corporation)
Steinberg Cubase 7 64bit (HKLM\...\{57FB2180-0FC7-41FC-8D76-3C4271CF4422}) (Version: 7.0.7 - Steinberg Media Technologies GmbH)
Steinberg Cubase 7.5 64bit (HKLM\...\{C75E8AD9-C89F-4505-5E87-CFCCEBE284FA}) (Version: 7.5.20 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Eucon Adapter 6.5 64bit (HKLM\...\{95D90857-61C2-4927-85FF-A317E46E7351}) (Version: 6.5.2 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Allen Morgan Signature Drums (HKLM-x32\...\{611A7035-0172-4B9B-8BB6-5046F6867D8A}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.0.1 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 2.0.2 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 2.0.0 - Steinberg Media Technologies GmbH)
Steinberg HALionOne 64bit (HKLM\...\{743C5D75-6BC8-4881-BF7D-E7DF29F155F4}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Additional Content Set 01 (HKLM-x32\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Expression Set (HKLM-x32\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH)
Steinberg HALionOne GM Drum Set (HKLM-x32\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne GM Set (HKLM-x32\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Pro Set (HKLM-x32\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Studio Drum Set (HKLM-x32\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Studio Set (HKLM-x32\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Padshop 64bit (HKLM\...\{75F15019-C0C2-4047-AA45-97B4BD313719}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH)
Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg UR44 Applications (HKLM-x32\...\InstallShield_{37619421-E7D8-44C2-85A3-486C97E6A0D4}) (Version: 2.1.0 - Yamaha Corporation)
Steinberg UR44 Applications (Version: 2.1.0 - Yamaha Corporation) Hidden
Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg VST Classics 1 64bit (HKLM\...\{AA322103-FC2B-4D86-BA6C-67D4DDB4209C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg VST Classics 2 64bit (HKLM\...\{AC07B5F9-BF11-4221-9E85-87A6F33BCBB3}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Stutter Edit Expansion 1 (HKLM-x32\...\Stutter Edit Expansion 1_is1) (Version: 1.00 - iZotope, Inc.)
Stutter Edit Expansion 2 (HKLM-x32\...\Stutter Edit Expansion 2_is1) (Version: 1.00 - iZotope, Inc.)
Subtitle Workshop 2.51 (HKLM-x32\...\SubtitleWorkshop) (Version: - )
Superior Drummer 32-bit (HKLM-x32\...\{009AC76E-1A66-4682-82B7-417E77F3C648}) (Version: 2.4.0 - Toontrack)
Superior Drummer 64-bit (HKLM\...\{22029AEE-38DF-4E35-AEF4-FE8CA3F6667F}) (Version: 2.4.0 - Toontrack)
Toontrack solo (HKLM-x32\...\{5866520C-8857-4986-833A-039F4584C3F7}) (Version: 1.3.2 - Toontrack)
Toontrack solo 64 bit (HKLM\...\{FA9D0D8C-FDD1-45C2-8291-079FBA72D2CB}) (Version: 1.3.2 - Toontrack)
T-RackS 1.x (HKLM-x32\...\{37BCCAE2-A3AD-4E03-B4FD-A1BE1FE6365A}) (Version: 1.3.0 - IK Multimedia)
T-RackS 3 Standard (HKLM-x32\...\{A78D0A87-8C6E-4726-84D7-C4CAC122617D}) (Version: 3.1.1 - IK Multimedia)
T-RackS CS version 4.7.1 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.7.1 - IK Multimedia)
UAD Powered Plug-Ins (HKLM-x32\...\UAD Powered Plug-Ins) (Version: - )
Ulead COOL 360 1.0 (HKLM-x32\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - )
Ulead Photo Explorer 8.6 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version: 8.6 - Ulead Systems, Inc.)
Ulead PhotoImpact 11 (HKLM-x32\...\{C8550C86-A712-4219-AD4C-038C9FD1D149}) (Version: 11.0 - Ulead System)
UninstallTpkdx64 (HKLM\...\Tpkdx64_is1) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Vienna Instruments 2.0 (HKLM\...\Vienna Instruments_is1) (Version: - Vienna Symphonic Library)
Vienna Instruments Software 1.11 (HKLM-x32\...\Vienna Instruments Software_is1) (Version: - Vienna Symphonic Library)
ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.7.6 - Nikon)
Vir2 Instruments BASiS (HKLM-x32\...\Vir2 Instruments BASiS) (Version: - )
Visual C++ 64-bit Redistributables (HKLM-x32\...\InstallShield_{FB03650C-B373-4B20-ACA5-B7BA1A8EEE33}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.)
Visual C++ Redistributables (HKLM-x32\...\InstallShield_{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}) (Version: 1.00.0000 - PACE Anti-Piracy, Inc.)
Visual C++ Redistributables (HKLM-x32\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.)
VKFX 2.2.5 (HKLM\...\{C270463E-8DF0-45c7-AB1F-2695E822E344}_is1) (Version: 2.2.5 - Overloud)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WAV to AC3 Encoder 5.0 (HKLM-x32\...\WAV to AC3 Encoder_is1) (Version: - Wieslaw Soltes)
WaveLab 7 (HKLM-x32\...\WaveLabPro7) (Version: 7.2.1.600 - Steinberg)
Waves Complete V9r21 (HKLM-x32\...\{93000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.3.21 - Waves)
Wavpack4Wavelab6 (HKLM-x32\...\{D2CB5A07-DF85-4CFD-8E76-EB23B77730F3}) (Version: 1.0.0 - RIL)
Windows Driver Package - Universal Audio Inc. (UAD2Pcie) UAD2DSP (11/30/2010 ) (HKLM\...\D6464B370822574865708071F3E87D186FAC7BA4) (Version: 11/30/2010 - Universal Audio Inc.)
Windows Driver Package - Universal Audio Inc. (UAD2System) UAD2DSP (11/30/2010 ) (HKLM\...\072DA3D1AC97714EA927A1A5770099D1AB131FD5) (Version: 11/30/2010 - Universal Audio Inc.)
WinRAR 4.10 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH)
Wurlitzer V 1.0.6 (HKLM-x32\...\Wurlitzer V_is1) (Version: - Arturia)
XLN Online Installer (HKLM\...\XLN Online Installer Inno Setup ID_is1) (Version: - )
XLN Online Installer (HKLM\...\XLN Online Installer) (Version: - XLN Audio AB)
Yamaha Steinberg USB Driver (HKLM-x32\...\InstallShield_{89A4C956-539C-438D-8D3B-B9C054FD0DDE}) (Version: 1.8.5 - Yamaha Corporation)
Yamaha Steinberg USB Driver (Version: 1.8.5 - Yamaha Corporation) Hidden
Yamaha USB-MIDI Driver (HKLM-x32\...\InstallShield_{18369253-E53F-4A47-818E-082DFB950872}) (Version: 3.1.2.1 - Yamaha Corporation)
Yamaha USB-MIDI Driver (Version: 3.1.2.1 - Yamaha Corporation) Hidden
yellow tools Independence Pro 2.5.4 Software Suite 64bit (HKLM-x32\...\yellow tools Independence Pro 2.5.4 Software Suite 64bit) (Version: - )
Zero-G Vocal Forge (HKLM-x32\...\Zero-G Vocal Forge) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{CE4DC330-BD45-4D58-89D8-213C0487778D}\InprocServer32 -> C:\Program Files\MusicLab\RealStrat 3\RealStratView.dll ()
CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{FEEC32C4-894D-4B59-B6ED-8AC7B1C84295}\InprocServer32 -> C:\Program Files\MusicLab\RealGuitar 3\RealGuitarView.dll ()
==================== Restore Points =========================
09-08-2014 12:38:28 Windows Update
09-08-2014 12:54:06 Installed Java 7 Update 67
13-09-2014 12:30:23 Windows Update
13-09-2014 17:48:38 Removed M-Audio FastTrackUltra Driver 6.0.8 (x64)
13-09-2014 17:50:18 Installed M-Audio FastTrackUltra Driver 6.0.8 (x64)
13-09-2014 17:52:33 Windows Update
13-09-2014 18:49:46 Removed M-Audio FastTrackUltra Driver 6.0.8 (x64)
13-09-2014 18:51:50 Installed M-Audio Fast Track Ultra Driver 6.1.9 (x64)
20-09-2014 11:07:43 Windows Update
20-09-2014 11:44:35 Installiert Yamaha Steinberg USB Driver
20-09-2014 11:46:24 Installiert Steinberg UR44 Applications
20-09-2014 11:48:38 Installiert Basic FX Suite
20-09-2014 12:01:51 Installiert Yamaha Steinberg USB Driver
20-09-2014 12:03:24 Installiert Steinberg UR44 Applications
24-09-2014 14:58:30 Windows Update
25-09-2014 14:00:22 Installed Waves MultiRack Native and SoundGrid V9r15
02-10-2014 11:09:40 Windows Update
07-10-2014 11:39:13 Windows Update
08-10-2014 12:06:16 Removed Waves MultiRack Native and SoundGrid V9r15
08-10-2014 12:26:52 Removed Waves Complete V9r18
08-10-2014 12:28:19 Installed Waves Complete V9r21
08-10-2014 12:48:13 Installed Waves MultiRack Native and SoundGrid V9r15
08-10-2014 13:04:31 Installed Waves Complete V9r21
08-10-2014 13:16:45 Installed Waves Complete V9r21
08-10-2014 15:05:45 Installed Waves Complete V9r21
08-10-2014 15:36:30 Installed Waves Complete V9r21
08-10-2014 15:45:41 Removed Waves Complete V9r21
08-10-2014 15:48:39 Removed Waves MultiRack Native and SoundGrid V9r15
08-10-2014 15:53:19 Installed Waves Complete V9r21
08-10-2014 16:25:34 Installed Waves Complete V9r21
08-10-2014 16:56:27 Removed Waves Complete V9r21
08-10-2014 18:12:08 Installed Waves Complete V9r21
08-10-2014 18:21:06 Installed Waves Complete V9r21
08-10-2014 19:22:14 Wiederherstellungsvorgang
08-10-2014 19:35:43 Installed Waves Complete V9r21
09-10-2014 15:16:07 Configured Waves Complete V9r21
10-10-2014 12:21:46 Removed Steinberg Cubase 6 64bit
10-10-2014 13:01:03 Windows Update
14-10-2014 12:02:48 Windows Update
16-10-2014 11:31:16 Windows Update
16-10-2014 15:06:14 Windows Update
19-10-2014 13:18:39 Installed Java 7 Update 71
22-10-2014 12:22:33 Windows Update
28-10-2014 09:30:12 Windows Update
28-10-2014 13:13:20 MusicLab RealGuitar
28-10-2014 13:14:28 Gerätetreiber-Paketinstallation: MusicLab,Inc. Audio-, Video- und Gamecontroller
28-10-2014 13:16:39 MusicLab RealLPC
28-10-2014 13:18:35 MusicLab RealStrat
01-11-2014 13:48:03 Windows Update
08-11-2014 11:46:01 Windows Update
22-11-2014 13:22:50 Windows Update
06-12-2014 14:04:32 Configured PACE License Support Win64
13-12-2014 11:41:20 Windows Update
03-01-2015 12:56:20 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {1061FDDF-FD38-4434-923F-B01E4FE9EA0B} - System32\Tasks\{29175965-F787-4528-B3C8-F57146EBD8E8} => C:\Users\\Downloads\DriverSetup.exe
Task: {142BD87F-4E9D-4DD7-BD37-30E762B767FB} - System32\Tasks\{85839F60-C55D-4A03-ADA4-CFBFF70913F4} => pcalua.exe -a "C:\Users\\Downloads\Waves_Complete_V9r18.exe" -d "C:\Users\\Downloads"
Task: {19ABA4F3-17E6-4F42-AB05-A96F73B41FA8} - System32\Tasks\{BB11460A-50B3-494F-9819-514E591A0F96} => pcalua.exe -a Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe -d Q:\Downloads\Tascam\FW-1082_DR_Win_v170
Task: {19FE1324-E749-4E42-AF49-7C829D936723} - System32\Tasks\{DA2C2281-7022-46CA-9B16-D35E131E183B} => C:\Users\\Downloads\DriverSetup.exe
Task: {1DD7E5BB-F8FF-4979-AB40-75A0ACE435F4} - System32\Tasks\{29DBEDF4-CF87-46A4-B759-506861DE03D9} => C:\Users\\Downloads\DriverSetup.exe
Task: {1E879F1F-9418-45B8-A47C-1E96C550DA07} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {23F870EA-19D1-47A4-88EA-D94C1A6C1ECF} - System32\Tasks\{4866F09B-B790-40EA-BF5E-BECC5DA41AE1} => C:\Users\\Downloads\Waves_Complete_V9r18.exe [2014-10-08] ()
Task: {24235CED-6D6E-4576-8077-0B7DE26822E1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {26AEF134-8686-4622-ACE9-13CD77C4229F} - System32\Tasks\{CD71D5AF-98B4-41C1-ABF5-E88C19526654} => pcalua.exe -a Q:\Downloads\Steinberg\WaveLabAspi.exe -d Q:\Downloads\Steinberg
Task: {26B0B279-DF8C-4CFE-9069-73402524C30C} - System32\Tasks\{ADB300C0-352F-4357-89B4-6DD70CC70B1B} => C:\Users\\Downloads\DriverSetup.exe
Task: {298B857C-0B65-4FF1-974A-56F1C6FA985C} - System32\Tasks\{438F3EF0-DDAA-4675-A999-E7A0FD922E27} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {29948ADB-C48B-4D26-928D-AB21C21FAFE0} - System32\Tasks\{40D901C2-504F-4FFA-B15A-16A9F99DEB99} => Q:\Downloads\J-Bridge\jBridgev1.19Setup
Task: {29FB761E-3D1C-4660-9107-8982B85C70AE} - System32\Tasks\{412B8675-D7A0-4674-AD88-F0B1B16B8122} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {2DF5DD56-FBEA-49CD-9443-9D46DEEEF944} - System32\Tasks\{D1C71F96-9AAB-4054-87C3-8673B64EA10B} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {322F7B8A-43DE-4669-8405-F9FEE4815575} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {3D5576D7-F137-456F-ACF7-4E6951BCAAAE} - System32\Tasks\{5F9DF423-7D3C-427E-81DF-1C0A3089E864} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {45D8E408-144E-40D2-9CC8-945D0CC76826} - System32\Tasks\{B7775B54-F6E5-4832-B4BE-E877DE2F3B45} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {4BAC4AD4-0AFA-4599-BF47-E4110BB1E66E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {5D8AAF0F-B35F-44DF-940F-949DD8FB752C} - System32\Tasks\{81C7480D-65DF-4F3C-ADE7-3B3D3A21A13A} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {67A2DD0A-7E44-4505-9669-67B017F40EEE} - System32\Tasks\{626B8230-16CC-48CF-A490-58CEED8E21A8} => pcalua.exe -a "C:\Users\\Desktop\Kontakt 4 Factory Content Setup PC.exe" -d "C:\Users\\Desktop"
Task: {6B31B445-731D-4169-8747-370AC6CE856E} - System32\Tasks\{2AD3E5CD-846C-454C-8F5E-66F9BD146432} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {78468091-1F8B-4889-88B6-09283C587F7A} - System32\Tasks\{5746D425-FB45-49FB-89AC-6D718D8AAB96} => pcalua.exe -a H:\setup.exe -d H:\
Task: {7ABB794D-4402-4F4B-AAE6-A683947D3A5F} - System32\Tasks\{2CBFBC4B-2D9E-4357-AF11-0F0709DF2A74} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {83BF8E31-F091-46C7-90E7-5ABBACBBFB90} - System32\Tasks\{4898AA0A-DFAB-4D6E-90A0-A8B280D99E75} => C:\Users\\Downloads\DriverSetup.exe
Task: {894932C1-A298-4A4C-BCDD-E4BA7387C27F} - System32\Tasks\AdobeAAMUpdater-1.0-=> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-05-16] (Adobe Systems Incorporated)
Task: {95398875-A3E3-45A8-A3A4-1F8424E8D14C} - System32\Tasks\{BFAD21FD-87DD-4D57-8435-CAF757D6A11F} => pcalua.exe -a H:\windows\german\pm\personal\Setup.exe -d H:\windows\german\pm\personal
Task: {9C84F1F2-3512-4CE1-A371-B703568C1E31} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {A3B740FE-B024-42AE-8090-69BF33EA3B3A} - System32\Tasks\{5853299B-4259-442D-85A5-8CC6580067B3} => C:\Users\\Downloads\DriverSetup.exe
Task: {A5428D3A-522E-4698-818D-012D47A16CB5} - System32\Tasks\{07A01D39-F62B-4A0F-A2E0-E53256F212E9} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {ABA56809-A401-4F32-874C-F1A51A3589C4} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {ABE5DB4C-EC69-4E54-A15A-A495205ACB52} - System32\Tasks\{B76EAEE9-550E-4B96-99EA-F859C946EBCA} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_ \jBridgev1.19Setup_ .exeTask: {ABECAB4D-8FF9-45AF-A0D9-51D2A67D355F} - System32\Tasks\{C8AE0818-88F1-4A18-A57B-B441BE68ECA4} => pcalua.exe -a "D:\Retro ADpak Installer.exe" -d D:\
Task: {B076D6CE-39BD-4472-985B-7919F96AAB82} - System32\Tasks\{7C16986C-0877-491D-ABB6-88470C77EE5B} => pcalua.exe -a "G:\Downloads\Universal Audio\UAD-Win-v580.exe" -d "G:\Downloads\Universal Audio"
Task: {B4148331-B027-4713-AE36-D5E9929070D7} - System32\Tasks\{51E7D79B-2CAA-4FFC-ABD0-363FA9548361} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {BA31E6FA-43E9-4DD4-9608-A8C89C69160B} - System32\Tasks\{D1FC40E7-6029-4CC3-A406-CD8EBE42631A} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_\jBridgev1.19Setup_
Task: {BA347F6F-00F2-472A-AF65-19A3D1DFB2A3} - System32\Tasks\{06423D2D-E9C1-4F33-B81A-82C715621358} => pcalua.exe -a "H:\Alicias Keys Setup PC.exe" -d H:\
Task: {BC37EC53-D032-424F-A403-D85B9824E3F9} - System32\Tasks\{B04DD4E4-4CDD-43D9-8750-AF953E20A112} => pcalua.exe -a "O:\Program Files (x86)\VSL\Vienna Instruments\LibraryInstaller.exe" -d "O:\Program Files (x86)\VSL\Vienna Instruments"
Task: {BD10712F-BDCC-40A6-9840-FF84C52BE6FD} - System32\Tasks\{2C46918F-A593-4956-88DE-8F999A59AE9C} => pcalua.exe -a "H:\Independence Pro 2.5.4 Software Suite 64 E-License.exe" -d H:\
Task: {BF7ABB10-6A68-409E-8008-EB534F8F8705} - System32\Tasks\{D398A544-CFB3-46E8-B5DF-626FF232C43B} => pcalua.exe -a "C:\Users\\Downloads\install_flash_player.exe" -d "C:\Users\\Downloads"
Task: {C18139FF-A0AB-4047-8DDD-39525E452E10} - System32\Tasks\{6904D156-3764-4007-AEC4-9544A7DA37E0} => C:\Users\\Downloads\DriverSetup.exe
Task: {C37AE386-CBA9-43AE-9844-B2CE7224BE33} - System32\Tasks\{1D409CDB-4184-4914-A0E6-97AD74AC8C6D} => H:\windows\german\pm\personal\Setup.exe
Task: {C667DE3E-8FA6-443B-9CCC-7B757AB7C2C4} - System32\Tasks\{85AF413A-1425-4DA2-BFA3-8E5B4A8E3B8B} => pcalua.exe -a "D:\Cubase 7 for Windows\Setup.exe" -d "D:\Cubase 7 for Windows"
Task: {C73A72CF-5138-48BE-BF08-78546B184472} - System32\Tasks\{0BCE0B9C-45A2-40B0-9941-9F39BDACB669} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_ \jBridgev1.19Setup_
Task: {C92F3D73-0DF8-4A42-8396-F321B5E87D9A} - System32\Tasks\{EFB4A033-2F63-4013-82D3-FEDE6E7A8D55} => C:\Windows\System32\SoftLcd1082.exe
Task: {CA870B03-DCDD-48C0-98C2-D714511B21F1} - System32\Tasks\{C14BF85D-4129-4CE4-AD72-D630D327CC26} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_
Task: {D0CB62B8-3961-4DED-AC91-4AE23D264B6B} - System32\Tasks\{9B31F731-5050-4586-98EF-74A01C60D886} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {D401F2A2-731E-4682-BF5A-9AC9585DE606} - System32\Tasks\{674EA2D3-4F3C-4EA3-8749-2D08682045A0} => pcalua.exe -a "C:\Users\\Downloads\DriverSetup.exe" -d "C:\Users\ \Downloads"
Task: {D57D1B7C-1831-4FAD-BF64-203A05D8D136} - System32\Tasks\{E6A7A111-7169-4964-9496-AA39C0C5D697} => pcalua.exe -a H:\Autorun.exe -d H:\
Task: {DF1EB108-2A31-441E-971D-1CD931F8A30E} - System32\Tasks\{C4C278E8-DFDC-4D88-A004-A03664E2C937} => C:\Program Files\Steinberg\Asio\asioglldsetup.exe [2010-12-06] (Steinberg Media Technologies)
Task: {E2AD9959-656C-4596-9ABE-C3AB27091F0E} - System32\Tasks\{E3C7FEEC-A48E-4A6B-8D20-9CDC54920125} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {E618B9A0-0D06-45B0-BCFA-BF36790B1C72} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {E9E16472-D60C-48EA-B60E-E2548DF10B2B} - System32\Tasks\{B74E7334-75CB-455D-8C95-F754C20EBF68} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {EB90BB02-A30C-4C16-A089-2811D2AA2EB7} - System32\Tasks\{665362E6-1AD6-479D-ABD8-BCF17AE72325} => C:\Users\\Downloads\DriverSetup.exe
Task: {F2D8BAA3-CBCA-4E56-B0D4-0E6B5B601F6E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {FD61B29E-C3EA-4605-9193-7EF307CC5001} - System32\Tasks\{B6B539BF-11D3-4E9C-BB34-34F0B21FCC70} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_
Task: {FF6AC220-F9ED-43A6-A526-138A6488B389} - System32\Tasks\{8F48DE62-F226-4564-A004-BC06D47FE024} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
==================== Loaded Modules (whitelisted) =============
2013-08-11 13:11 - 2014-03-04 14:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-02-04 22:28 - 2012-01-09 19:44 - 00193536 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2012-06-13 00:10 - 2010-01-19 03:31 - 00072304 _____ () C:\Windows\SysWOW64\XSrvSetup.exe
2012-01-13 13:04 - 2012-01-13 13:04 - 00219760 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
2012-08-30 22:23 - 2012-08-30 22:23 - 00459192 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\dblite.dll
2012-04-27 17:33 - 2012-04-27 17:33 - 00435552 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ulxmlrpcpp.dll
2012-04-02 15:52 - 2012-04-02 15:52 - 02822215 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Normal.dll
2012-03-26 08:23 - 2012-03-26 08:23 - 00614467 _____ () C:\Program Files (x86)\GIGABYTE\ET6\work.dll
2011-12-06 13:44 - 2011-12-06 13:44 - 00106496 _____ () C:\Program Files (x86)\GIGABYTE\ET6\SF.dll
2008-05-07 14:22 - 2008-05-07 14:22 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\CIAMIB.dll
2012-01-20 15:18 - 2012-01-20 15:18 - 01478724 _____ () C:\Program Files (x86)\GIGABYTE\ET6\OCK.dll
2011-09-14 16:12 - 2011-09-14 16:12 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\ycc.dll
2010-10-19 09:59 - 2010-10-19 09:59 - 00065536 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GPTT.dll
2010-06-24 14:50 - 2010-06-24 14:50 - 00094208 _____ () C:\Program Files (x86)\GIGABYTE\ET6\IccLibDll.dll
2011-03-01 18:00 - 2011-03-01 18:00 - 00126976 _____ () C:\Program Files (x86)\GIGABYTE\ET6\StabilityLib.dll
2011-10-18 08:26 - 2011-10-18 08:26 - 00024576 _____ () C:\Program Files (x86)\GIGABYTE\ET6\STT.dll
2012-03-01 08:14 - 2012-03-01 08:14 - 01335362 _____ () C:\Program Files (x86)\GIGABYTE\ET6\HM.dll
2012-04-02 12:42 - 2012-04-02 12:42 - 00192512 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GVTunner.dll
2003-02-14 13:11 - 2003-02-14 13:11 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Sound.dll
2010-06-10 14:52 - 2010-06-10 14:52 - 00110592 _____ () C:\Program Files (x86)\GIGABYTE\ET6\AMD8.dll
2010-03-12 04:40 - 2010-03-12 04:40 - 04449632 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Platform.dll
2010-03-12 04:40 - 2010-03-12 04:40 - 00423256 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Device.dll
2012-04-02 14:36 - 2012-04-02 14:36 - 00294912 _____ () C:\Program Files (x86)\GIGABYTE\ET6\MFCCPU.DLL
2012-08-30 22:24 - 2012-08-30 22:24 - 02126264 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\QtCore4.dll
2012-08-30 22:24 - 2012-08-30 22:24 - 07422392 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\QtGui4.dll
2012-08-30 22:24 - 2012-08-30 22:24 - 02453944 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\QtDeclarative4.dll
2012-08-30 22:24 - 2012-08-30 22:24 - 01270200 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\QtScript4.dll
2012-08-30 22:24 - 2012-08-30 22:24 - 00192952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\QtSql4.dll
2012-08-30 22:24 - 2012-08-30 22:24 - 00795064 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\QtNetwork4.dll
2011-09-05 19:36 - 2011-09-05 19:36 - 00025088 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\imageformats\qgif4.dll
2011-09-05 19:36 - 2011-09-05 19:36 - 00180224 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\imageformats\qjpeg4.dll
2014-11-22 13:44 - 2014-11-22 13:44 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2012-06-13 00:09 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-01-03 12:57 - 2015-01-03 12:57 - 16843952 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Program Files\Common Files\System:bkJR4Q5ekubuEytkHOHN9FDldZk
AlternateDataStreams: C:\ProgramData\Microsoft:0JpKqUFDcPdEORJ8qNFp8w
AlternateDataStreams: C:\ProgramData\Microsoft:5hYrtYXv4RFuvoGmPrGD2NLHTREw
AlternateDataStreams: C:\ProgramData\Microsoft:5KfNWpWNPX1wbFxFO3E9ImnmfLp
AlternateDataStreams: C:\ProgramData\Microsoft:9kl92Sfgv9VOx5y487Gb
AlternateDataStreams: C:\ProgramData\Microsoft:e6QV9RBqH5tBpkOJ825uc44
AlternateDataStreams: C:\ProgramData\Microsoft:EmZUO1ghceEFEfgohiyQTSr
AlternateDataStreams: C:\ProgramData\Microsoft:FIzD2p7hRpzMsiWzLU4FWAu4DG2Y
AlternateDataStreams: C:\ProgramData\Microsoft:gEDtHGZl5VBhyUDsChb
AlternateDataStreams: C:\ProgramData\Microsoft:iBRVEzFW1llEoLZcS3VLEeVCW
AlternateDataStreams: C:\ProgramData\Microsoft:JFbsLoAG7ylh6FO5F5B
AlternateDataStreams: C:\ProgramData\Microsoft:lJgRnpcsZyHzZ9RcWOe669vqjX
AlternateDataStreams: C:\ProgramData\Microsoft:mzLKEwry2nZIbRjOEIHNQyz
AlternateDataStreams: C:\ProgramData\Microsoft:P2kNTjY7GAAENqAnpY
AlternateDataStreams: C:\ProgramData\Microsoft:PbjOONTVgtPL20OMMjQAGQFm
AlternateDataStreams: C:\ProgramData\Microsoft:pyWUynYKzFVcmjsLti7Jn2f
AlternateDataStreams: C:\ProgramData\Microsoft:qpD21ezWETolKR7zxZN132
AlternateDataStreams: C:\ProgramData\Microsoft:rTbZl3fuV0KA1SBvenaKkXxQGQGGNo
AlternateDataStreams: C:\ProgramData\Microsoft:u8EGYeTR5GuwkeSSaotMc8NQ1BG3Tt
AlternateDataStreams: C:\ProgramData\Microsoft:V7JFxnYuTdgxFTad71b7riK9u2
AlternateDataStreams: C:\\Users\Cookies:0HxNukw9hQPeAlOyhj
AlternateDataStreams: C:\Users\\Cookies:2sTxxI2AoieXEXStwlc
AlternateDataStreams: C:\Users\\Cookies:fqAY3vHSNIV8wb0vtZQlu58L1sO
AlternateDataStreams: C:\Users\\Cookies:maNpXg26EfLhAYLVCg5bm9NQ
AlternateDataStreams: C:\Users\\Lokale Einstellungen:9C8oVTTJe0Mg4r6XIib3b
AlternateDataStreams: C:\Users\\Lokale Einstellungen:9CsZiNQcryUE7kqO6ZBBdG5
AlternateDataStreams: C:\Users\\Lokale Einstellungen:GGSz4VHky0otQFX6En2N1VP
AlternateDataStreams: C:\Users\\Lokale Einstellungen:To2ogLfHDD3i7B2vbeAdv7PjjFaB
AlternateDataStreams: C:\Users\\Lokale Einstellungen:WvM0t3Ek5IOBgKzW9cw7l
AlternateDataStreams: C:\Users\\Lokale Einstellungen:XMujKqO45NECvrUh7LWwPD
AlternateDataStreams: C:\Users\\AppData\Local:9C8oVTTJe0Mg4r6XIib3b
AlternateDataStreams: C:\Users\\AppData\Local:9CsZiNQcryUE7kqO6ZBBdG5
AlternateDataStreams: C:\Users\\AppData\Local:GGSz4VHky0otQFX6En2N1VP
AlternateDataStreams: C:\Users\\AppData\Local:To2ogLfHDD3i7B2vbeAdv7PjjFaB
AlternateDataStreams: C:\Users\\AppData\Local:WvM0t3Ek5IOBgKzW9cw7l
AlternateDataStreams: C:\Users\\AppData\Local:XMujKqO45NECvrUh7LWwPD
AlternateDataStreams: C:\Users\\AppData\Local\Anwendungsdaten:9C8oVTTJe0Mg4r6XIib3b
AlternateDataStreams: C:\Users\\AppData\Local\Anwendungsdaten:9CsZiNQcryUE7kqO6ZBBdG5
AlternateDataStreams: C:\Users\\AppData\Local\Anwendungsdaten:GGSz4VHky0otQFX6En2N1VP
AlternateDataStreams: C:\Users\\AppData\Local\Anwendungsdaten:To2ogLfHDD3i7B2vbeAdv7PjjFaB
AlternateDataStreams: C:\Users\\AppData\Local\Anwendungsdaten:WvM0t3Ek5IOBgKzW9cw7l
AlternateDataStreams: C:\Users\\AppData\Local\Anwendungsdaten:XMujKqO45NECvrUh7LWwPD
AlternateDataStreams: C:\Users\\AppData\Local\Temp:EkLl8viNdpZaDt5BtyibJZWv
AlternateDataStreams: C:\Users\\AppData\Local\Temp:O3Gupa96puwZsDBndwL
AlternateDataStreams: C:\Users\\AppData\Local\Temp:SulGbcoM5k5htOkrT6oFYFHf
AlternateDataStreams: C:\Users\\AppData\Local\Temp:ughxnTcu7B6kj3rj
AlternateDataStreams: C:\Users\\AppData\Local\Temp:VTgSC9p3AXvhXEs6X1UKGxWVvAyMr
AlternateDataStreams: C:\Users\\AppData\Local\Temporary Internet Files:0L9d5Wklr9wAn9cdrskJuAF6
AlternateDataStreams: C:\Users\\AppData\Local\Temporary Internet Files:fhI0qFS4NI538e7huuTv8eRfF
AlternateDataStreams: C:\Users\\AppData\Local\Temporary Internet Files:xe6TJQ53vIYg0hq1z2ARUrHBzOpe
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
MSCONFIG\startupreg: AcronisTimounterMonitor => C:\Program Files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DigidesignMMERefresh => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: StartFw1082Panel => fw1082panel.exe H
MSCONFIG\startupreg: STCAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
MSCONFIG\startupreg: ZyngaGamesAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
========================= Accounts: ==========================
28D925BEF4154602B49E (S-1-5-21-25170337-1842596019-2157349911-1005 - Limited - Enabled)
Administrator (S-1-5-21-25170337-1842596019-2157349911-500 - Administrator - Disabled)
E14ACD8B9526477D8048 (S-1-5-21-25170337-1842596019-2157349911-1003 - Limited - Enabled)
Gast (S-1-5-21-25170337-1842596019-2157349911-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-25170337-1842596019-2157349911-1008 - Limited - Enabled)
(S-1-5-21-25170337-1842596019-2157349911-1000 - Administrator - Enabled) => C:\Users\
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/03/2015 01:45:29 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (01/03/2015 01:45:29 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/03/2015 01:45:29 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/03/2015 00:58:29 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "S:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (01/03/2015 00:54:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (01/03/2015 00:54:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (01/03/2015 00:54:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (12/13/2014 03:24:20 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"2" in Zeile WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0".
Definition: WavesQtLibs_4.8.2_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (12/13/2014 02:15:20 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (12/13/2014 02:15:20 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
System errors:
=============
Error: (01/03/2015 01:39:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Acronis Try And Decide Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/03/2015 01:39:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Digidesign MME Refresh Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/03/2015 01:39:07 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Sentinel64" ist vom Dienst "Treiber für parallelen Anschluss" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/03/2015 01:39:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "cvintdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (01/03/2015 01:39:07 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\cvintdrv.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (01/03/2015 01:37:30 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {1EF75F33-893B-4E8F-9655-C3D602BA4897}
Error: (01/03/2015 00:48:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Acronis Try And Decide Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/03/2015 00:48:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Digidesign MME Refresh Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (01/03/2015 00:47:55 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Sentinel64" ist vom Dienst "Treiber für parallelen Anschluss" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/03/2015 00:47:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "cvintdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2010-08-05 17:18:25.747
Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-08-05 17:18:25.716
Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-08-05 17:18:23.173
Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-08-05 17:18:23.157
Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Percentage of memory in use: 17%
Total physical RAM: 16346.31 MB
Available physical RAM: 13527.1 MB
Total Pagefile: 32690.8 MB
Available Pagefile: 29540.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (Win7 System) (Fixed) (Total:467.64 GB) (Free:141.04 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (Lokales Laufwerk ) (Fixed) (Total:99.82 GB) (Free:81.64 GB) NTFS
Drive f: (W7 Cubase/WaveLab) (Fixed) (Total:467.64 GB) (Free:297.73 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (W7 Adobe/Daten/Sonstiges) (Fixed) (Total:463.87 GB) (Free:277.48 GB) NTFS
Drive i: (Plug Ins 2) (Fixed) (Total:463.87 GB) (Free:212.9 GB) NTFS
Drive k: (Lokales Laufwerk) (Fixed) (Total:123.68 GB) (Free:61.95 GB) NTFS
Drive o: (W7 Plug Ins) (Fixed) (Total:708.01 GB) (Free:322.25 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B0C5A5B3)
Partition 1: (Active) - (Size=467.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1A679F39)
Partition 1: (Not Active) - (Size=123.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=708 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=99.8 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 88618861)
Partition 1: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=467.6 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ich hoffe das ich jetzt alles richtig gemacht habe, wenn ich jetzt falsch geantwortet habe, sorry ist mein erster Beitrag hier. Geändert von Motif ES 6 (03.01.2015 um 15:25 Uhr) |
|
03.01.2015, 15:56
| #4 |
| /// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.01.2015, 16:04
| #5 |
| | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Hallo schrauber, Danke fürs schnelle Feedback. Was die JBridge betrifft, so kann ich dieses Programm nicht löschen. Es ist ein legal gekauftes Programm. Es dient als Brücke in eine Digitalen Audio Workstation (DAW), um unterschiedliche Plug Ins für die DAW nutzbar zu machen. In meinem Fall "bridget" sie alte 32Bit Plug Ins in eine 64 Bit Arbeitsumgebung. Diese JBridge ist ein unverzichtbares Tool für Arbeiten mit VST Effekten in DAW´s und weltweit sehr verbreitet und anerkannt. Ich hoffe, dass ich die jetzt nicht runterschmeissen muss, weil die kann unmöglich der Trojaner sein. Ist wie erwähnt auch ein legal zu kaufendes Programm. Gruss |
|
03.01.2015, 16:22
| #6 |
| /// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Dann lass es drauf. Wahrscheinlich bringt dieses Tool nur irgend ne Tolbar mit die keiner brauch.
__________________ --> W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss |
|
03.01.2015, 16:31
| #7 |
| | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Ok, Danke. Das mit Combofix ist wohl unabhängig von der JBridge, oder ? Also soll ich das trotzdem ausführen ? Gruß |
|
03.01.2015, 17:43
| #8 |
| /// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Combofix auf jeden Fall ausführen 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.01.2015, 17:54
| #9 |
| | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Ok, mache ich. Nur schaffe ich es heute zeitlich nicht mehr. Muss ich morgen dran. Vielen Dank bis hierher. Gruß |
|
03.01.2015, 19:10
| #10 |
| /// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.01.2015, 13:09
| #11 |
| | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Hallo schrauber, habe jetzt Combofix arbeiten lassen, hier das Log-File: Combofix Logfile: Code:
ATTFilter ComboFix 15-01-04.01 - xxxxx 04.01.2015 12:29:14.1.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.16346.13837 [GMT 1:00]
ausgeführt von:: c:\users\xxxxx\Desktop\ComboFix.exe
AV: Kaspersky Total Security *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
FW: Kaspersky Total Security *Disabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
SP: Kaspersky Total Security *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\xxxxx\AppData\Roaming\msregsvv.dll
c:\users\Public\sdelevURL.tmp
c:\windows\isRS-000.tmp
c:\windows\msvcr71.dll
c:\windows\SysWow64\hookdll.dll
c:\windows\SysWow64\msvcsv60.dll
c:\windows\wininit.ini
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-12-04 bis 2015-01-04 ))))))))))))))))))))))))))))))
.
.
2015-01-03 21:23 . 2013-05-06 08:13 110176 ----a-w- c:\windows\system32\klfphc.dll
2015-01-03 21:22 . 2015-01-03 21:22 -------- d-----w- c:\windows\ELAMBKUP
2015-01-03 21:21 . 2015-01-03 21:49 818888 ----a-w- c:\windows\system32\drivers\klif.sys
2015-01-03 21:21 . 2015-01-03 21:49 150536 ----a-w- c:\windows\system32\drivers\klflt.sys
2015-01-03 21:21 . 2014-08-12 17:33 246456 ----a-w- c:\windows\system32\drivers\klhk.sys
2015-01-03 21:17 . 2015-01-03 21:17 -------- dc-h--w- c:\programdata\{B18B6B47-547B-4884-B977-E30BBCB3C043}
2015-01-03 21:16 . 2015-01-03 21:16 -------- dc-h--w- c:\programdata\{0FBC18ED-38E5-47CD-909E-26B2242C6C2D}
2015-01-03 21:15 . 2015-01-03 21:15 -------- dc-h--w- c:\programdata\{074595B0-0A1C-4DFF-AA89-993E1954016E}
2015-01-03 21:14 . 2015-01-03 21:14 -------- dc-h--w- c:\programdata\{2E9C94ED-C152-4D5D-8E21-AAE23373844C}
2015-01-03 16:47 . 2012-08-10 05:26 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2015-01-03 16:09 . 2015-01-03 16:09 189792 ----a-w- c:\windows\PSEXESVC.exe
2015-01-03 15:20 . 2015-01-03 15:51 -------- d-----w- c:\program files (x86)\iLok License Manager
2015-01-03 15:20 . 2015-01-03 15:51 -------- d-----w- c:\program files (x86)\Common Files\PACE
2015-01-03 14:57 . 2015-01-03 14:57 -------- dc-h--w- c:\programdata\{90D8CE90-3E6B-4034-A281-BC9F19B60A5B}
2015-01-03 13:37 . 2015-01-03 13:38 -------- d-----w- C:\FRST
2015-01-03 11:55 . 2014-12-13 05:09 144384 ----a-w- c:\windows\system32\ieUnatt.exe
2015-01-03 11:55 . 2014-12-13 03:33 115712 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-12-13 12:31 . 2014-12-13 12:31 -------- d-----w- c:\windows\system32\appraiser
2014-12-13 10:43 . 2014-10-18 02:05 4121600 ----a-w- c:\windows\system32\mf.dll
2014-12-13 10:43 . 2014-10-18 01:33 3209728 ----a-w- c:\windows\SysWow64\mf.dll
2014-12-13 10:36 . 2014-12-04 02:50 413184 ----a-w- c:\windows\system32\generaltel.dll
2014-12-13 10:36 . 2014-12-04 02:50 741376 ----a-w- c:\windows\system32\invagent.dll
2014-12-13 10:36 . 2014-12-04 02:50 396800 ----a-w- c:\windows\system32\devinv.dll
2014-12-13 10:36 . 2014-12-04 02:50 227328 ----a-w- c:\windows\system32\aepdu.dll
2014-12-13 10:36 . 2014-12-04 02:50 192000 ----a-w- c:\windows\system32\aepic.dll
2014-12-13 10:36 . 2014-12-04 02:44 1083392 ----a-w- c:\windows\system32\aeinv.dll
2014-12-13 10:36 . 2014-12-01 23:28 1232040 ----a-w- c:\windows\system32\aitstatic.exe
2014-12-06 13:03 . 2014-12-06 13:03 -------- d-----w- c:\program files\Bonjour
2014-12-06 13:03 . 2014-12-06 13:03 -------- d-----w- c:\program files (x86)\Bonjour
2014-12-06 11:32 . 2014-12-06 11:32 129752 ----a-w- c:\windows\system32\drivers\6A46048A.sys
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-01-04 11:13 . 2012-06-12 17:24 30528 ----a-w- c:\windows\GVTDrv64.sys
2015-01-04 11:13 . 2012-06-13 07:45 25640 ----a-w- c:\windows\gdrv.sys
2015-01-03 21:49 . 2014-08-13 18:34 77512 ----a-w- c:\windows\system32\drivers\klwtp.sys
2015-01-03 16:41 . 2011-05-28 12:40 96 ----a-w- c:\windows\system32\msvcsv60.dll
2015-01-03 11:57 . 2012-06-07 12:31 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-01-03 11:57 . 2011-05-20 22:06 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-12-13 10:44 . 2010-01-25 17:22 112710672 ----a-w- c:\windows\system32\MRT.exe
2014-11-18 13:56 . 2014-11-18 13:56 1202848 ----a-w- c:\windows\SysWow64\FM20.DLL
2014-11-11 03:08 . 2014-11-22 12:18 241152 ----a-w- c:\windows\system32\pku2u.dll
2014-11-11 03:08 . 2014-11-22 12:18 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-11-11 02:44 . 2014-11-22 12:18 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-11 02:44 . 2014-11-22 12:18 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-04 13:30 . 2010-01-25 15:48 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-11-02 04:20 . 2014-11-22 12:28 11632448 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FC9A38FA-82C0-4131-974C-4E179947FE23}\mpengine.dll
2014-10-25 01:57 . 2014-11-22 12:17 77824 ----a-w- c:\windows\system32\packager.dll
2014-10-25 01:32 . 2014-11-22 12:17 67584 ----a-w- c:\windows\SysWow64\packager.dll
2014-10-19 12:19 . 2014-10-19 12:20 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-18 02:05 . 2014-11-22 12:16 861696 ----a-w- c:\windows\system32\oleaut32.dll
2014-10-18 01:33 . 2014-11-22 12:16 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2014-10-14 02:16 . 2014-11-22 12:18 155064 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2014-10-14 02:13 . 2014-11-22 12:18 683520 ----a-w- c:\windows\system32\termsrv.dll
2014-10-14 02:13 . 2014-11-22 12:17 3241984 ----a-w- c:\windows\system32\msi.dll
2014-10-14 02:12 . 2014-11-22 12:18 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-10-14 02:09 . 2014-11-22 12:18 146432 ----a-w- c:\windows\system32\msaudite.dll
2014-10-14 02:07 . 2014-11-22 12:18 681984 ----a-w- c:\windows\system32\adtschema.dll
2014-10-14 01:50 . 2014-11-22 12:18 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-10-14 01:50 . 2014-11-22 12:17 2363904 ----a-w- c:\windows\SysWow64\msi.dll
2014-10-14 01:49 . 2014-11-22 12:18 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-10-14 01:47 . 2014-11-22 12:18 146432 ----a-w- c:\windows\SysWow64\msaudite.dll
2014-10-14 01:46 . 2014-11-22 12:18 681984 ----a-w- c:\windows\SysWow64\adtschema.dll
2014-10-10 00:57 . 2014-11-22 12:17 3198976 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{014F27E2-6D75-4E42-A0E9-2A2C68498AFA}"
[HKEY_CLASSES_ROOT\CLSID\{014F27E2-6D75-4E42-A0E9-2A2C68498AFA}]
2015-01-03 21:31 552232 ----a-w- c:\program files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\shellex.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]
"KORG USB-MIDI Driver"="c:\program files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe" [2011-03-29 393616]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-27 291608]
"Nikon Message Center 2"="c:\program files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe" [2011-10-30 571392]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-11-20 1021128]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-09-26 271744]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"midi1"=KORGUM64.DRV
"aux8"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys;c:\windows\SYSNATIVE\Drivers\Sentinel64.sys [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]
R3 BEHRINGER_2902;usb-audio.de driver for BEHRINGER USB AUDIO;c:\windows\system32\Drivers\BUSB2902.sys;c:\windows\SYSNATIVE\Drivers\BUSB2902.sys [x]
R3 BUSB_AUDIO_WDM;BEHRINGER USB WDM AUDIO;c:\windows\system32\drivers\busbwdm.sys;c:\windows\SYSNATIVE\drivers\busbwdm.sys [x]
R3 cpuz134;cpuz134;c:\program files (x86)\CPUID\PC Wizard 2010\pcwiz_x64.sys;c:\program files (x86)\CPUID\PC Wizard 2010\pcwiz_x64.sys [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe [x]
R3 Fw1082;Driver for FW-1082;c:\windows\system32\Drivers\Fw1082x64.sys;c:\windows\SYSNATIVE\Drivers\Fw1082x64.sys [x]
R3 Fw1082WdmService;Driver for FW-1082 WDM;c:\windows\system32\Drivers\FW1082Wdmx64.sys;c:\windows\SYSNATIVE\Drivers\FW1082Wdmx64.sys [x]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MADFUFTU;Service for M-Audio FastTrackUltra DFU;c:\windows\system32\DRIVERS\MAudioFastTrackUltra_DFU.sys;c:\windows\SYSNATIVE\DRIVERS\MAudioFastTrackUltra_DFU.sys [x]
R3 MAUSBFASTTRACKULTRA;Service for M-Audio Fast Track Ultra;c:\windows\system32\DRIVERS\MAudioFastTrackUltra.sys;c:\windows\SYSNATIVE\DRIVERS\MAudioFastTrackUltra.sys [x]
R3 paeusbaudio;paeusbaudio;c:\windows\system32\DRIVERS\paeusbaudio_x64.sys;c:\windows\SYSNATIVE\DRIVERS\paeusbaudio_x64.sys [x]
R3 paeusbaudiodsp;paeusbaudiodsp;c:\windows\system32\DRIVERS\paeusbaudiodsp_x64.sys;c:\windows\SYSNATIVE\DRIVERS\paeusbaudiodsp_x64.sys [x]
R3 paeusbaudioks;paeusbaudioks;c:\windows\system32\DRIVERS\paeusbaudioks_x64.sys;c:\windows\SYSNATIVE\DRIVERS\paeusbaudioks_x64.sys [x]
R3 PSEXESVC;PSEXESVC;c:\windows\PSEXESVC.exe;c:\windows\PSEXESVC.exe [x]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys;c:\windows\SYSNATIVE\pwdrvio.sys [x]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys;c:\windows\SYSNATIVE\pwdspio.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 rspLLL;rspLLL;c:\windows\system32\DRIVERS\rspLLL64.sys;c:\windows\SYSNATIVE\DRIVERS\rspLLL64.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TASCAM_US1800;TASCAM US-1800 Audio Device driver;c:\windows\system32\Drivers\tus1800u.sys;c:\windows\SYSNATIVE\Drivers\tus1800u.sys [x]
R3 TASCAM_US1800_MIDI;TASCAM US-1800 WDM MIDI Device;c:\windows\system32\drivers\tus1800m.sys;c:\windows\SYSNATIVE\drivers\tus1800m.sys [x]
R3 TASCAM_US1800_WDM;TASCAM US-1800 WDM;c:\windows\system32\drivers\tus1800a.sys;c:\windows\SYSNATIVE\drivers\tus1800a.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 UPnPService;UPnPService;c:\program files (x86)\Common Files\MAGIX Shared\UPnPService\UPnPService.exe;c:\program files (x86)\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [x]
R4 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S0 cm_km_w;Kaspersky Lab Crypto Module (FDE PDK);c:\windows\system32\DRIVERS\cm_km_w.sys;c:\windows\SYSNATIVE\DRIVERS\cm_km_w.sys [x]
S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys;c:\windows\SYSNATIVE\DRIVERS\CSCrySec.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vididr;Acronis Virtual Disk;c:\windows\system32\DRIVERS\vididr.sys;c:\windows\SYSNATIVE\DRIVERS\vididr.sys [x]
S0 vidsflt67;Acronis Disk Storage Filter (67);c:\windows\system32\DRIVERS\vsflt67.sys;c:\windows\SYSNATIVE\DRIVERS\vsflt67.sys [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]
S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys;c:\windows\SYSNATIVE\DRIVERS\CSVirtualDiskDrv.sys [x]
S1 klhk;klhk;c:\windows\system32\DRIVERS\klhk.sys;c:\windows\SYSNATIVE\DRIVERS\klhk.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 Klwtp;Klwtp;c:\windows\system32\DRIVERS\klwtp.sys;c:\windows\SYSNATIVE\DRIVERS\klwtp.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 afcdpsrv;Acronis Nonstop Backup Service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
S2 AVP15.0.1;Kaspersky Anti-Virus Service 15.0.1;c:\program files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe;c:\program files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [x]
S2 DigiNet;Digidesign Ethernet Support;c:\windows\system32\DRIVERS\diginet.sys;c:\windows\SYSNATIVE\DRIVERS\diginet.sys [x]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe;c:\windows\SysWOW64\XSrvSetup.exe [x]
S2 kldisk;kldisk;c:\windows\system32\DRIVERS\kldisk.sys;c:\windows\SYSNATIVE\DRIVERS\kldisk.sys [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 syncagentsrv;Acronis Sync Agent Service;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 hypaudio;hypaudio;c:\windows\system32\DRIVERS\hypaudio64.sys;c:\windows\SYSNATIVE\DRIVERS\hypaudio64.sys [x]
S3 hypkern;hypkern;c:\windows\system32\drivers\hypkern64.sys;c:\windows\SYSNATIVE\drivers\hypkern64.sys [x]
S3 iLokDrvr;Usb Driver;c:\windows\system32\DRIVERS\iLokDrvr.sys;c:\windows\SYSNATIVE\DRIVERS\iLokDrvr.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 klflt;Kaspersky Lab Kernel DLL;c:\windows\system32\DRIVERS\klflt.sys;c:\windows\SYSNATIVE\DRIVERS\klflt.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 KORGUMDS;KORG USB-MIDI Driver for Windows;c:\windows\system32\Drivers\KORGUM64.SYS;c:\windows\SYSNATIVE\Drivers\KORGUM64.SYS [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 mlkumidi;MusicLab Virtual Miniport MIDI Driver;c:\windows\system32\drivers\mlkumidi.sys;c:\windows\SYSNATIVE\drivers\mlkumidi.sys [x]
S3 NIWinCDEmu;ISO Mounter driver;c:\windows\system32\DRIVERS\NIWinCDEmu.sys;c:\windows\SYSNATIVE\DRIVERS\NIWinCDEmu.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 SynUSB64;eLicenser;c:\windows\system32\DRIVERS\SynUSB64.sys;c:\windows\SYSNATIVE\DRIVERS\SynUSB64.sys [x]
S3 UAD2System;UAD-2 Global System Service;c:\windows\system32\DRIVERS\UAD2System.sys;c:\windows\SYSNATIVE\DRIVERS\UAD2System.sys [x]
S3 YMIDUSBW;Yamaha USB-MIDI Driver (WDM);c:\windows\system32\drivers\ymidusbx64.sys;c:\windows\SYSNATIVE\drivers\ymidusbx64.sys [x]
S3 ysusb64;Yamaha Steinberg USB Audio;c:\windows\system32\drivers\ysusb64.sys;c:\windows\SYSNATIVE\drivers\ysusb64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 10:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]
@="{014F27E2-6D75-4E42-A0E9-2A2C68498AFA}"
[HKEY_CLASSES_ROOT\CLSID\{014F27E2-6D75-4E42-A0E9-2A2C68498AFA}]
2015-01-03 21:31 726312 ----a-w- c:\program files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\shellex.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-05-16 500208]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-05-29 1279480]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-05-29 2350880]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\Drivers32]
"midi1"=KORGUM64.DRV
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://t-online.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <-loopback>;www.joosoft.com;*.local
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {{09A10376-994C-4BBF-9121-F50CF7BA237E} - {F2A56BFE-7911-451A-BC74-A9C3C2E95126} - c:\program files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\fu0cgvgf.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://t-online.de/
FF - prefs.js: network.proxy.type - 4
FF - user.js: plugin.state.npcontentblocker - 2
FF - user.js: plugin.state.nponlinebanking - 2
FF - user.js: plugin.state.npvkplugin - 2
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-STCAgent - c:\program files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe
Wow6432Node-HKLM-Run-ZyngaGamesAgent - c:\program files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers- - (no file)
ShellIconOverlayIdentifiers- - (no file)
ShellIconOverlayIdentifiers- - (no file)
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
AddRemove-InstallShield_{595AC242-897D-494C-A278-2A2781403824} - c:\program files (x86)\InstallShield Installation Information\{595AC242-897D-494C-A278-2A2781403824}\setup.exe
AddRemove-InstallShield_{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F} - c:\program files (x86)\InstallShield Installation Information\{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}\setup.exe
AddRemove-Softube Plug-Ins (VST 32-bit) - c:\program files (x86)\Softube\Plug-Ins VST 32-bit\uninstall.exe
AddRemove-{43E7798A-248E-4A3D-9969-FEA63543A462} - c:\programdata\{1BA560E1-ECFF-4CF7-80E9-11C8BE48A978}\Kontakt 4 Setup PC.exe
AddRemove-{5E9CC0AB-E0E0-4138-A3E4-7ADE83AC5C7F} - c:\programdata\{BD76B45E-45BE-4F37-8334-C8F16C9EEE15}\Alicias Keys 1.2 Setup PC.exe
AddRemove-{65B7E38D-10F8-4B1A-8EE3-BF2362CF12AE} - c:\programdata\{98352F45-F344-4528-B4AA-8BB717C0157D}\Kontakt 4 Factory Content Setup PC.exe
AddRemove-{B80954EE-5CA9-4202-BB8C-0DC3E332F47F} - c:\programdata\{A7689876-F0D2-4DC6-9C70-CA306AA80853}\Kontakt 3 Setup.exe
AddRemove-{EB367D86-AC0E-41D1-93AE-6DE1A1C5C383} - c:\programdata\{43FD0242-9E7E-4C27-8337-4F1786A71A73}\Kontakt 3 Factory Content Setup PC.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\PaceLicenseDServices]
"ImagePath"="\"c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe\" -u https://activation.paceap.com/InitiateActivation"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,b9,a5,b5,e9,be,76,a3,4c,94,c5,a5,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,b9,a5,b5,e9,be,76,a3,4c,94,c5,a5,\
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10g_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10g_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-01-04 12:51:55 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2015-01-04 11:51
.
Vor Suchlauf: 17 Verzeichnis(se), 149.400.899.584 Bytes frei
Nach Suchlauf: 23 Verzeichnis(se), 148.909.330.432 Bytes frei
.
- - End Of File - - 3B98B82A24F1293F5402256A6C2559BF
A36C5E4F47E84449FF07ED3517B43A31 Was mir aber direkt aufgefallen ist, der Bildschirm blieb nach dem Anmelden bei meinem Benutzerkonto immer noch ein paar Sek. weiss. Vielleicht hat das ja auch nix mit Schadsoftware zu tun, sondern mit nem Grafiktreiberproblem ? Mal schauen, hoffe du kannst was mit dem Log anfangen. Übrigens, wirklich klasse was ihr hier leistet. Hut ab, und das in eurer Freizeit. Kann man nicht oft genug Danke sagen. Gruß |
|
04.01.2015, 15:03
| #12 |
| /// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Den Treiber kannste auf jedenfall erneuern. Malware ist da aber trotzdem Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
04.01.2015, 16:31
| #13 |
| | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Ich muss das jetzt ein wenig aufteilen, da ich zu viele Zeilen verwenden muss. Deshalb zwei Antworten. Malwarebytes Anti-Maleware: Malwarebytes Anti-Malware Malwarebytes | Free Anti-Malware & Internet Security Software Suchlauf Datum: 04.01.2015 Suchlauf-Zeit: 15:20:16 Logdatei: mbam.txt Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2015.01.04.08 Rootkit Datenbank: v2014.12.30.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: xxxxx Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 494234 Verstrichene Zeit: 11 Min, 19 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 0 (Keine schädliche Elemente erkannt) Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) AdwCleaner:AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.106 - Bericht erstellt am 04/01/2015 um 15:35:13
# Aktualisiert 21/12/2014 von Xplode
# Database : 2015-01-03.1 [Live]
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : xxxxx - xxxxxx-PC
# Gestartet von : C:\Users\xxxxxx\Desktop\adwcleaner_4.106.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\fu0cgvgf.default\user.js
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17496
-\\ Mozilla Firefox v34.0.5 (x86 de)
*************************
AdwCleaner[R0].txt - [5738 octets] - [23/11/2014 10:12:32]
AdwCleaner[R10].txt - [1642 octets] - [03/01/2015 22:17:19]
AdwCleaner[R11].txt - [1809 octets] - [04/01/2015 15:34:02]
AdwCleaner[R1].txt - [1016 octets] - [23/11/2014 10:22:37]
AdwCleaner[R2].txt - [1076 octets] - [23/11/2014 10:25:41]
AdwCleaner[R3].txt - [1197 octets] - [23/11/2014 16:20:34]
AdwCleaner[R4].txt - [1162 octets] - [23/11/2014 20:14:17]
AdwCleaner[R5].txt - [1222 octets] - [24/11/2014 18:44:19]
AdwCleaner[R6].txt - [1341 octets] - [06/12/2014 12:15:28]
AdwCleaner[R7].txt - [1401 octets] - [13/12/2014 14:14:40]
AdwCleaner[R8].txt - [2035 octets] - [03/01/2015 13:32:04]
AdwCleaner[R9].txt - [1581 octets] - [03/01/2015 13:52:45]
AdwCleaner[S0].txt - [5555 octets] - [23/11/2014 10:15:10]
AdwCleaner[S1].txt - [1042 octets] - [23/11/2014 10:26:53]
AdwCleaner[S2].txt - [1284 octets] - [24/11/2014 18:48:00]
AdwCleaner[S3].txt - [2096 octets] - [03/01/2015 13:33:15]
AdwCleaner[S4].txt - [1730 octets] - [04/01/2015 15:35:13]
########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1790 octets] ##########
JRT:JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 7 Professional x64
Ran by xxxxx on 04.01.2015 at 15:42:12,36
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted the following from C:\Users\xxxxx\AppData\Roaming\mozilla\firefox\profiles\fu0cgvgf.default\prefs.js
user_pref("google.toolbar.button_option.cached.gtbSearchBlogs", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchBlogs\" t
user_pref("google.toolbar.button_option.cached.gtbSearchPhotos", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchPhotos\"
user_pref("google.toolbar.button_option.cached.gtbSearchScholar", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchScholar
user_pref("google.toolbar.button_option.cached.gtbstoolbar-google-com_CTK0Y7F4MTG6NKYH03WT-xml", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.o
user_pref("google.toolbar.button_option.cached.gtbstoolbar-google-com_J66T77NJDBMW4FEUU7FA-xml", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.o
user_pref("google.toolbar.search-icon", "data:image/x-icon;base64,AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/
Emptied folder: C:\Users\xxxxx\AppData\Roaming\mozilla\firefox\profiles\fu0cgvgf.default\minidumps [30 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.01.2015 at 15:46:25,85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
04.01.2015, 16:34
| #14 |
| | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss Jetzt noch der Rest. FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2015 03
Ran by XXXXX (administrator) on XXXXX-PC on 04-01-2015 15:58:07
Running from C:\Users\XXXXX\Desktop
Loaded Profile: XXXXX (Available profiles: XXXXX)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Windows\SysWOW64\XSrvSetup.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-05-16] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2350880 2014-05-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [393616 2011-03-30] (KORG Inc.)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\shellex.dll (Kaspersky Lab ZAO)
ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\shellex.dll (Kaspersky Lab ZAO)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-25170337-1842596019-2157349911-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [.DEFAULT] => http=127.0.0.1:8897;https=127.0.0.1:8897
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-25170337-1842596019-2157349911-1000\Software\Microsoft\Internet Explorer\Main,Start Page = News - Service - Shopping bei t-online.de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {1B293868-8F4D-4b37-89CA-75BBD8747680} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
SearchScopes: HKU\S-1-5-21-25170337-1842596019-2157349911-1000 -> {90DC3FD6-1CAD-415a-8ED1-67062890BB03} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\XXXXX\AppData\Roaming\Mozilla\Firefox\Profiles\fu0cgvgf.default
FF DefaultSearchUrl: hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF SelectedSearchEngine: Google
FF Homepage: hxxp://t-online.de/
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @ilok.com/iLokHelper,version=3.1.0.7 -> C:\Program Files (x86)\PACE Anti-Piracy\iLok\NPPaceILok.dll ( PACE Anti-Piracy, Inc)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll ()
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll ()
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru [2015-01-03]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak [2015-01-03]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2015-01-03]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2015-01-03]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak [2015-01-03]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2015-01-03]
FF HKLM-x32\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010-02-06]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-01-03]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-01-03]
FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com
FF Extension: Безпечні платежі - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com [2015-01-03]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\FABS.exe [1155072 2008-12-16] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Shared\Database2\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [File not signed]
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] ()
R2 LanmanWorkstation; C:\Windows\System32\aptwj1dm3.dll [289280 2012-04-21] (Works Ltd.) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed]
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [5018624 2010-03-25] (Native Instruments GmbH) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
S3 PSEXESVC; C:\Windows\PSEXESVC.exe [189792 2015-01-03] (Sysinternals)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 UPnPService; C:\Program Files (x86)\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [548864 2008-10-21] (Magix AG) [File not signed]
S2 DigiRefresh; C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe -s [X]
S2 TryAndDecideService; "C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch)
S2 cvintdrv; C:\Windows\SysWow64\Drivers\cvintdrv.sys [7140 2003-07-29] () [File not signed]
S3 Fw1082; C:\Windows\System32\Drivers\Fw1082x64.sys [228864 2010-03-03] (TASCAM)
S3 Fw1082WdmService; C:\Windows\System32\Drivers\FW1082Wdmx64.sys [70144 2010-03-16] (TASCAM)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2015-01-04] ()
R3 hypaudio; C:\Windows\System32\DRIVERS\hypaudio64.sys [1484800 2010-11-30] (Universal Audio, Inc.)
R3 hypkern; C:\Windows\System32\drivers\hypkern64.sys [225792 2010-11-30] ()
R3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-04-11] ()
R3 iLokDrvr; C:\Windows\SysWOW64\DRIVERS\iLokDrvr.sys [54328 2009-12-02] (PACE Anti-Piracy, Inc.)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2015-01-03] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [818888 2015-01-03] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2015-01-03] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
R3 KORGUMDS; C:\Windows\System32\Drivers\KORGUM64.SYS [33656 2011-03-30] (KORG INC.)
S3 MADFUFTU; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra_DFU.sys [45832 2009-09-25] (M-Audio)
S3 MAUSBFASTTRACKULTRA; C:\Windows\System32\DRIVERS\MAudioFastTrackUltra.sys [180496 2013-06-18] (M-Audio)
R3 mlkumidi; C:\Windows\System32\drivers\mlkumidi.sys [55856 2014-08-30] (MusicLab, Inc.)
R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [111696 2012-01-21] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 paeusbaudio; C:\Windows\System32\DRIVERS\paeusbaudio_x64.sys [252280 2012-05-24] ()
S3 paeusbaudiodsp; C:\Windows\System32\DRIVERS\paeusbaudiodsp_x64.sys [71544 2012-05-24] ()
S3 paeusbaudioks; C:\Windows\System32\DRIVERS\paeusbaudioks_x64.sys [53112 2012-05-24] ()
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2010-08-16] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2010-08-16] ()
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [25504 2013-10-21] (Resplendence Software Projects Sp.)
S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [142120 2007-04-27] (SafeNet, Inc.)
R3 SynUSB64; C:\Windows\System32\DRIVERS\SynUSB64.sys [30352 2009-06-26] (Steinberg Media Technologies GmbH)
R0 Tpkd; C:\Windows\SysWow64\Drivers\Tpkd.sys [86528 2008-07-02] (PACE Anti-Piracy, Inc.) [File not signed]
R3 UAD2System; C:\Windows\System32\DRIVERS\UAD2System.sys [58368 2010-11-30] (Universal Audio Inc.)
R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51016 2011-11-01] (Yamaha Corporation)
R3 ysusb64; C:\Windows\System32\drivers\ysusb64.sys [132200 2013-12-17] (Yamaha Corporation)
S3 BEHRINGER_2902; System32\Drivers\BUSB2902.sys [X]
S3 BUSB_AUDIO_WDM; system32\drivers\busbwdm.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz134; \??\C:\Program Files (x86)\CPUID\PC Wizard 2010\pcwiz_x64.sys [X]
S3 GMSIPCI; \??\H:\INSTALL\GMSIPCI.SYS [X]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP3\WNt500x64\Sandra.sys [X]
S3 TASCAM_US1800; System32\Drivers\tus1800u.sys [X]
S3 TASCAM_US1800_MIDI; system32\drivers\tus1800m.sys [X]
S3 TASCAM_US1800_WDM; system32\drivers\tus1800a.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-04 15:58 - 2015-01-04 15:58 - 00022695 _____ () C:\Users\XXXXX\Desktop\FRST.txt
2015-01-04 15:56 - 2015-01-04 15:57 - 02123776 _____ (Farbar) C:\Users\XXXXX\Desktop\FRST64.exe
2015-01-04 15:46 - 2015-01-04 15:48 - 00001944 _____ () C:\Users\XXXXX\Desktop\JRT.txt
2015-01-04 15:42 - 2015-01-04 15:42 - 00000000 ____D () C:\Windows\ERUNT
2015-01-04 15:38 - 2015-01-04 15:38 - 00001844 _____ () C:\Users\XXXXX\Desktop\AdwCleaner[S4].txt
2015-01-04 15:32 - 2015-01-04 15:53 - 00001203 _____ () C:\Users\XXXXX\Desktop\mbam.txt
2015-01-04 15:28 - 2015-01-04 15:29 - 01707939 _____ (Thisisu) C:\Users\XXXXX\Desktop\JRT.exe
2015-01-04 15:07 - 2015-01-04 15:20 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-04 14:23 - 2015-01-04 14:23 - 00000000 ____D () C:\Users\Public\Documents\NI Resources
2015-01-04 14:00 - 2015-01-04 14:00 - 00000000 ____D () C:\Users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vir2 Instruments Acoustic Legends HD
2015-01-04 14:00 - 2015-01-04 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vir2 Instruments Acoustic Legends HD
2015-01-04 13:48 - 2006-05-11 12:30 - 00393216 _____ (Native Instruments Software GmbH) C:\Windows\SysWOW64\NI_IRC_1_0_3.dll
2015-01-04 13:48 - 2006-05-11 12:30 - 00061440 _____ (Native Instruments Software GmbH) C:\Windows\SysWOW64\NI_DFD_1_4.dll
2015-01-04 13:39 - 2015-01-04 13:39 - 00309448 _____ () C:\Windows\Minidump\010415-49499-01.dmp
2015-01-04 13:36 - 2015-01-04 13:38 - 730927694 _____ () C:\Windows\MEMORY.DMP
2015-01-04 13:34 - 2014-07-02 18:44 - 00609240 _____ () C:\Windows\SysWOW64\nvStreaming.exe
2015-01-04 13:32 - 2014-07-02 21:48 - 31512520 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-04 13:32 - 2014-07-02 21:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-01-04 13:32 - 2014-07-02 21:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-01-04 13:30 - 2015-01-04 13:30 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-04 13:30 - 2015-01-04 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-01-04 13:30 - 2015-01-04 13:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-01-04 13:30 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-04 13:30 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-04 13:30 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-04 13:26 - 2015-01-04 13:29 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\XXXXX\Downloads\mbam-setup-2.0.4.1028.exe
2015-01-04 12:52 - 2015-01-04 12:52 - 00029411 _____ () C:\ComboFix.txt
2015-01-04 12:27 - 2015-01-04 12:52 - 00000000 ____D () C:\Qoobox
2015-01-04 12:27 - 2015-01-04 12:49 - 00000000 ____D () C:\Windows\erdnt
2015-01-04 12:27 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-01-04 12:27 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-01-04 12:27 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-01-04 12:27 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-01-04 12:27 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-01-04 12:27 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2015-01-04 12:27 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2015-01-04 12:27 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2015-01-04 12:22 - 2015-01-04 12:22 - 05609858 ____R (Swearware) C:\Users\XXXXX\Desktop\ComboFix.exe
2015-01-04 12:12 - 2015-01-04 12:12 - 00001638 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-03 22:28 - 2015-01-03 22:28 - 00002314 _____ () C:\Users\XXXXX\Desktop\Sicherer Zahlungsverkehr.lnk
2015-01-03 22:24 - 2015-01-03 22:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2015-01-03 22:24 - 2015-01-03 22:23 - 00002064 _____ () C:\Users\Public\Desktop\Kaspersky Total Security.lnk
2015-01-03 22:23 - 2015-01-03 22:23 - 00000000 ___SD () C:\Users\XXXXX\Documents\Passwords Database
2015-01-03 22:23 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2015-01-03 22:22 - 2015-01-03 22:22 - 00000000 ____D () C:\Windows\ELAMBKUP
2015-01-03 22:21 - 2015-01-03 22:49 - 00818888 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2015-01-03 22:21 - 2015-01-03 22:49 - 00150536 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2015-01-03 22:21 - 2014-08-12 18:33 - 00246456 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2015-01-03 22:17 - 2015-01-03 22:17 - 00000000 __HDC () C:\ProgramData\{B18B6B47-547B-4884-B977-E30BBCB3C043}
2015-01-03 22:16 - 2015-01-03 22:16 - 00000000 __HDC () C:\ProgramData\{0FBC18ED-38E5-47CD-909E-26B2242C6C2D}
2015-01-03 22:15 - 2015-01-03 22:15 - 00000000 __HDC () C:\ProgramData\{074595B0-0A1C-4DFF-AA89-993E1954016E}
2015-01-03 22:14 - 2015-01-03 22:14 - 00000888 _____ () C:\Users\Public\Desktop\Kontakt 5.lnk
2015-01-03 22:14 - 2015-01-03 22:14 - 00000000 __HDC () C:\ProgramData\{2E9C94ED-C152-4D5D-8E21-AAE23373844C}
2015-01-03 19:50 - 2015-01-03 19:50 - 00001846 _____ () C:\Users\Public\Desktop\EZkeys-64.lnk
2015-01-03 17:50 - 2015-01-03 17:54 - 34200128 _____ (Steinberg Media Technologies GmbH) C:\Users\XXXXX\Downloads\eLicenserControlSetup(2).exe
2015-01-03 17:47 - 2015-01-03 17:47 - 00000909 _____ () C:\Users\Public\Desktop\WaveLab 8 (64).lnk
2015-01-03 17:47 - 2015-01-03 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaveLab 8 (64)
2015-01-03 17:47 - 2012-08-10 06:26 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2015-01-03 17:09 - 2015-01-03 17:09 - 00189792 _____ (Sysinternals) C:\Windows\PSEXESVC.exe
2015-01-03 16:48 - 2014-12-24 06:23 - 00000000 ____D () C:\Users\XXXXX\Downloads\LicenseSupportInstallerWin64_v2.4.5_r27678
2015-01-03 16:41 - 2015-01-03 16:52 - 00000530 _____ () C:\Windows\DtcInstall.log
2015-01-03 16:21 - 2015-01-03 16:51 - 00002028 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk
2015-01-03 16:21 - 2015-01-03 16:51 - 00002016 _____ () C:\Users\Public\Desktop\iLok License Manager.lnk
2015-01-03 16:20 - 2015-01-03 16:51 - 00000000 ____D () C:\Program Files (x86)\iLok License Manager
2015-01-03 15:57 - 2015-01-03 15:57 - 00001070 _____ () C:\Users\Public\Desktop\Service Center.lnk
2015-01-03 15:57 - 2015-01-03 15:57 - 00000000 __HDC () C:\ProgramData\{90D8CE90-3E6B-4034-A281-BC9F19B60A5B}
2015-01-03 14:37 - 2015-01-04 15:58 - 00000000 ____D () C:\FRST
2015-01-03 14:13 - 2015-01-03 14:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-03 13:30 - 2015-01-03 13:31 - 02173952 _____ () C:\Users\XXXXX\Desktop\adwcleaner_4.106.exe
2015-01-03 12:55 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-03 12:55 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-13 13:31 - 2014-12-13 13:31 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-13 11:43 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-13 11:43 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-13 11:40 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-13 11:40 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-13 11:40 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-13 11:40 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-13 11:40 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-13 11:40 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-13 11:40 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-13 11:40 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-13 11:40 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-13 11:40 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-13 11:40 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-13 11:40 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-13 11:40 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-13 11:40 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-13 11:40 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-13 11:40 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-13 11:40 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-13 11:40 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-13 11:40 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-13 11:40 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-13 11:40 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-13 11:40 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-13 11:40 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-13 11:40 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-13 11:40 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-13 11:40 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-13 11:40 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-13 11:40 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-13 11:40 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-13 11:40 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-13 11:40 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-13 11:40 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-13 11:40 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-13 11:40 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-13 11:40 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-13 11:40 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-13 11:40 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-13 11:40 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-13 11:40 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-13 11:40 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-13 11:40 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-13 11:40 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-13 11:40 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-13 11:40 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-13 11:40 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-13 11:40 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-13 11:40 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-13 11:40 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-13 11:40 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-13 11:40 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-13 11:40 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-13 11:40 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-13 11:40 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-13 11:40 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-13 11:36 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-13 11:36 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-13 11:36 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-13 11:34 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-13 11:34 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-13 11:34 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-13 11:34 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-13 11:34 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-13 11:34 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-13 11:34 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-13 11:34 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-13 11:34 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-13 11:34 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-13 11:34 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-13 11:34 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-13 11:34 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-13 11:34 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-13 11:34 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-13 11:34 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-13 11:34 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-06 14:03 - 2014-12-06 14:03 - 00000000 ____D () C:\Program Files\Bonjour
2014-12-06 14:03 - 2014-12-06 14:03 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-12-06 12:32 - 2014-12-06 12:32 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\6A46048A.sys
2014-12-06 12:14 - 2014-12-06 12:14 - 00000055 _____ () C:\AdwCleanerDebug.txt
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-04 15:44 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-04 15:44 - 2009-07-14 05:45 - 00025808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-04 15:38 - 2013-07-12 12:37 - 00078233 _____ () C:\Windows\setupact.log
2015-01-04 15:37 - 2012-02-12 14:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-01-04 15:36 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-04 15:36 - 2012-09-17 13:14 - 00078058 _____ () C:\Windows\mlkumidi.log
2015-01-04 15:36 - 2010-01-27 16:29 - 00383158 _____ () C:\Windows\PFRO.log
2015-01-04 15:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-04 15:35 - 2014-11-23 10:11 - 00000000 ____D () C:\AdwCleaner
2015-01-04 15:35 - 2013-07-12 12:41 - 02026688 _____ () C:\Windows\WindowsUpdate.log
2015-01-04 13:48 - 2011-08-05 15:00 - 00000000 ____D () C:\Program Files (x86)\VstPlugIns
2015-01-04 13:39 - 2010-01-30 19:36 - 00000000 ____D () C:\Windows\Minidump
2015-01-04 13:34 - 2013-08-11 13:12 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-01-04 13:34 - 2010-01-31 13:12 - 00000000 ____D () C:\temp
2015-01-04 13:33 - 2010-02-06 19:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-01-04 13:32 - 2013-08-11 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-04 12:52 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-01-04 12:41 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2015-01-04 12:39 - 2009-07-14 03:34 - 94371840 _____ () C:\Windows\system32\config\software.bak
2015-01-04 12:39 - 2009-07-14 03:34 - 37748736 _____ () C:\Windows\system32\config\system.bak
2015-01-04 12:39 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak
2015-01-04 12:39 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak
2015-01-04 12:39 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2015-01-04 12:13 - 2012-06-13 08:45 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2015-01-04 12:13 - 2012-06-12 18:24 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2015-01-03 22:49 - 2014-08-13 19:34 - 00077512 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwtp.sys
2015-01-03 22:24 - 2012-09-01 13:17 - 00000000 ____D () C:\Users\XXXXX
2015-01-03 22:24 - 2012-02-12 14:02 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2015-01-03 22:15 - 2010-01-31 14:33 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments
2015-01-03 22:14 - 2010-01-31 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
2015-01-03 19:51 - 2011-04-22 15:06 - 00000000 ____D () C:\Users\XXXXX\Documents\Toontrack
2015-01-03 19:51 - 2011-04-22 13:48 - 00000000 ____D () C:\ProgramData\Toontrack
2015-01-03 19:50 - 2011-10-04 14:58 - 00000000 ____D () C:\Program Files\Common Files\VST3
2015-01-03 19:50 - 2010-02-14 22:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Toontrack
2015-01-03 19:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-03 17:56 - 2010-01-30 18:34 - 00000049 _____ () C:\Windows\SysWOW64\SYNSOPOS.exe.cfg
2015-01-03 17:56 - 2010-01-30 18:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLicenser
2015-01-03 17:56 - 2010-01-25 17:07 - 00554074 _____ () C:\Windows\DPINST.LOG
2015-01-03 17:47 - 2010-01-30 18:20 - 00000000 ____D () C:\Users\XXXXX\AppData\Roaming\Steinberg
2015-01-03 17:46 - 2012-12-08 18:07 - 00000000 ____D () C:\Program Files\Steinberg
2015-01-03 17:41 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\w3data.vss
2015-01-03 17:41 - 2011-05-28 13:40 - 00000096 _____ () C:\Windows\system32\msvcsv60.dll
2015-01-03 17:41 - 2011-05-28 12:21 - 00000096 _____ () C:\ProgramData\autobk.inc
2015-01-03 17:41 - 2010-02-15 12:34 - 00000304 _____ () C:\Windows\msocreg32.dat
2015-01-03 17:25 - 2010-02-15 11:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IK Multimedia
2015-01-03 16:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-01-03 16:23 - 2012-04-27 09:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-03 16:21 - 2010-01-27 16:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-03 16:04 - 2010-01-31 13:37 - 00000000 ____D () C:\Users\XXXXX\Documents\Native Instruments
2015-01-03 15:57 - 2014-09-25 14:02 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-03 13:45 - 2009-07-14 18:58 - 11809370 _____ () C:\Windows\system32\perfh007.dat
2015-01-03 13:45 - 2009-07-14 18:58 - 03627950 _____ () C:\Windows\system32\perfc007.dat
2015-01-03 13:45 - 2009-07-14 06:13 - 00006340 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-03 12:58 - 2014-06-21 12:00 - 00000000 ____D () C:\Users\XXXXX\AppData\Local\Adobe
2015-01-03 12:57 - 2012-06-07 13:31 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-03 12:57 - 2011-05-20 23:06 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-13 13:44 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-12-13 13:31 - 2014-04-26 12:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-13 13:31 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-13 11:47 - 2013-07-14 15:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-13 11:47 - 2010-02-05 19:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-13 11:44 - 2010-01-25 18:22 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-13 11:28 - 2013-04-13 10:14 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-06 15:42 - 2013-08-03 09:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XLN Audio
2014-12-06 12:52 - 2013-01-06 14:02 - 00001220 _____ () C:\Users\XXXXX\Desktop\Custom Shop.lnk
Files to move or delete:
====================
C:\Users\XXXXX\SOFTUBE PLUG-INS CONTROL.EXE
Some content of TEMP:
====================
C:\Users\XXXXX\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\XXXXX\AppData\Local\Temp\nvStInst.exe
C:\Users\XXXXX\AppData\Local\Temp\Quarantine.exe
C:\Users\XXXXX\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-03 19:03
==================== End Of Log ============================
Addition:FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2015 03
Ran by XXXXX at 2015-01-04 16:03:54
Running from C:\Users\XXXXX\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Kaspersky Total Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Total Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Total Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.24 - GIGABYTE)
Acronis*True*Image*Home 2012 (HKLM-x32\...\{C1FDF2F0-2136-42D8-8A64-2B45BBF2C19E}Visible) (Version: 15.0.7119 - Acronis)
Acronis*True*Image*Home 2012 (x32 Version: 15.0.7119 - Acronis) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{626B3D60-A661-4444-AAF5-6C75E55936E8}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}) (Version: 10.1.52.14 - Adobe Systems, Inc.)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AmpegSVX (HKLM-x32\...\{CF1D7323-8A0A-49C7-83B0-088DB90721E2}) (Version: 1.1.3 - IK Multimedia)
AmpliTube 3 (HKLM-x32\...\{5DD152A8-BFB3-439E-90CD-5C00C2116E23}) (Version: 3.0.0 - IK Multimedia)
AmpliTube 3 version 3.14.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.14.0 - IK Multimedia)
AmpliTube Fender (HKLM-x32\...\{B178BACA-880B-4D20-85F9-522F7F2DECBE}) (Version: 1.1.0 - IK Multimedia)
AmpliTube Jimi Hendrix (HKLM-x32\...\{66BA35B0-1911-47EF-B170-1DCFFDA362F1}) (Version: 1.0.3 - IK Multimedia)
AmpliTube2 (HKLM-x32\...\{C95AACD4-9507-4F5C-9D53-22B1ACCFECD1}) (Version: 2.1.4 - IK Multimedia)
Antares Autotune VST RTAS TDM v5.08 (HKLM-x32\...\Antares Autotune VST RTAS TDM_is1) (Version: - Team AiR 2007)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ARC System 2 version 2.2.1 (HKLM\...\{4952A610-D484-4F6A-B1B4-33797CFDB821}_is1) (Version: 2.2.1 - IK Multimedia)
ArcSoft Panorama Maker 6 (HKLM-x32\...\{DABFD34E-BE68-4BC6-9254-5D7A7FF76B99}) (Version: 6.0.8.85 - ArcSoft)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.)
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Basic FX Suite (HKLM-x32\...\InstallShield_{45BBAD53-80DB-4DD2-9C50-B5E09EFFAEA7}) (Version: 1.0.0 - Yamaha Corporation)
Basic FX Suite (Version: 1.0.0 - Yamaha Corporation) Hidden
Best Service Engine 1.0.4 64bit (HKLM-x32\...\Best Service Engine 1.0.4 64bit) (Version: - )
Best Service Galaxy II (HKLM-x32\...\Best Service Galaxy II) (Version: - )
Best Service Galaxy Vintage D (HKLM-x32\...\Best Service Galaxy Vintage D) (Version: - Best Service)
Best Service Galaxy Vintage D (Version: 1.0.0.001 - Best Service) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Boris Continuum Complete 7 Adobe CS5 (HKLM\...\{A31D5812-F0AA-4AFA-B584-C2C4AC141518}) (Version: 7.00.0000 - Boris FX, Inc.)
Canon MP110 (HKLM\...\{B3467C74-0678-459a-9180-722763E0AFDE}) (Version: - )
Canon ScanGear Starter (HKLM-x32\...\{18A5DFF2-8A95-49F3-873F-743CB5549F3D}) (Version: - )
CS-80V2 2.5.4 (HKLM-x32\...\CS-80V2_is1) (Version: 2.5.4 - Arturia)
CSR (HKLM-x32\...\{648C1BFD-6A70-46D8-B855-F84D95C2DC34}) (Version: 1.1.1 - IK Multimedia)
Custom Shop version 1.5.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.5.0 - IK Multimedia)
DVD-lab PRO 2.3 (HKLM-x32\...\DVD-lab PRO 2.3_is1) (Version: - Mediachance)
East West Boesendorfer 290 (HKLM-x32\...\East West Boesendorfer 290) (Version: - )
East West EWQLSO Silver Edition (HKLM-x32\...\East West EWQLSO Silver Edition) (Version: - )
East West Hardcore Bass (HKLM-x32\...\East West Hardcore Bass) (Version: - )
East West Hardcore Bass XP (HKLM-x32\...\East West Hardcore Bass XP) (Version: - )
Easy Tune 6 B12.0402.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0402.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Electronic EZmix pack (HKLM-x32\...\{6450F55E-EE0F-4203-A90D-D533EE3F88E4}) (Version: 1.0.0 - Toontrack)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.8.5.1159 - Steinberg Media Technologies GmbH)
ELS Vocoder (HKLM-x32\...\ELS Vocoder_is1) (Version: 1.6.0 - Eiosis, Inc.)
EZdrummer (HKLM-x32\...\{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}) (Version: 1.3.2 - Toontrack)
EZdrummer 2 32-bit (HKLM-x32\...\{7E36EB5B-0739-4DA7-BF26-E63DD2BECA76}) (Version: 2.0.0 - Toontrack)
EZdrummer 2 32-bit Update (HKLM-x32\...\{CDE1FC7E-3E9A-48BA-BBB9-65C2026CA0A2}) (Version: 2.0.1 - Toontrack)
EZdrummer 2 64-bit (HKLM\...\{B9217824-0EBE-49C7-98A0-A76CC46BBB7D}) (Version: 2.0.0 - Toontrack)
EZdrummer 2 64-bit Update (HKLM\...\{11CC8964-9CB0-46E6-9218-CD39ED4A554D}) (Version: 2.0.1 - Toontrack)
EZDrummer 64 bit (HKLM\...\{6CEFB8E2-2B47-49AB-B97E-AA1ACF6595E5}) (Version: 1.3.0 - Toontrack)
EZDrummer 64-bit (HKLM\...\{80E801DB-5288-4447-AAC2-27F329B61C6E}) (Version: 1.3.2 - Toontrack)
EZkeys Classic Electrics 64 (HKLM\...\{2F547D3F-AB60-4319-8513-80DBD3896BA8}) (Version: 1.0.1 - Toontrack)
EZmix 32-bit (HKLM-x32\...\{B5AB1F3A-136C-4C87-BB49-0E3ACD5B9F7C}) (Version: 2.0.9 - Toontrack)
EZmix 64-bit (HKLM\...\{3D83CC9F-E2E1-47AE-B1AF-F6D3A8825196}) (Version: 2.0.9 - Toontrack)
EZXAmericana (HKLM-x32\...\{7DB4839F-DFA6-49D2-907F-740CE65B2D10}) (Version: 1.0.0 - Toontrack)
EZXClaustrophobic (HKLM-x32\...\{8094F7AE-CA21-4AF2-A256-BC918CE0E796}) (Version: 1.1.3 - Toontrack)
EZXCocktail (HKLM-x32\...\{147567F0-8575-4BE0-B5B3-62706C67FA5A}) (Version: 1.3.0 - Toontrack)
EZXFunkmasters (HKLM-x32\...\{BB5A44CB-3045-43E2-BEB0-B64E477D4633}) (Version: 1.0.0 - Toontrack)
EZXJazz (HKLM-x32\...\{EED8D44F-CEBB-4298-8D0E-E01AF6AC0663}) (Version: 1.0.0 - Toontrack)
EZXVintage (HKLM-x32\...\{430399DC-98BC-4A7F-8F8E-77981CABAE05}) (Version: 1.2.0 - Toontrack)
FG-X Virtual Mastering Console (HKLM\...\FG-X Virtual Mastering Console_is1) (Version: - Slate Digital)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{19666E73-D9E5-44D4-8F33-037ED151ECBC}) (Version: 2.1.22.0 - MAGIX AG)
Garritan Jazz Big Band (HKLM-x32\...\Garritan Jazz Big Band) (Version: - )
Garritan Personal Orchestra (HKLM-x32\...\Garritan Personal Orchestra) (Version: - )
Garritan Personal Orchestra KP2 (HKLM-x32\...\Garritan Personal Orchestra KP2) (Version: - )
Gigabyte Raid Configurer (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0001 - GIGABYTE Technologies, Inc.)
Halls Of Fame Free - Origami Edition 2.5.2 (HKLM-x32\...\Halls Of Fame Free - Origami Edition 2.5.2) (Version: - )
High-Definition Video Playback (x32 Version: 11.1.11500.4.273 - Nero AG) Hidden
IK Multimedia Authorization Manager version 1.0.11 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.11 - IK Multimedia)
iLok Client Helper (HKLM-x32\...\InstallShield_{DEA491FB-48BC-4B6B-8902-FCD4BAB069BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.)
iLok Client Helper (x32 Version: 5.9.1 - PACE Anti-Piracy, Inc.) Hidden
iLok Client Helper x32x64 (HKLM-x32\...\InstallShield_{27F0B084-8305-4891-B9FD-4F2E3EDF98D4}) (Version: 5.8.12 - PACE Anti-Piracy)
iLok Client Helper x32x64 (x32 Version: 5.8.12 - PACE Anti-Piracy) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)
Incomedia WebSite X5 v9 - Evolution (HKLM-x32\...\{64392EEB-38EF-45FD-822D-5C75CA136860}_is1) (Version: 9.0.0.1597 - Incomedia s.r.l.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.1 - PACE Anti-Piracy, Inc.)
iZotope Nectar Elements (HKLM-x32\...\iZotope Nectar Elements_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Nectar Mirrorball Style Pack (HKLM-x32\...\iZotope Nectar Mirrorball Style Pack_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Nectar Style Pack 1 (HKLM-x32\...\iZotope Nectar Style Pack 1_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Nectar Utility Pack 1 (HKLM-x32\...\iZotope Nectar Utility Pack 1_is1) (Version: 1.00 - iZotope, Inc.)
iZotope Ozone 3 (HKLM-x32\...\iZotope Ozone 3_is1) (Version: 3.05 - iZotope, Inc.)
iZotope Ozone 4 (HKLM-x32\...\iZotope Ozone 4_is1) (Version: 4.03 - iZotope, Inc.)
iZotope Spectron (HKLM-x32\...\iZotope Spectron_is1) (Version: 1.05 - iZotope, Inc.)
iZotope Stutter Edit (HKLM-x32\...\iZotope Stutter Edit_is1) (Version: 1.04 - iZotope, Inc.)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Jazz and Big Band KP2 (HKLM-x32\...\Jazz and Big Band KP2) (Version: - )
JBridge (HKLM-x32\...\JBridge) (Version: - JBridge) <==== ATTENTION!
Jupiter-8V2 2.5.5 (HKLM-x32\...\jupiter8v25_is1) (Version: 2.5.5 - Arturia)
Kaspersky Total Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Total Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
K-Lite Codec Pack 6.4.5 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 6.4.5 - )
K-Lite Mega Codec Pack 8.9.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 8.9.5 - )
KORG padKONTROL Editor Librarian (HKLM-x32\...\{D77332DD-FA53-4E49-9F4B-3863B8D56196}) (Version: 1.01.0010 - KORG Inc.)
KORG USB-MIDI Driver Tools for Windows (HKLM-x32\...\{B3CB5BA3-3E98-4E85-944E-B03D055F8450}) (Version: 1.13.0601 - Korg Inc.)
LatencyMon 6.00 (HKLM\...\LatencyMon_is1) (Version: - Resplendence Software Projects Sp.)
LightScribe System Software (HKLM-x32\...\{82EF29B1-9B60-4142-A155-0599216DD053}) (Version: 1.18.6.1 - LightScribe)
Magic Bullet Looks (HKLM-x32\...\InstallShield_{595AC242-897D-494C-A278-2A2781403824}) (Version: 1.4.1 - Red Giant Software)
Magic Bullet Looks (Version: 1.4.1 - Red Giant Software) Hidden
Magic Bullet Mojo (HKLM-x32\...\InstallShield_{40E89076-E040-421E-AEB7-D931F8B07401}) (Version: 1.2.0 - Red Giant Software)
Magic Bullet Mojo (Version: 1.2.0 - Red Giant Software) Hidden
MAGIX 3D Maker (embeded) (HKLM-x32\...\MAGIX 3D Maker D) (Version: 6.0.0.3 - MAGIX AG)
MAGIX Foto Manager 8 6.0.1.457 (D) (HKLM-x32\...\MAGIX Foto Manager 8 D) (Version: 6.0.1.457 - MAGIX AG)
MAGIX Foto Premium 3.1.0.11 (D) (HKLM-x32\...\MAGIX Foto Premium D) (Version: 3.1.0.11 - MAGIX AG)
MAGIX Fotobuch 3.6 (HKLM-x32\...\MAGIX Fotobuch) (Version: 3.6 - MAGIX AG)
MAGIX MP3 Maker 15 10.0.0.257 (D) (HKLM-x32\...\MAGIX MP3 Maker 15 D) (Version: 10.0.0.257 - MAGIX AG)
MAGIX Online Druck Service 3.4.3.0 (D) (HKLM-x32\...\MAGIX Online Druck Service D) (Version: 3.4.3.0 - MAGIX AG)
MAGIX Screenshare 4.3.6.1987 (D) (HKLM-x32\...\MAGIX Screenshare D) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Website Maker 4 1.13.0.112 (D) (HKLM-x32\...\MAGIX Website Maker 4 D) (Version: 1.13.0.112 - MAGIX AG)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MediaInfo 0.7.69 (HKLM\...\MediaInfo) (Version: 0.7.69 - MediaArea.net)
Melodyne 3.2 (HKLM-x32\...\{A1F143D1-1F0D-44FB-A44B-71D4367D16DE}) (Version: 3.2.0202 - Celemony Software GmbH)
Melodyne 3.2 (x32 Version: 3.2.0202 - Celemony Software GmbH) Hidden
Melodyne Runtime 4.1 (x64) (HKLM\...\{53EE2829-E9DB-4913-B3EA-96F10F84E98B}) (Version: 1.0.1 - Celemony Software GmbH)
Melodyne singletrack (HKLM-x32\...\{16DF894D-FC3F-4B87-908D-671E201CD7A8}) (Version: 2.01.0045 - Celemony Software GmbH)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 1.0.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Windows Media Video 9 VCM (HKLM-x32\...\WMV9_VCM) (Version: - )
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Mini V 2.5.5 (HKLM-x32\...\miniv2_5_is1) (Version: 2.5.5 - Arturia)
minimoog V 1.6 (HKLM-x32\...\minimoog V_is1) (Version: - Arturia)
minimoog V2 2.0 (HKLM-x32\...\minimoog V2_is1) (Version: - Arturia)
Miroslav Philharmonik (HKLM-x32\...\{BA0D0121-A3BA-487D-9C78-7AB0E676C722}) (Version: 1.1.2 - IK Multimedia)
Modular V 2.6.3 (HKLM-x32\...\MMV_2.6.0_is1) (Version: 2.6.3 - Arturia)
Moog Modular V 2.5 (HKLM-x32\...\Moog Modular V 2_is1) (Version: - Arturia)
Movavi Screen Capture Studio 4 (HKLM-x32\...\Movavi Screen Capture Studio 4) (Version: 4.3.3 - MOVAVI)
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
mp3-2-wav converter 1.14 (HKLM-x32\...\mp3-2-wav) (Version: - )
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MusicLab RealGuitar (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealGuitar (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealGuitar (HKLM-x32\...\{4c7ab715-e30c-4db5-ae25-da050dd80533}) (Version: 3.1.0.7127 - MusicLab, Inc.)
MusicLab RealGuitar Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealLPC (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealLPC (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealLPC (HKLM-x32\...\{a55070fb-e9c5-4a41-b693-7f439a4d02cc}) (Version: 3.1.0.7127 - MusicLab, Inc.)
MusicLab RealLPC Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealStrat (32-bit) (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealStrat (64-bit) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab RealStrat (HKLM-x32\...\{85520ea4-3eee-4096-89b7-6df88a92032e}) (Version: 3.1.0.7127 - MusicLab, Inc.)
MusicLab RealStrat Sound Bank (x32 Version: 3.1.0.7127 - MusicLab, Inc.) Hidden
MusicLab Virtual Midi Driver (64-bit) (HKLM\...\{2B019162-86C7-4D14-AED0-2CB5110BA4FF}) (Version: 2.0.2.0 - MusicLab, Inc.)
Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: - Native Instruments)
Native Instruments Abbey Road 60s Drums (HKLM-x32\...\Native Instruments Abbey Road 60s Drums) (Version: - Native Instruments)
Native Instruments Abbey Road 60s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 60s Drums 1.1) (Version: - Native Instruments)
Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: - Native Instruments)
Native Instruments Abbey Road 70s Drums (HKLM-x32\...\Native Instruments Abbey Road 70s Drums) (Version: - Native Instruments)
Native Instruments Abbey Road 70s Drums 1.1 (HKLM-x32\...\Native Instruments Abbey Road 70s Drums 1.1) (Version: - Native Instruments)
Native Instruments Abbey Road Modern Drums (HKLM-x32\...\Native Instruments Abbey Road Modern Drums) (Version: - Native Instruments)
Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments)
Native Instruments Battery 3 (HKLM-x32\...\Native Instruments Battery 3) (Version: - Native Instruments)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: - Native Instruments)
Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.0.1.288 - Native Instruments)
Native Instruments DrumMicA (HKLM-x32\...\Native Instruments DrumMicA) (Version: - Native Instruments)
Native Instruments Elektrik Piano (HKLM-x32\...\Native Instruments Elektrik Piano) (Version: - )
Native Instruments Elektrik Piano 1.5 (HKLM-x32\...\Native Instruments Elektrik Piano 1.5) (Version: - )
Native Instruments Guitar Rig 3 (HKLM-x32\...\Native Instruments Guitar Rig 3) (Version: - Native Instruments)
Native Instruments Guitar Rig 4 (HKLM-x32\...\Native Instruments Guitar Rig 4) (Version: - Native Instruments)
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.4.2.245 - Native Instruments)
Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.1.0.6 - Native Instruments)
Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.3 - Native Instruments)
Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: - Native Instruments)
Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: - Native Instruments)
Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: - Native Instruments)
Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: - Native Instruments)
Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: - Native Instruments)
Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.5 - Native Instruments)
Nero 10 ClipartPack (HKLM-x32\...\{96ED4B78-300E-4033-AE6C-C115CEB4DF07}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Kwik Themes 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Kwik Themes 2 (HKLM-x32\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.6.10000.2.0 - Nero AG)
Nero 10 Menu TemplatePack 1 (HKLM-x32\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 2 (HKLM-x32\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.6.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 3 (HKLM-x32\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.6.10000.1.0 - Nero AG)
Nero 10 Sample ImagePack (HKLM-x32\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.6.10000.11.0 - Nero AG)
Nero 10 Sample Videos (HKLM-x32\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.6.10000.11.0 - Nero AG)
Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.8.10600.6.100 - Nero AG)
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.6.10700.5.100 - Nero AG)
Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.4.10400.2.100 - Nero AG)
Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.6.10600.4.100 - Nero AG)
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10800.6.100 - Nero AG)
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.4.10300.1.100 - Nero AG)
Nero Kwik Media (HKLM-x32\...\{1F7D9F37-C39C-486C-BDF8-8F440FFB3352}) (Version: 1.6.16600.75.100 - Nero AG)
Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.11200 - Nero AG)
Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.10.10700.5.100 - Nero AG)
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.6.10500.3.100 - Nero AG)
Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.10.10500.4.100 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10500.3.100 - Nero AG)
Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.4.11000.9.100 - Nero AG)
Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.10.10700.6.100 - Nero AG)
NF VST 64-bit Installer (HKLM-x32\...\NF VST 64-bit Installer3.0) (Version: 3.0 - Nomad Factory)
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.0 - Nikon)
Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.7.0 - Nikon)
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9745 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.4.5.0812 - PACE Anti-Piracy, Inc.) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
Picture Control Utility x64 (HKLM\...\{11953C65-BB4E-4CA4-B0F0-2600A4B20040}) (Version: 1.4.12 - Nikon)
Plus Pack für Acronis True Image Home 2012 (HKLM-x32\...\{A8EFC6C1-DF0C-4F51-8779-EAC4CDB440A4}) (Version: 15.0.6131 - Acronis)
Prophet-V2 2.5.3 (HKLM-x32\...\prophetv2_5_is1) (Version: 2.5.3 - Arturia)
PSP VintageMeter 32bit (HKLM-x32\...\PSP VintageMeter 32bit) (Version: 1.0.0 32bit - PSPaudioware.com)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6554 - Realtek Semiconductor Corp.)
ReValver HPSE x64 (HKLM\...\ReValver HPSE x64_is1) (Version: - )
Roots Sticks MIDI (HKLM-x32\...\{0EEAD139-1ABB-43B9-BBA1-5ECF9C6CCF8B}) (Version: 1.0.0 - Toontrack)
SampleMoog (HKLM-x32\...\{218AA20E-F016-4385-9F74-04FF8E596FB2}) (Version: 1.0.2 - IK Multimedia)
SampleTank 2 (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.4 - IK Multimedia)
SampleTank 3 version 3.3.0 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.3.0 - IK Multimedia)
Sentinel Protection Installer 7.4.0 (HKLM-x32\...\{5A180ED5-0AC1-410A-B790-5E0319CD0A93}) (Version: 7.4.0 - SafeNet, Inc.)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Softube Plug-Ins (VST 32-bit) (HKLM-x32\...\Softube Plug-Ins (VST 32-bit)) (Version: - )
Softube Plug-Ins (VST 64-bit) (HKLM\...\Softube Plug-Ins (VST 64-bit)) (Version: - )
Softube Plug-Ins (VST AAX 64-bit) (HKLM\...\Softube Plug-Ins (VST AAX 64-bit)) (Version: - )
SONiVOX Vocalizer (HKLM-x32\...\SONiVOX Vocalizer_is1) (Version: - )
Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.0 (32-bit)_is1) (Version: 1.0.0 - Sonnox Ltd, Oxford, UK)
Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit) (HKLM-x32\...\Sonnox Restoration Tools for Wavelab VST v1.0.2 (32-bit)_is1) (Version: 1.0.2 - Sonnox Ltd, Oxford, UK)
Spark Vintage Drum Machines 1.7.2 (HKLM-x32\...\Spark Vintage Drum Machines_is1) (Version: - Arturia)
SPL TwinTube 1.3.1 (HKLM-x32\...\SPL TwinTube_is1) (Version: - SPL)
SPL Vitalizer MK2-T 1.3 (HKLM-x32\...\SPL Vitalizer MK2-T_is1) (Version: - SPL)
Splashtop Connect for Firefox (HKLM-x32\...\{EF25F71D-F3E8-42A3-8B5A-DBF83C4B942F}) (Version: 2.0.5.2 - Splashtop Inc.)
Splashtop Connect for IE (HKLM-x32\...\{E2B086BD-75A9-45D1-A675-151624B259A1}) (Version: 2.0.5.1 - Splashtop Inc.)
SSD Sampler (HKLM-x32\...\SSD4) (Version: 1.1 - Yellow Matter Entertainment)
StartUpProject (HKLM-x32\...\{4ABFED1A-0DE9-4864-A89F-1117DECFF672}) (Version: 3.5.0 - Avid Technology, Inc.)
Steinberg CC121 Extension 64bit (HKLM-x32\...\{1D111953-3C70-48E3-BB62-B669C724585C}) (Version: 1.7.1 - Yamaha Corporation)
Steinberg Cubase 7.5 64bit (HKLM\...\{C75E8AD9-C89F-4505-5E87-CFCCEBE284FA}) (Version: 7.5.20 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Eucon Adapter 6.5 64bit (HKLM\...\{95D90857-61C2-4927-85FF-A317E46E7351}) (Version: 6.5.2 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Allen Morgan Signature Drums (HKLM-x32\...\{611A7035-0172-4B9B-8BB6-5046F6867D8A}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.0.1 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 2.0.2 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 2.0.0 - Steinberg Media Technologies GmbH)
Steinberg HALionOne 64bit (HKLM\...\{743C5D75-6BC8-4881-BF7D-E7DF29F155F4}) (Version: 1.1.0.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Additional Content Set 01 (HKLM-x32\...\{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}) (Version: 1.0.0.001 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Expression Set (HKLM-x32\...\{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}) (Version: 1.0.1.0 - Steinberg Media Technologies GmbH)
Steinberg HALionOne GM Drum Set (HKLM-x32\...\{AC997F93-0757-4ED4-A701-F40C2D654D09}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne GM Set (HKLM-x32\...\{F057965A-D974-4C64-ADB1-4381CD4B8956}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Pro Set (HKLM-x32\...\{D82CDA0D-C182-42C8-8FF2-5649C98D6003}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Studio Drum Set (HKLM-x32\...\{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg HALionOne Studio Set (HKLM-x32\...\{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}) (Version: 1.0.1.457 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Padshop 64bit (HKLM\...\{75F15019-C0C2-4047-AA45-97B4BD313719}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH)
Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg UR44 Applications (HKLM-x32\...\InstallShield_{37619421-E7D8-44C2-85A3-486C97E6A0D4}) (Version: 2.1.0 - Yamaha Corporation)
Steinberg UR44 Applications (Version: 2.1.0 - Yamaha Corporation) Hidden
Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg VST Classics 1 64bit (HKLM\...\{AA322103-FC2B-4D86-BA6C-67D4DDB4209C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg VST Classics 2 64bit (HKLM\...\{AC07B5F9-BF11-4221-9E85-87A6F33BCBB3}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Stutter Edit Expansion 1 (HKLM-x32\...\Stutter Edit Expansion 1_is1) (Version: 1.00 - iZotope, Inc.)
Stutter Edit Expansion 2 (HKLM-x32\...\Stutter Edit Expansion 2_is1) (Version: 1.00 - iZotope, Inc.)
Subtitle Workshop 2.51 (HKLM-x32\...\SubtitleWorkshop) (Version: - )
Superior Drummer 32-bit (HKLM-x32\...\{009AC76E-1A66-4682-82B7-417E77F3C648}) (Version: 2.4.0 - Toontrack)
Superior Drummer 64-bit (HKLM\...\{22029AEE-38DF-4E35-AEF4-FE8CA3F6667F}) (Version: 2.4.0 - Toontrack)
Toontrack solo (HKLM-x32\...\{5866520C-8857-4986-833A-039F4584C3F7}) (Version: 1.3.2 - Toontrack)
Toontrack solo 64 bit (HKLM\...\{FA9D0D8C-FDD1-45C2-8291-079FBA72D2CB}) (Version: 1.3.2 - Toontrack)
T-RackS 1.x (HKLM-x32\...\{37BCCAE2-A3AD-4E03-B4FD-A1BE1FE6365A}) (Version: 1.3.0 - IK Multimedia)
T-RackS 3 Standard (HKLM-x32\...\{A78D0A87-8C6E-4726-84D7-C4CAC122617D}) (Version: 3.1.1 - IK Multimedia)
T-RackS CS version 4.7.1 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.7.1 - IK Multimedia)
UAD Powered Plug-Ins (HKLM-x32\...\UAD Powered Plug-Ins) (Version: - )
Ulead COOL 360 1.0 (HKLM-x32\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - )
Ulead Photo Explorer 8.6 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version: 8.6 - Ulead Systems, Inc.)
Ulead PhotoImpact 11 (HKLM-x32\...\{C8550C86-A712-4219-AD4C-038C9FD1D149}) (Version: 11.0 - Ulead System)
UninstallTpkdx64 (HKLM\...\Tpkdx64_is1) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Vienna Instruments 2.0 (HKLM\...\Vienna Instruments_is1) (Version: - Vienna Symphonic Library)
Vienna Instruments Software 1.11 (HKLM-x32\...\Vienna Instruments Software_is1) (Version: - Vienna Symphonic Library)
ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.7.6 - Nikon)
Vir2 Instruments Acoustic Legends HD (HKLM-x32\...\Vir2 Instruments Acoustic Legends HD) (Version: - )
Vir2 Instruments BASiS (HKLM-x32\...\Vir2 Instruments BASiS) (Version: - )
Visual C++ 64-bit Redistributables (HKLM-x32\...\InstallShield_{FB03650C-B373-4B20-ACA5-B7BA1A8EEE33}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.)
Visual C++ Redistributables (HKLM-x32\...\InstallShield_{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}) (Version: 1.00.0000 - PACE Anti-Piracy, Inc.)
Visual C++ Redistributables (HKLM-x32\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.)
VKFX 2.2.5 (HKLM\...\{C270463E-8DF0-45c7-AB1F-2695E822E344}_is1) (Version: 2.2.5 - Overloud)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WAV to AC3 Encoder 5.0 (HKLM-x32\...\WAV to AC3 Encoder_is1) (Version: - Wieslaw Soltes)
WaveLab 7 (HKLM-x32\...\WaveLabPro7) (Version: 7.2.1.600 - Steinberg)
WaveLab 8 (64 bit) (HKLM\...\WaveLabPro8_64) (Version: 8.0.0.658 - Steinberg)
Waves Complete V9r21 (HKLM-x32\...\{93000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.3.21 - Waves)
Wavpack4Wavelab6 (HKLM-x32\...\{D2CB5A07-DF85-4CFD-8E76-EB23B77730F3}) (Version: 1.0.0 - RIL)
Windows Driver Package - Universal Audio Inc. (UAD2Pcie) UAD2DSP (11/30/2010 ) (HKLM\...\D6464B370822574865708071F3E87D186FAC7BA4) (Version: 11/30/2010 - Universal Audio Inc.)
Windows Driver Package - Universal Audio Inc. (UAD2System) UAD2DSP (11/30/2010 ) (HKLM\...\072DA3D1AC97714EA927A1A5770099D1AB131FD5) (Version: 11/30/2010 - Universal Audio Inc.)
WinRAR 4.10 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.10.0 - win.rar GmbH)
Wurlitzer V 1.0.6 (HKLM-x32\...\Wurlitzer V_is1) (Version: - Arturia)
XLN Online Installer (HKLM\...\XLN Online Installer Inno Setup ID_is1) (Version: - )
XLN Online Installer (HKLM\...\XLN Online Installer) (Version: - XLN Audio AB)
Yamaha Steinberg USB Driver (HKLM-x32\...\InstallShield_{89A4C956-539C-438D-8D3B-B9C054FD0DDE}) (Version: 1.8.5 - Yamaha Corporation)
Yamaha Steinberg USB Driver (Version: 1.8.5 - Yamaha Corporation) Hidden
Yamaha USB-MIDI Driver (HKLM-x32\...\InstallShield_{18369253-E53F-4A47-818E-082DFB950872}) (Version: 3.1.2.1 - Yamaha Corporation)
Yamaha USB-MIDI Driver (Version: 3.1.2.1 - Yamaha Corporation) Hidden
yellow tools Independence Pro 2.5.4 Software Suite 64bit (HKLM-x32\...\yellow tools Independence Pro 2.5.4 Software Suite 64bit) (Version: - )
Zero-G Vocal Forge (HKLM-x32\...\Zero-G Vocal Forge) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{CE4DC330-BD45-4D58-89D8-213C0487778D}\InprocServer32 -> C:\Program Files\MusicLab\RealStrat 3\RealStratView.dll ()
CustomCLSID: HKU\S-1-5-21-25170337-1842596019-2157349911-1000_Classes\CLSID\{FEEC32C4-894D-4B59-B6ED-8AC7B1C84295}\InprocServer32 -> C:\Program Files\MusicLab\RealGuitar 3\RealGuitarView.dll ()
==================== Restore Points =========================
13-09-2014 18:49:46 Removed M-Audio FastTrackUltra Driver 6.0.8 (x64)
13-09-2014 18:51:50 Installed M-Audio Fast Track Ultra Driver 6.1.9 (x64)
20-09-2014 11:07:43 Windows Update
20-09-2014 11:44:35 Installiert Yamaha Steinberg USB Driver
20-09-2014 11:46:24 Installiert Steinberg UR44 Applications
20-09-2014 11:48:38 Installiert Basic FX Suite
20-09-2014 12:01:51 Installiert Yamaha Steinberg USB Driver
20-09-2014 12:03:24 Installiert Steinberg UR44 Applications
24-09-2014 14:58:30 Windows Update
25-09-2014 14:00:22 Installed Waves MultiRack Native and SoundGrid V9r15
02-10-2014 11:09:40 Windows Update
07-10-2014 11:39:13 Windows Update
08-10-2014 12:06:16 Removed Waves MultiRack Native and SoundGrid V9r15
08-10-2014 12:26:52 Removed Waves Complete V9r18
08-10-2014 12:28:19 Installed Waves Complete V9r21
08-10-2014 12:48:13 Installed Waves MultiRack Native and SoundGrid V9r15
08-10-2014 13:04:31 Installed Waves Complete V9r21
08-10-2014 13:16:45 Installed Waves Complete V9r21
08-10-2014 15:05:45 Installed Waves Complete V9r21
08-10-2014 15:36:30 Installed Waves Complete V9r21
08-10-2014 15:45:41 Removed Waves Complete V9r21
08-10-2014 15:48:39 Removed Waves MultiRack Native and SoundGrid V9r15
08-10-2014 15:53:19 Installed Waves Complete V9r21
08-10-2014 16:25:34 Installed Waves Complete V9r21
08-10-2014 16:56:27 Removed Waves Complete V9r21
08-10-2014 18:12:08 Installed Waves Complete V9r21
08-10-2014 18:21:06 Installed Waves Complete V9r21
08-10-2014 19:22:14 Wiederherstellungsvorgang
08-10-2014 19:35:43 Installed Waves Complete V9r21
09-10-2014 15:16:07 Configured Waves Complete V9r21
10-10-2014 12:21:46 Removed Steinberg Cubase 6 64bit
10-10-2014 13:01:03 Windows Update
14-10-2014 12:02:48 Windows Update
16-10-2014 11:31:16 Windows Update
16-10-2014 15:06:14 Windows Update
19-10-2014 13:18:39 Installed Java 7 Update 71
22-10-2014 12:22:33 Windows Update
28-10-2014 09:30:12 Windows Update
28-10-2014 13:13:20 MusicLab RealGuitar
28-10-2014 13:14:28 Gerätetreiber-Paketinstallation: MusicLab,Inc. Audio-, Video- und Gamecontroller
28-10-2014 13:16:39 MusicLab RealLPC
28-10-2014 13:18:35 MusicLab RealStrat
01-11-2014 13:48:03 Windows Update
08-11-2014 11:46:01 Windows Update
22-11-2014 13:22:50 Windows Update
06-12-2014 14:04:32 Configured PACE License Support Win64
13-12-2014 11:41:20 Windows Update
03-01-2015 12:56:20 Windows Update
03-01-2015 15:56:19 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
03-01-2015 15:56:50 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
03-01-2015 16:08:25 Configured iLok Client Helper
03-01-2015 16:10:52 Removed PACE License Support Win64
03-01-2015 16:20:09 Installed PACE License Support Win64
03-01-2015 16:50:55 Configured PACE License Support Win64
03-01-2015 17:37:32 Removed Steinberg Cubase 7 64bit
03-01-2015 19:50:15 Installed EZkeys Classic Electrics 64.
03-01-2015 22:11:46 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
03-01-2015 22:12:30 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2015-01-04 12:41 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {1061FDDF-FD38-4434-923F-B01E4FE9EA0B} - System32\Tasks\{29175965-F787-4528-B3C8-F57146EBD8E8} => C:\Users\XXXXX\Downloads\DriverSetup.exe
Task: {142BD87F-4E9D-4DD7-BD37-30E762B767FB} - System32\Tasks\{85839F60-C55D-4A03-ADA4-CFBFF70913F4} => pcalua.exe -a "C:\Users\XXXXX\Downloads\Waves_Complete_V9r18.exe" -d "C:\Users\XXXXX\Downloads"
Task: {19ABA4F3-17E6-4F42-AB05-A96F73B41FA8} - System32\Tasks\{BB11460A-50B3-494F-9819-514E591A0F96} => pcalua.exe -a Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe -d Q:\Downloads\Tascam\FW-1082_DR_Win_v170
Task: {19FE1324-E749-4E42-AF49-7C829D936723} - System32\Tasks\{DA2C2281-7022-46CA-9B16-D35E131E183B} => C:\Users\XXXXX\Downloads\DriverSetup.exe
Task: {1DD7E5BB-F8FF-4979-AB40-75A0ACE435F4} - System32\Tasks\{29DBEDF4-CF87-46A4-B759-506861DE03D9} => C:\Users\XXXXX\Downloads\DriverSetup.exe
Task: {1E879F1F-9418-45B8-A47C-1E96C550DA07} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {23F870EA-19D1-47A4-88EA-D94C1A6C1ECF} - System32\Tasks\{4866F09B-B790-40EA-BF5E-BECC5DA41AE1} => C:\Users\XXXXX\Downloads\Waves_Complete_V9r18.exe [2014-10-08] ()
Task: {24235CED-6D6E-4576-8077-0B7DE26822E1} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {26AEF134-8686-4622-ACE9-13CD77C4229F} - System32\Tasks\{CD71D5AF-98B4-41C1-ABF5-E88C19526654} => pcalua.exe -a Q:\Downloads\Steinberg\WaveLabAspi.exe -d Q:\Downloads\Steinberg
Task: {26B0B279-DF8C-4CFE-9069-73402524C30C} - System32\Tasks\{ADB300C0-352F-4357-89B4-6DD70CC70B1B} => C:\Users\XXXXX\Downloads\DriverSetup.exe
Task: {298B857C-0B65-4FF1-974A-56F1C6FA985C} - System32\Tasks\{438F3EF0-DDAA-4675-A999-E7A0FD922E27} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {29948ADB-C48B-4D26-928D-AB21C21FAFE0} - System32\Tasks\{40D901C2-504F-4FFA-B15A-16A9F99DEB99} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_XXXXX\jBridgev1.19Setup_XXXXX.exe
Task: {29FB761E-3D1C-4660-9107-8982B85C70AE} - System32\Tasks\{412B8675-D7A0-4674-AD88-F0B1B16B8122} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {2DF5DD56-FBEA-49CD-9443-9D46DEEEF944} - System32\Tasks\{D1C71F96-9AAB-4054-87C3-8673B64EA10B} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {322F7B8A-43DE-4669-8405-F9FEE4815575} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {3D5576D7-F137-456F-ACF7-4E6951BCAAAE} - System32\Tasks\{5F9DF423-7D3C-427E-81DF-1C0A3089E864} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {45D8E408-144E-40D2-9CC8-945D0CC76826} - System32\Tasks\{B7775B54-F6E5-4832-B4BE-E877DE2F3B45} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {4BAC4AD4-0AFA-4599-BF47-E4110BB1E66E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {5D8AAF0F-B35F-44DF-940F-949DD8FB752C} - System32\Tasks\{81C7480D-65DF-4F3C-ADE7-3B3D3A21A13A} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {67A2DD0A-7E44-4505-9669-67B017F40EEE} - System32\Tasks\{626B8230-16CC-48CF-A490-58CEED8E21A8} => pcalua.exe -a "C:\Users\XXXXX\Desktop\Kontakt 4 Factory Content Setup PC.exe" -d "C:\Users\XXXXX\Desktop"
Task: {6B31B445-731D-4169-8747-370AC6CE856E} - System32\Tasks\{2AD3E5CD-846C-454C-8F5E-66F9BD146432} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {78468091-1F8B-4889-88B6-09283C587F7A} - System32\Tasks\{5746D425-FB45-49FB-89AC-6D718D8AAB96} => pcalua.exe -a H:\setup.exe -d H:\
Task: {7ABB794D-4402-4F4B-AAE6-A683947D3A5F} - System32\Tasks\{2CBFBC4B-2D9E-4357-AF11-0F0709DF2A74} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {83BF8E31-F091-46C7-90E7-5ABBACBBFB90} - System32\Tasks\{4898AA0A-DFAB-4D6E-90A0-A8B280D99E75} => C:\Users\XXXXX\Downloads\DriverSetup.exe
Task: {894932C1-A298-4A4C-BCDD-E4BA7387C27F} - System32\Tasks\AdobeAAMUpdater-1.0-XXXXX-PC-XXXXX => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-05-16] (Adobe Systems Incorporated)
Task: {95398875-A3E3-45A8-A3A4-1F8424E8D14C} - System32\Tasks\{BFAD21FD-87DD-4D57-8435-CAF757D6A11F} => pcalua.exe -a H:\windows\german\pm\personal\Setup.exe -d H:\windows\german\pm\personal
Task: {9C84F1F2-3512-4CE1-A371-B703568C1E31} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {A3B740FE-B024-42AE-8090-69BF33EA3B3A} - System32\Tasks\{5853299B-4259-442D-85A5-8CC6580067B3} => C:\Users\XXXXX\Downloads\DriverSetup.exe
Task: {A5428D3A-522E-4698-818D-012D47A16CB5} - System32\Tasks\{07A01D39-F62B-4A0F-A2E0-E53256F212E9} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {ABA56809-A401-4F32-874C-F1A51A3589C4} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-25170337-1842596019-2157349911-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {ABE5DB4C-EC69-4E54-A15A-A495205ACB52} - System32\Tasks\{B76EAEE9-550E-4B96-99EA-F859C946EBCA} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_XXXXX\jBridgev1.19Setup_XXXXX.exe
Task: {ABECAB4D-8FF9-45AF-A0D9-51D2A67D355F} - System32\Tasks\{C8AE0818-88F1-4A18-A57B-B441BE68ECA4} => pcalua.exe -a "D:\Retro ADpak Installer.exe" -d D:\
Task: {B076D6CE-39BD-4472-985B-7919F96AAB82} - System32\Tasks\{7C16986C-0877-491D-ABB6-88470C77EE5B} => pcalua.exe -a "G:\Downloads\Universal Audio\UAD-Win-v580.exe" -d "G:\Downloads\Universal Audio"
Task: {B4148331-B027-4713-AE36-D5E9929070D7} - System32\Tasks\{51E7D79B-2CAA-4FFC-ABD0-363FA9548361} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {BA31E6FA-43E9-4DD4-9608-A8C89C69160B} - System32\Tasks\{D1FC40E7-6029-4CC3-A406-CD8EBE42631A} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_XXXXX\jBridgev1.19Setup_XXXXX.exe
Task: {BA347F6F-00F2-472A-AF65-19A3D1DFB2A3} - System32\Tasks\{06423D2D-E9C1-4F33-B81A-82C715621358} => pcalua.exe -a "H:\Alicias Keys Setup PC.exe" -d H:\
Task: {BC37EC53-D032-424F-A403-D85B9824E3F9} - System32\Tasks\{B04DD4E4-4CDD-43D9-8750-AF953E20A112} => pcalua.exe -a "O:\Program Files (x86)\VSL\Vienna Instruments\LibraryInstaller.exe" -d "O:\Program Files (x86)\VSL\Vienna Instruments"
Task: {BD10712F-BDCC-40A6-9840-FF84C52BE6FD} - System32\Tasks\{2C46918F-A593-4956-88DE-8F999A59AE9C} => pcalua.exe -a "H:\Independence Pro 2.5.4 Software Suite 64 E-License.exe" -d H:\
Task: {BF7ABB10-6A68-409E-8008-EB534F8F8705} - System32\Tasks\{D398A544-CFB3-46E8-B5DF-626FF232C43B} => pcalua.exe -a "C:\Users\XXXXX\Downloads\install_flash_player.exe" -d "C:\Users\XXXXX\Downloads"
Task: {C18139FF-A0AB-4047-8DDD-39525E452E10} - System32\Tasks\{6904D156-3764-4007-AEC4-9544A7DA37E0} => C:\Users\XXXXX\Downloads\DriverSetup.exe
Task: {C37AE386-CBA9-43AE-9844-B2CE7224BE33} - System32\Tasks\{1D409CDB-4184-4914-A0E6-97AD74AC8C6D} => H:\windows\german\pm\personal\Setup.exe
Task: {C667DE3E-8FA6-443B-9CCC-7B757AB7C2C4} - System32\Tasks\{85AF413A-1425-4DA2-BFA3-8E5B4A8E3B8B} => pcalua.exe -a "D:\Cubase 7 for Windows\Setup.exe" -d "D:\Cubase 7 for Windows"
Task: {C73A72CF-5138-48BE-BF08-78546B184472} - System32\Tasks\{0BCE0B9C-45A2-40B0-9941-9F39BDACB669} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_XXXXX\jBridgev1.19Setup_XXXXX.exe
Task: {C92F3D73-0DF8-4A42-8396-F321B5E87D9A} - System32\Tasks\{EFB4A033-2F63-4013-82D3-FEDE6E7A8D55} => C:\Windows\System32\SoftLcd1082.exe
Task: {CA870B03-DCDD-48C0-98C2-D714511B21F1} - System32\Tasks\{C14BF85D-4129-4CE4-AD72-D630D327CC26} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_XXXXX\jBridgev1.19Setup_XXXXX.exe
Task: {D0CB62B8-3961-4DED-AC91-4AE23D264B6B} - System32\Tasks\{9B31F731-5050-4586-98EF-74A01C60D886} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {D401F2A2-731E-4682-BF5A-9AC9585DE606} - System32\Tasks\{674EA2D3-4F3C-4EA3-8749-2D08682045A0} => pcalua.exe -a "C:\Users\XXXXX\Downloads\DriverSetup.exe" -d "C:\Users\XXXXX\Downloads"
Task: {D57D1B7C-1831-4FAD-BF64-203A05D8D136} - System32\Tasks\{E6A7A111-7169-4964-9496-AA39C0C5D697} => pcalua.exe -a H:\Autorun.exe -d H:\
Task: {DF1EB108-2A31-441E-971D-1CD931F8A30E} - System32\Tasks\{C4C278E8-DFDC-4D88-A004-A03664E2C937} => C:\Program Files\Steinberg\Asio\asioglldsetup.exe [2010-12-06] (Steinberg Media Technologies)
Task: {E2AD9959-656C-4596-9ABE-C3AB27091F0E} - System32\Tasks\{E3C7FEEC-A48E-4A6B-8D20-9CDC54920125} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {E618B9A0-0D06-45B0-BCFA-BF36790B1C72} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {E9E16472-D60C-48EA-B60E-E2548DF10B2B} - System32\Tasks\{B74E7334-75CB-455D-8C95-F754C20EBF68} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
Task: {EB90BB02-A30C-4C16-A089-2811D2AA2EB7} - System32\Tasks\{665362E6-1AD6-479D-ABD8-BCF17AE72325} => C:\Users\XXXXX\Downloads\DriverSetup.exe
Task: {F2D8BAA3-CBCA-4E56-B0D4-0E6B5B601F6E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {FD61B29E-C3EA-4605-9193-7EF307CC5001} - System32\Tasks\{B6B539BF-11D3-4E9C-BB34-34F0B21FCC70} => Q:\Downloads\J-Bridge\jBridgev1.19Setup_XXXXX\jBridgev1.19Setup_XXXXX.exe
Task: {FF6AC220-F9ED-43A6-A526-138A6488B389} - System32\Tasks\{8F48DE62-F226-4564-A004-BC06D47FE024} => Q:\Downloads\Tascam\FW-1082_DR_Win_v170\FW1082_Win_1.70.exe
==================== Loaded Modules (whitelisted) =============
2013-08-11 13:11 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-06-13 00:10 - 2010-01-19 03:31 - 00072304 _____ () C:\Windows\SysWOW64\XSrvSetup.exe
2012-02-04 22:28 - 2012-01-09 19:44 - 00193536 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2014-08-30 17:12 - 2014-08-30 17:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll
2012-04-27 17:33 - 2012-04-27 17:33 - 00435552 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ulxmlrpcpp.dll
2012-06-13 00:09 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-01-03 14:13 - 2015-01-03 14:13 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-08-30 17:12 - 2015-01-03 22:31 - 00459048 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
2014-08-30 17:12 - 2015-01-03 22:31 - 00587048 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll
2014-08-30 17:12 - 2015-01-03 22:31 - 00332584 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com\nponlinebanking.dll
2012-04-27 21:21 - 2012-04-27 21:21 - 13005104 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\Common\ti_managers.dll
2012-04-27 18:09 - 2012-04-27 18:09 - 00018784 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Program Files\Common Files\System:bkJR4Q5ekubuEytkHOHN9FDldZk
AlternateDataStreams: C:\ProgramData\Microsoft:0JpKqUFDcPdEORJ8qNFp8w
AlternateDataStreams: C:\ProgramData\Microsoft:5hYrtYXv4RFuvoGmPrGD2NLHTREw
AlternateDataStreams: C:\ProgramData\Microsoft:5KfNWpWNPX1wbFxFO3E9ImnmfLp
AlternateDataStreams: C:\ProgramData\Microsoft:9kl92Sfgv9VOx5y487Gb
AlternateDataStreams: C:\ProgramData\Microsoft:e6QV9RBqH5tBpkOJ825uc44
AlternateDataStreams: C:\ProgramData\Microsoft:EmZUO1ghceEFEfgohiyQTSr
AlternateDataStreams: C:\ProgramData\Microsoft:FIzD2p7hRpzMsiWzLU4FWAu4DG2Y
AlternateDataStreams: C:\ProgramData\Microsoft:gEDtHGZl5VBhyUDsChb
AlternateDataStreams: C:\ProgramData\Microsoft:iBRVEzFW1llEoLZcS3VLEeVCW
AlternateDataStreams: C:\ProgramData\Microsoft:JFbsLoAG7ylh6FO5F5B
AlternateDataStreams: C:\ProgramData\Microsoft:lJgRnpcsZyHzZ9RcWOe669vqjX
AlternateDataStreams: C:\ProgramData\Microsoft:mzLKEwry2nZIbRjOEIHNQyz
AlternateDataStreams: C:\ProgramData\Microsoft:P2kNTjY7GAAENqAnpY
AlternateDataStreams: C:\ProgramData\Microsoft:PbjOONTVgtPL20OMMjQAGQFm
AlternateDataStreams: C:\ProgramData\Microsoft:pyWUynYKzFVcmjsLti7Jn2f
AlternateDataStreams: C:\ProgramData\Microsoft:qpD21ezWETolKR7zxZN132
AlternateDataStreams: C:\ProgramData\Microsoft:rTbZl3fuV0KA1SBvenaKkXxQGQGGNo
AlternateDataStreams: C:\ProgramData\Microsoft:u8EGYeTR5GuwkeSSaotMc8NQ1BG3Tt
AlternateDataStreams: C:\ProgramData\Microsoft:V7JFxnYuTdgxFTad71b7riK9u2
AlternateDataStreams: C:\Users\XXXXX\Cookies:0HxNukw9hQPeAlOyhj
AlternateDataStreams: C:\Users\XXXXX\Cookies:2sTxxI2AoieXEXStwlc
AlternateDataStreams: C:\Users\XXXXX\Cookies:fqAY3vHSNIV8wb0vtZQlu58L1sO
AlternateDataStreams: C:\Users\XXXXX\Cookies:maNpXg26EfLhAYLVCg5bm9NQ
AlternateDataStreams: C:\Users\XXXXX\Lokale Einstellungen:9C8oVTTJe0Mg4r6XIib3b
AlternateDataStreams: C:\Users\XXXXX\Lokale Einstellungen:9CsZiNQcryUE7kqO6ZBBdG5
AlternateDataStreams: C:\Users\XXXXX\Lokale Einstellungen:GGSz4VHky0otQFX6En2N1VP
AlternateDataStreams: C:\Users\XXXXX\Lokale Einstellungen:To2ogLfHDD3i7B2vbeAdv7PjjFaB
AlternateDataStreams: C:\Users\XXXXX\Lokale Einstellungen:WvM0t3Ek5IOBgKzW9cw7l
AlternateDataStreams: C:\Users\XXXXX\Lokale Einstellungen:XMujKqO45NECvrUh7LWwPD
AlternateDataStreams: C:\Users\XXXXX\AppData\Local:9C8oVTTJe0Mg4r6XIib3b
AlternateDataStreams: C:\Users\XXXXX\AppData\Local:9CsZiNQcryUE7kqO6ZBBdG5
AlternateDataStreams: C:\Users\XXXXX\AppData\Local:GGSz4VHky0otQFX6En2N1VP
AlternateDataStreams: C:\Users\XXXXX\AppData\Local:To2ogLfHDD3i7B2vbeAdv7PjjFaB
AlternateDataStreams: C:\Users\XXXXX\AppData\Local:WvM0t3Ek5IOBgKzW9cw7l
AlternateDataStreams: C:\Users\XXXXX\AppData\Local:XMujKqO45NECvrUh7LWwPD
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Anwendungsdaten:9C8oVTTJe0Mg4r6XIib3b
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Anwendungsdaten:9CsZiNQcryUE7kqO6ZBBdG5
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Anwendungsdaten:GGSz4VHky0otQFX6En2N1VP
AlternateDataStreams: C:\Users\XXXXX AppData\Local\Anwendungsdaten:To2ogLfHDD3i7B2vbeAdv7PjjFaB
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Anwendungsdaten:WvM0t3Ek5IOBgKzW9cw7l
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Anwendungsdaten:XMujKqO45NECvrUh7LWwPD
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Temp:EkLl8viNdpZaDt5BtyibJZWv
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Temp:O3Gupa96puwZsDBndwL
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Temp:SulGbcoM5k5htOkrT6oFYFHf
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Temp:ughxnTcu7B6kj3rj
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Temp:VTgSC9p3AXvhXEs6X1UKGxWVvAyMr
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Temporary Internet Files:0L9d5Wklr9wAn9cdrskJuAF6
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Temporary Internet Files:fhI0qFS4NI538e7huuTv8eRfF
AlternateDataStreams: C:\Users\XXXXX\AppData\Local\Temporary Internet Files:xe6TJQ53vIYg0hq1z2ARUrHBzOpe
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
MSCONFIG\startupreg: AcronisTimounterMonitor => C:\Program Files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DigidesignMMERefresh => C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: StartFw1082Panel => fw1082panel.exe H
MSCONFIG\startupreg: STCAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
MSCONFIG\startupreg: ZyngaGamesAgent => "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
========================= Accounts: ==========================
28D925BEF4154602B49E (S-1-5-21-25170337-1842596019-2157349911-1005 - Limited - Enabled)
Administrator (S-1-5-21-25170337-1842596019-2157349911-500 - Administrator - Disabled)
E14ACD8B9526477D8048 (S-1-5-21-25170337-1842596019-2157349911-1003 - Limited - Enabled)
Gast (S-1-5-21-25170337-1842596019-2157349911-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-25170337-1842596019-2157349911-1008 - Limited - Enabled)
XXXXX (S-1-5-21-25170337-1842596019-2157349911-1000 - Administrator - Enabled) => C:\Users\XXXXX
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/04/2015 03:56:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 2.1.2015.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2e78
Startzeit: 01d0282e881229e0
Endzeit: 2
Anwendungspfad: C:\Users\XXXXX\Desktop\FRST64.exe
Berichts-ID: d943d946-9421-11e4-a0f7-50e549ee6d92
Error: (01/04/2015 03:55:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 2.1.2015.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: c5c
Startzeit: 01d0282e754f566d
Endzeit: 2
Anwendungspfad: C:\Users\XXXXX\Desktop\FRST64.exe
Berichts-ID: c1386804-9421-11e4-a0f7-50e549ee6d92
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2015-01-04 12:35:45.929
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-01-04 12:35:45.902
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-08-05 17:18:25.747
Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-08-05 17:18:25.716
Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\NTGLM7X.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-08-05 17:18:23.173
Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2010-08-05 17:18:23.157
Description: Windows konnte die Abbildintegrität der Datei "\Device\CdRom0\Install\GMSIPCI.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Percentage of memory in use: 17%
Total physical RAM: 16346.31 MB
Available physical RAM: 13463.67 MB
Total Pagefile: 32690.8 MB
Available Pagefile: 29365.7 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (Win7 System) (Fixed) (Total:467.64 GB) (Free:135.7 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (Lokales Laufwerk ) (Fixed) (Total:99.82 GB) (Free:79.72 GB) NTFS
Drive f: (W7 Cubase/WaveLab) (Fixed) (Total:467.64 GB) (Free:287.3 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (W7 Adobe/Daten/Sonstiges) (Fixed) (Total:463.87 GB) (Free:270.97 GB) NTFS
Drive i: (Plug Ins 2) (Fixed) (Total:463.87 GB) (Free:193.08 GB) NTFS
Drive k: (Lokales Laufwerk) (Fixed) (Total:123.68 GB) (Free:58.68 GB) NTFS
Drive o: (W7 Plug Ins) (Fixed) (Total:708.01 GB) (Free:318.09 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B0C5A5B3)
Partition 1: (Active) - (Size=467.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1A679F39)
Partition 1: (Not Active) - (Size=123.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=708 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=99.8 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 88618861)
Partition 1: (Not Active) - (Size=463.9 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=467.6 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ich hoffe es passt alles so und es kommt was bei rum. Gruß |
|
04.01.2015, 19:49
| #15 |
| /// the machine /// TB-Ausbilder | W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weissESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu W7 - Bildschirm bleibt nach Anmeldung wenige Sekunden weiss |
| anmelden, anmeldung, anti-malware, automatisch, bildschirm, firefox, jbridge entfernen, kaspersky, keine updates, nicht mehr, plötzlich, problem, probleme, proxy server, rechner, sekunden, server, software, system, trojaner, updates, weisser bildschirm, windows |
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
Linear-Darstellung
