| |
| |||||||
Alles rund um Windows: Andauernd USB-Ton und Fehlercode 43Windows 7 Hilfe zu allen Windows-Betriebssystemen: Windows XP, Windows Vista, Windows 7, Windows 8(.1) und Windows 10 / Windows 11- als auch zu sämtlicher Windows-Software. Alles zu Windows 10 ist auch gerne willkommen. Bitte benenne etwaige Fehler oder Bluescreens unter Windows mit dem Wortlaut der Fehlermeldung und Fehlercode. Erste Schritte für Hilfe unter Windows. |
 |
03.03.2015, 13:21
| #1 | ||
 |  Problem: Andauernd USB-Ton und Fehlercode 43 Hallo allesamt, mein PC macht mir seit gestern einige Probleme, Google hat mir leider nicht geholfen weshalb ich mal hier nachfragen möchte. Das Problem begann gestern als plötzlich der USB Ton des USB Anschlusses erklang und mir meine externe Festplatte als neues Gerät anzeigte, daraufhin kam die Meldung, dass sie formatiert werden müsse. Dies kam dann mehrere Male sehr schnell hintereinander und führte schlussendlich dazu, dass mein PC eingefroren ist und ich ihn manuell neustarten musste. Danach lief er stundenlang wieder ganz normal, die externe Festplatte funktionierte ebenfalls, dann aber kam der USB-Ton erneut, zeigte mir jedoch jetzt: Zitat:
Zitat:
Ich habe dann ersteinmal alles herausgezogen (2 externe Festplatten, 1 Wireless Adapter, Maus und Tastatur) in dem Gedanken etwas wäre defekt, aber auch nachdem selbst Maus und Tastatur entfernt wurden ging der stetige Ton weiter. Einzige andere Maßnahme die ich durchgeführt habe war ein Virenscan mit GDATA, hier einmal das Protokoll: Code:
ATTFilter Virenprüfung mit G DATA INTERNET SECURITY
Version 25.0.2.5 (08.01.2015)
Virensignaturen vom 02.03.2015
Startzeit: 03.03.2015 10:22:40
Engine(s): Engine A (AVA 25.496), Engine B (GD 25.4742)
Heuristik: Ein
Archive: Ein
Systembereiche: Ein
RootKits prüfen: Ein
Prüfung der Systembereiche...
Prüfung aller im Speicher befindlichen Prozesse und Verweise im Autostart...
Prüfung auf RootKits...
Prüfung aller lokalen Festplatten...
Analyse vollständig durchgeführt: 03.03.2015 13:01:07
423079 Dateien überprüft
13 infizierte Dateien gefunden
0 verdächtige Dateien gefunden
Objekt: uTorrent.exe
Pfad: C:\Users\Christoph\AppData\Roaming\uTorrent
Status: Virus gefunden
Virus: Win32.Application.OpenCandy.F (Engine B)
+ Archiv: Uninstall.exe
Pfad: C:\Users\Christoph\AppData\Roaming\Browser Extensions
Status: Virus, Datei gelöscht
Virus: Win32.Adware.Spigot.A (Engine B)
Objekt: 3.4.2_37248.exe
Pfad: C:\Users\Christoph\AppData\Roaming\uTorrent\updates
Status: Virus gefunden
Virus: Win32.Application.OpenCandy.F (Engine B)
Objekt: uTorrent.exe
Pfad: C:\Users\Christoph\AppData\Roaming\uTorrent
Status: Virus gefunden
Virus: Win32.Application.OpenCandy.F (Engine B)
Objekt: uTorrent(2).exe
Pfad: C:\Users\Christoph\Downloads
Status: Virus gefunden
Virus: Win32.Application.OpenCandy.F (Engine B)
Objekt: uTorrent(1).exe
Pfad: C:\Users\Christoph\Downloads
Status: Virus gefunden
Virus: Win32.Application.OpenCandy.F (Engine B)
Objekt: uTorrent.exe
Pfad: C:\Users\Christoph\Downloads
Status: Virus gefunden
Virus: Win32.Application.OpenCandy.F (Engine B)
Objekt: uTorrent_3.3.0.29126.exe
Pfad: C:\Users\Christoph\Downloads
Status: Virus gefunden
Virus: Win32.Application.OpenCandy.F (Engine B)
Objekt: steam_api.dll
Pfad: D:\Christoph\Videos\Neptunia Rebirth1
Status: Virus entfernt
Virus: Trojan.Generic.12710958 (Engine A)
+ Archiv: DTLite4481-0347.exe
Pfad: D:\Christoph\Videos\[Fuwanovel] Ikinari Anata ni Koishiteiru
Status: Virus gefunden
Virus: Win32.Adware.OpenCandy.C, NSIS.Application.OpenCandy.B (Engine B)
+ Archiv: Backup files 10.zip
Pfad: D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000
Status: Virus, Datei gelöscht
Virus: Win32.Adware.Spigot.A, Win32.Adware.Spigot.B, Win32.Application.OpenCandy.F (Engine B)
+ Archiv: Backup files 21.zip
Pfad: D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000
Status: Virus gefunden
Virus: Win32.Application.OpenCandy.F (Engine B)
+ Archiv: Backup files 8.zip
Pfad: D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000
Status: Virus, Datei gelöscht
Virus: Win32.Adware.Spigot.A (3x), Win32.Adware.Spigot.B (2x) (Engine B)
– Der Zugriff auf die folgenden Dateien wurde verweigert:
C:\Windows\Minidump\073012-21403-01.dmp
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession7.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTUBPM.etl
C:\Windows\SysWOW64\log.txt
C:\Boot\BCD.LOG
C:\Boot\BCD
C:\ProgramData\Microsoft\Application Virtualization Client\SoftGrid Client\sftfs.fsd
C:\ProgramData\Microsoft\Application Virtualization Client\SoftGrid Client\sftfs.fsG
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0117d3670a4375e36cd1425b2641bb59_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0228fab825ba6aaddcf213d9d439266a_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\004da380ba02cbda736f261dc866c257_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\034a170dfcdcdb1c0df512074b190c93_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\035e147f6921c8e647b53b562d33bfb7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0430c4953424185b741fc5fd2355932c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\00ed4f500292a1918ba3c0ca663e34b2_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\07bf78d497dce80718b09f65624c9fde_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0a654ec04554fb89222880230f9ab875_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0974f07f7d827a3d51980d3be9e48291_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0915aaf01d7ac933f07a84724e56b2c6_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0535ffd36c4e0e2fbdfaa49980ef77a2_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0d8be86cc8a1cbee5c91f9149b8536d3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0aeae6f0995a53329693f39217c11d12_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0c9e9e1484cf59b58f42cbe984224217_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0c9186cc3825bd507f8d7981ef62df27_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0f38bc2f4f33a07e623fc40eb863f84d_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\11065c41c69e1de1bf6e3feb7d6dd71b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\111240b851100c91259a4444c0ebde16_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\11442a73df6060981059f171611f4758_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\10222b515ff9726aa4cd7b455a532af7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\160ebbe55724d7c77f043f72fa5be7f8_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\137e90b3adc07dcee0b4d6fe1c56c53e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\119fad08d42ffa6d95dcd9b526e7a420_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1629b14b6598f03a5149ba9d958b2e96_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\171d8f49f9212a2705ef79d8b18632b9_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\17633b8e55d9a464b963affe7fd11f60_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1830fc8ebb03f20a543df9d204c56396_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1cb7318a1a7a9121c39ec7a94dd8d15a_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1a849ba47db4dad6a01027207e7422c8_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1bae4fea9d507d414dc9a98e25386821_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1f31201322be077c3f342d35710c0311_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1c1a41f31234bbda5946c9ab73fed540_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1f80b2045bca2bc5ed23d76943bcb951_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1fd8ab39f31e0dc9057daed0f096bbb7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\19c52dd7e58ab1f68d339f5b258d4890_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\21358a0ecfd5b2b347cea5c4572de1a0_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\209ea04bbe09e84e94de5dee60bd65a7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\26f07659bb4e6246989f556a7c181aea_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\27e4391d1815dcd587a0fad2aedaef5c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\237d906337a065bf0ad7b7ca4fc011df_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\245941c783b5e5601d78c6a461514b96_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2834dbf1ab18b3901b948309cdbb109a_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\285ae6ff3732a8fdcb49ac2613489041_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2aa5c708a22e4e589e5d5cfb05d70767_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2ac96ecaefb7a7987b90ce1048f54cea_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2ba6100315b06099c8a521936eb24b90_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2e88ec605487154c8dc6209f50c4666b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2e0e38f79df41285b22d7213f5cccab2_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2f93e5caa9db9c6fe20f3dfdd62fffa3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\303fc97f0fd9f9e592ccef7caf64d8ba_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\34f7899273a72161a78e9d517257b949_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2fb67c1a983752cf4d290514d2242735_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3a4326fc6c41425362dc794cdf2a20a3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\36276e290edd84ca7a9e155c2e272d4c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\30d62a9aba10f047879fee44969372f7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\336105436d0be850bea2d2e0cba4dbf3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3d9ef5e6a743eb7f444456b7c2c494cf_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3e30fb5b13859b84176625a083d036ce_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3e7b4a5e00845646a57e6fe595843719_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3ae3d1c6429d2005fe086aff1f562400_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3fcd73ee9be3aae2140bc63b99b871ce_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3beaf29ae03cf9055b92a623c8f93019_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\405373cfddefd9620e3a0f8bbd3b6990_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\417c3433a69bc134a3c377c8a6f9220f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\44b12a30bade44ade5c9478da549963f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\477011aba7c0866c511431cf13b681d9_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\48752d7cf1bf00a339055f2392a0409a_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3e780583ab44cee5d2cee6035e6af607_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\43e6f4cc9a2fde474e1f4bf205d68c55_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3d8255c33d4d36339aad3449fd95ce7e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4895b6a3de700b897a77d71ae6a99840_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\41d5824d92a088d610459fd5f3233868_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4c3db17306312fedea206e7c62ad9efb_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4e3c1a8a8952dbe2898bdbdeacca4280_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4dda38969ee1925280d295c585b0923e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4e884e9f1721687b01efe95eb7054fca_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4dff2c9eeb1840f47936379976db7d2b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4a858e1280b09b1af298779baef11170_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\509cbdce248de6ee7b56c7d605361ec5_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4ee745b55ac4822cec33a4e3a39ab704_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\51c0cf4173ba1a80f94f87e53e85e9c0_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4ee357f9bf469dadeb075ff96c5f009d_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\51483bcdba48783fb36bcadd575ba707_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\56829fd9fc0832f6067fbf94977f6293_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5744bef0d2432186bb89c1347a34f834_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\592b0c6acd8f9b22bf5c95fc24f27fa3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5b9d44a855e42620f1c17b10ea35046d_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5a872eeb7e25efe9fd27980078a57897_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\57e878eab1b2a3ee539a9219c3be151a_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5fd12a9a46b5db778f0fe8a598d68f14_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\59b8db7a5d48593200a485556453d1dd_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\617fd81607af43cf7368e3b1108cb3db_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5c18206243fd62e658517b8cf3ed35a1_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\614e3843142c0d74db2e05efe9e684ca_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\61d8f24dad439cfbda74620f3cea7794_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5ffe2800b1368a94e83d8c3d2a32f069_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\62a3cc75cd4ff544466d8d27fc1e51f0_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\62fb43ead4aaa44e14858c5d4286ca1b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\64265f10c5c11860cd9285246f24be1f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\61bb357613f5782af0be6347e2a95b48_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\65dbe09da30f51eb5d2643d4fffd893b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\66a409ae445ea3ae3f5403c451855f19_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\677468f92c054b507767eb27ce0f05d9_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\684fdab3f612a97b13b8acdc491c4696_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\69f99da01891b9f1a19bb086dc519101_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6b12f4bc718b13ccfb424234c1fd17a7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6c081d2beed284cba2ef2083acc91505_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\69e162f5e9e1e3089842e1256a7a3094_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6e6bd4caf44b769f853003b93bdfbcd8_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6ba02552471b1bae7f3304338087e6ef_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6f1cf4cb24c1caaadd96e6954f4dcfa8_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6fcf12e9f106affe085a17ec469ba8d4_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6ffbe04cf8e2eed88df764a9ee1ee166_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6fca3ecf6c68f768ac21da2636b812ac_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7016706d0a75776b0a8b58fb123b658b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\70616a7893501dd5d817c95a87da2f08_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\71ea5ab93859ba417b296b08fa22b873_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\702fd047301cc986c46336f1c314b28e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7648d77fd50af115d5695b6ba0504e7b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\71e5b3650c5b6b6ae7fba050374f05dd_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\70f24f0ea896b9005ceacd56c9b2fb1f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\77d22d271fb31ba22d71bfc8846fd8a6_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\79e3a87bc7b88bd52a1c9a719bec17a9_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7874fff7a697f1c03519996eda2c5f97_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7d36c79c42840a5455dc49280a5bbc8d_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\79f703ed391f24261893ae010449923e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\796449be930be09241677c381f24271a_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\80134f05a949cfe5fe2859d2e7255907_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f164bbaf8a9a05c9424bc74341883e1_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\809b9b7f4d3ed035ec830a1e116714a5_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\80d681a155a0391ca4917a2397ee3179_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\809ef431b7a04333f16f8a0df914fe95_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8317308e7ba11d10e4f2cda6af55ce82_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\836a028c762ec8dae9ed2ec02559b37f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\88f9ef64c137cf510dcb1d962947e856_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\899bcd2841b3495a9e22e42730af2ebb_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\85a303dde7431cc19851f15749918bae_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\89c9a6f6d242014207c2a5b4bff54350_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\87c38dfea80ea63f1e60e118e98eb500_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8a488eb3b383c5fd6db94c3f8fbdc4a1_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\89dedcbdc1a1086cdc437529e424d6ad_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8bfcc15bba7495a1d8d9425633bf5232_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8fb6d72797790e06deabd05f2374a6fc_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8e110983c987943e49b4dd929272c0b4_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8dfce62940c44618d804059bcdd11010_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\90778af451fee302a3ec6e05e4a411e7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9342cc6b9f2702a1e4c30eac12d9aa9f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9001e605114d957460b6c77ab8e6450c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9367e76a0ff7a2bb90b96553cbc6e90f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\96e357af5500e2d02bb0571601483aa0_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\95b78ea10b42b216f67a62b94aa05cf0_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\979f866852e4012d732e9099bc82eb2f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9802ea0ae7761042396939f54239dfa4_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\982384d064ba61c5e11dc72321293f54_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9514dd6dbabfce63fb59e68943f6a7e7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9a3a2c8ab6b4eaff234c8c4f496a719e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\95e06657fd1063be29dea695957f37f6_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9a475405e6ae764d5de53d7e28739569_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9bb93866d935abd98a2c8f398f7ce056_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9dbc25bfb4d30c33bee76fd0ab74fd47_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9cffa3b4edeaf9311d15e26f2c0e2c6b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\540db133b6b712379a2c3b8553a120a8_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9dd45f4d676a6a15470576403cf40389_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a1a0efbc098a126faec44f70bf9eaa0f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a3a15a2b080a280a35aee12950873ead_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a1f857d852f49a0838a706d8181bb4ac_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a45bd91bbf8bc40c6788909ecb439b18_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a6ec1cd3b03b1e835265bcb3d87f37ce_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a8248c5b8be25bb768ee036ed1e07b5c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9e26e2e4a4b0ddb38e88d90990a0348c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a8667280e471bd5e32bad3a3c7d67c4b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a8a2350a9bc6d50022460b395f10165c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a90b7204130927edbf6a302c6e71dc8d_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9e8ee44b9d7077b3afa6cc45534815e9_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a93f9d9beda5d6482e3fb86351780455_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a96420d1b877534984f8a862c879ace1_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a9eeb3bc21c8401be09dc5ec6367cb34_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a96a77258692f2153fa5a6b8740eddfd_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ab441c94e1513a0b97ffd7203a254115_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\aa09e463df0f135e591302bb75591d2c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ab98b0e6e647f1119178386ee38375e5_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a58280dbd3758d92cd329658c30446ab_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\afb0d2c7067f6dcb994e47ce605a8657_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a91163f6944b0606afcb222690330c1e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b37e5ba2f4fe501efc583477b0df4696_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ae0ec4c98123fd1319359088a3c9225b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b2f167f60e0612877f0e705e66929aee_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b04911c56a841d5930ce489ff1731a1f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b3831772035f61c1bf5ae55f38c4c7c3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b7dbd5f0b3342bc1132ca6126654166c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b9127b6ad09665aac6a802982b9deca4_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c3fa3064723c8466fac9d13f4dd70951_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c09c075130136d2f1bd2251fce75f3b2_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b8d92b1323a93f66902af68295c83dac_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c51685af41eb63edcf2a68b51396dbc3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ba4195f74ac4bea281910d8a34257008_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c5643b13804077a1fa6c62f25f1b035c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b511247e3ac3a98d16c6a6397c855248_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c6722786a7533a39234d9cc83dd05ef2_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c660acad5e9c2e877a268211b549ca90_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c8389a7a2d6e6ca31ab37060cfe445bd_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c9bc4329c218bfb88d2de889c327d5d4_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ca0b4a34f0712fa21360435e3110ec64_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c6f9627a4aea4161588588b583bcb780_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ca88b698cb0c18631289c35f6a29f8a9_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cbdf5d54ee94e3e1e19261a3b8901ad7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c8a985c2f64ffc451c73ab58ee51d759_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cbefab425d7d891fa49e7ba7b1b4c1f8_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c98b4f04267127eccfea7b763769f32b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cca22c82a1862ff52bb23bbd95a7b8d2_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cd3beff69115c1a5a5f6d7544ed8b4e6_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cf589a9f788400b7ec7d439efeaf9d8e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ccc5b5177183654e116bbd20831546b9_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ccfd16c70bef7718e7ce6eca1d9dcbc1_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cf9722324193f1c8ff50b1339f194a56_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d081bb36f40392039bc0c2ea0abd43ea_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d4bfcedfd68a672192462fbce1bbf1ec_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d44b3b3b14a40c39eb09b3b4bc794b4b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d433ade89bbc931b199db912c896a82b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d22aef7761826f9c1e98dd379cfeb2a3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d56b18770dd5ea09f8dac4dafe2e9944_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6be144aee9884de726e685cbbd0f5e3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d5dc46be1dc8219f9bd6efef2aeaf16c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d75ae42416c52522752fcadfdc99d794_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d9c0eacab723a300fa7f0627db7313a7_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d764c7949ac2b9576e671548cc05f193_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\db5d94cafbc67aafdf4de31c131f47b3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d73c01cc4786df9c486e0ce1c83d1127_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\db893ff11e099649960c53545e936822_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\de7ef9b26a45aed9d25ac54b46e58621_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d335aa4e224350b86f50d934bfae5298_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d9e9a6ce097a97ff733f5d64c1ce2740_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e003cd03002c9a5ea7dcb431df2141fe_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e13ce492a4997c69fd8280d87480de2f_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e0f50a743ca5889aeef6fe9e04189982_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e23382905f028f0029ce3e7869e2e0df_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e209ff93793dd71efeca4ad7b3d346c1_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e5471377a84274f5e0ad7ba3304e482e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\defd09d6a7de426c5fb3ac6e497da210_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e6d2a457ce63602c368a7331063640dd_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ebb3ebc228003e996604652ef429cfb0_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\db9a51c857a70efbf8ed763c531da44d_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e9d4ebca13ea0fec5eb40c2bd49063bb_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e3e4c4292cc9d59576e5659608f09378_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ed962cd7df5f23e241938124ea332953_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\eef700d17ab26e32ce924df503996e54_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e6275592179bd3bec460be197385887b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ef5d3dd4fff36ef3acb1f717ae098391_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\eef307ea9d850ac91cbca4607dd46195_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f0f18e097d76ca0e28dd208a6aee9738_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\eed8370bc9f1c1e64a734ad81b90c6f5_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f072300ab68cf14dd90d99bc47d6728b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f323c8e9dd5a9e7c234499a86bf8da2c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f39f5e291cd3a19bc69ddde48bb83051_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f460b74a59ccc42ea0c55fcc69b575e8_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f6ba40f25d4f171141fbb1f54dc4acbd_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f0f77c23f507ca3bd62a60ecd7e3f33b_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f11d39d8d19a21ba223995f6a99703a4_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f72a59707589a777a2f91b74d1c55a3c_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f164a2346c4ca134a03e70219186f5ba_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fb9b6d4267a9b40e26656e97e88e7338_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fac1b0b3b0f469722ab726c7427defc3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fbbb4b33c82503e0079f01f9acfbae8e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fcabf90a19947e7a4d116bc87f6e2de3_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fcb9a409e9c901567ca587f3cd500c95_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f9e2aecd979c66a622b0fbf71ecb1214_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fc049e566cc3a7484c30c48ac8c3effb_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ff2ebcefacd1bf3ad1430d97f1dcdf6e_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fdc2b8ec4048f6e814a578be89f72b51_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ffb2187b103de624003d1418f3e9101d_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f81a76e4a206c72e3f6d1463f6b41a27_bbee0b71-3915-439d-85b5-f7eb8a49df41
C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv01.tmp
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.67
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.7E
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.80
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.87
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.A0
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.CB
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.CC
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.VE0
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.VE1
C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-8B7FCD938043BEF6EB642E32CDCB7D5E73943C2F.bin.VF
C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\MpSfc.bin
C:\ProgramData\TuneUp Software\TuneUp Utilities 2013\TTUSvclrt.tt
C:\System Volume Information\WindowsImageBackup\Catalog\BackupGlobalCatalog
C:\System Volume Information\WindowsImageBackup\Catalog\GlobalCatalog
C:\Users\Christoph\ntuser.dat
C:\Users\Christoph\AppData\Local\Microsoft\Windows\WebCacheLock.dat
C:\Users\Christoph\AppData\Local\Microsoft\Windows\WebCache\V01.log
C:\Users\Christoph\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat
C:\Users\Christoph\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.tmp
C:\Users\Christoph\AppData\Local\Temp\etilqs_eaBK58GWgFgf6aY
C:\Users\Christoph\AppData\Local\Temp\etilqs_f6e9aUlzSQfJjdQ
C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\parent.lock
C:\Users\Christoph\AppData\Roaming\Skype\DataRv\offline-storage.data
C:\Users\Christoph\AppData\Roaming\Skype\drcornwallace1\bistats.lock
C:\Users\Christoph\AppData\Roaming\Skype\drcornwallace1\keyval.lock
C:\Users\Christoph\AppData\Roaming\Skype\drcornwallace1\main.lock
C:\Users\Christoph\AppData\Roaming\Skype\drcornwallace1\msn.lock
C:\Users\Christoph\AppData\Roaming\Skype\drcornwallace1\statistics.lock
C:\Users\Christoph\AppData\Roaming\Skype\shared_dynco\dc.lock
C:\Users\Christoph\AppData\Roaming\Skype\shared_httpfe\queue.lock
C:\Users\UpdatusUser\ntuser.dat
– Die folgenden Dateien sind Passwortgeschützt:
C:\Program Files (x86)\BrowseMark\bin\BrowserAdapterS.7z
C:\Program Files (x86)\capy\Superbrothers Sword & Sworcery EP\res\sworcery.dat
C:\Users\Christoph\Downloads\Anejiru_2_Shirakawa_Shimai_ni_Omakase_02.rar
C:\Users\Christoph\Downloads\CSSnB01720ph264A08289F5F.rar
C:\Users\Christoph\Downloads\DLaM2DC6F1A.rar
C:\Users\Christoph\Downloads\dr-anth01e.rar
C:\Users\Christoph\Downloads\GG13EO.rar
C:\Users\Christoph\Downloads\install_flashplayer16x32au_mssd_aaa_aih.exe
C:\Users\Christoph\Downloads\MML_AA2_v120b.rar
C:\Users\Christoph\Downloads\NHRBE01704x4804D86D6E7.rar
C:\Users\Christoph\Downloads\NHRBE02704x480128F397E.rar
C:\Users\Christoph\Downloads\regfix_64.zip
C:\Users\Christoph\Downloads\S2GJDGSOx264bHX.rar
C:\Users\Christoph\Downloads\SSIL03.rar
C:\Users\Christoph\Downloads\SSIL02.rar
C:\Users\Christoph\Downloads\SSIL01.rar
C:\Users\Christoph\Downloads\[SD]_TT_03.rar
C:\Users\Christoph\Downloads\AKB\2013-11-16_1920689091.rar
C:\Users\Christoph\Downloads\AKB\2013-12-12_-323090954.rar
C:\Users\Christoph\Downloads\Cucco\1421342779001.rar
C:\Users\Christoph\Downloads\mawam\2014-03-14_1323904276.rar
C:\Users\Christoph\Downloads\Rail Wars\2014-08-16_-1331938011.rar
C:\Users\Christoph\Downloads\Shigatsu\2014-11-15_-1095158631.rar
C:\Users\Christoph\Downloads\Pocket Girl Hunter\Z001129.rar
C:\Users\Christoph\Downloads\Theme\_Windows_7_Theme__Erica_Hartmann_by_Shiroskin.rar
D:\Christoph\Dateien\avira_free_antivirus_de.exe
D:\Christoph\Dateien\swordandsworcery-windows-1.02-1344449589.exe
D:\Christoph\Dateien\Artificial Academy 2\High\[AA2][ZODGAMEMOD][Albert5834].7z
D:\Christoph\Dateien\Artificial Academy 2\MML\MML_AA2_v120b.rar
D:\Christoph\Dateien\Artificial Academy 2\Neuer Ordner\PPVERDecrypt.0.7.zip
D:\Christoph\GTO\[Kanjiku]GTO Lost Paradise Kapitel 1 - Der Grund, warum ich hier bin.zip
D:\Christoph\Videos\Doujins\(C81)[KAROMIX] Karofulmix EX6\(C81)[KAROMIX]_Karofulmix_EX6.rar
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 103.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 104.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 105.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 141.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 160.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 249.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 248.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 258.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 257.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 256.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 255.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 259.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 261.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 260.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 265.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 267.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 262.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 263.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 264.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 66.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 64.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 67.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 68.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 72.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 78.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 80.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 83.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 65.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 75.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 84.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 82.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 90.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 95.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 93.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 96.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 91.zip
D:\Zenimax Online\ESO\Launcher\Bethesda.net_Launcher.version
D:\Zenimax Online\ESO\Launcher\Bethesda.net_Launcher.exe
D:\Zenimax Online\ESO\The Elder Scrolls Online EU\depot\depot.version
D:\Zenimax Online\ESO\The Elder Scrolls Online EU\game\game_player.version
D:\Zenimax Online\ESO\The Elder Scrolls Online EU\vo_de\vo_de.version
D:\Zenimax Online\ESO\The Elder Scrolls Online EU\vo_en\vo_en.version
Intel Core i7-3770 4x 3.4 Ghz 16384MB DDR3 Corsair XMS 3 Dual 3072 MB NVIDIA Geforce GTX 560, ASRock Z77 Pro3 1000 GB SATA III, 7200upm, 32MB 22x DVD+-RW Double Layer Brenner 550 Watt BeQuiet Windows 7 Home Premium 64 Bit SP (Japanisches Gebietsschema, falls das von Belang sein sollte) |
|
06.03.2015, 22:52
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Andauernd USB-Ton und Fehlercode 43 Anleitung / Hilfe Hallo und
__________________ Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?[/b] Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
 Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
07.03.2015, 15:24
| #3 |
| | Andauernd USB-Ton und Fehlercode 43 Details Nein, weitere Scans habe ich nicht durchgeführt, daher auch keine weiteren Logs.
__________________Hier einmal die Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-03-2015 01
Ran by Christoph at 2015-03-07 15:10:22
Running from C:\Users\Christoph\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
FLIGHT DIARY (x32 Version: 1.00.0000 - WILLPLUS) Hidden
[Windows 7 Theme] Erica Hartmann by Shiroskin (HKLM-x32\...\{bf6e38f6-d0c6-46cb-8d5b-3378cfb0725e}_is1) (Version: - k-rlitos.com)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.3.0.29126 - BitTorrent Inc.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acoustica MP3 To Wave Converter PLUS (HKLM-x32\...\Acoustica MP3 To Wave Converter PLUS) (Version: 2.5 - Acoustica, Inc.)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.1 (HKLM-x32\...\{7E33E883-0D17-4397-A461-B576605E34B1}) (Version: 12.1.6.156 - Adobe Systems, Inc)
Aegisub 3.0.2 (HKLM-x32\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.0.2 - Aegisub Team)
Alan Wake (HKLM-x32\...\Steam App 108710) (Version: - Remedy Entertainment)
Alan Wake's American Nightmare (HKLM-x32\...\Steam App 202750) (Version: - Remedy Entertainment)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.8 - Sereby Corporation)
Amazon Cloud Player (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Amazon Amazon Cloud Player) (Version: 2.4.0.26 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version: - Frictional Games)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
ATLAS Translation Standard V14.0 Trial Version (HKLM-x32\...\{6652750B-AA69-49B7-9D09-C0A28B6FFC9F}) (Version: 14.00.2000 - FUJITSU LIMITED)
Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)
Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.0.8179 - )
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
Belkin Connect Wireless USB Adapter (HKLM-x32\...\InstallShield_{08B73C99-D071-488F-8861-5DDA897C510D}) (Version: 1.0.0.3 - Belkin)
Belkin Connect Wireless USB Adapter (x32 Version: 1.0.0.3 - Belkin) Hidden
Binary Domain (HKLM-x32\...\Steam App 203750) (Version: - Sega)
Browser Extensions (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\{3A787631-66A2-4634-B928-A37E73B58FB6}) (Version: 2.2 - Spigot, Inc.) <==== ATTENTION
Burnout Paradise: The Ultimate Box (HKLM-x32\...\Steam App 24740) (Version: - Criterion Games)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.4852 - CDBurnerXP)
Combined Community Codec Pack 2014-07-13 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2014.07.13.0 - CCCP Project)
Command and Conquer: Red Alert 3 - Uprising (HKLM-x32\...\Steam App 24800) (Version: - EA Los Angeles)
Crazy Taxi (HKLM-x32\...\Steam App 71230) (Version: - SEGA)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Darksiders II (HKLM-x32\...\Steam App 50650) (Version: - Vigil Games)
DayZ Commander (HKLM-x32\...\{7B2CA5E9-763C-4FCE-81EE-13E81ABFE908}) (Version: 0.92.115 - Dotjosh Studios)
Dead Island (HKLM-x32\...\Steam App 91310) (Version: - Techland)
Dropbox (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Dropbox) (Version: 2.0.0 - Dropbox, Inc.)
Druckerdeinstallation für EPSON XP-215 217 Series (HKLM\...\EPSON XP-215 217 Series) (Version: - SEIKO EPSON Corporation)
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Eufloria HD (HKLM-x32\...\EufloriaHD) (Version: - )
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Everlasting Summer (HKLM-x32\...\Steam App 331470) (Version: - Soviet Games)
eXceed 2nd - Vampire REX (HKLM-x32\...\Steam App 207380) (Version: - Tennen-sozai)
Exif-Viewer 2.51 (HKLM-x32\...\Exif-Viewer) (Version: 2.51 - Ralf Bibinger)
Fraps (HKLM-x32\...\Fraps) (Version: - )
G DATA INTERNET SECURITY (HKLM-x32\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.2.5 - G DATA Software AG)
GIMP 2.8.0 (HKLM\...\GIMP-2_is1) (Version: 2.8.0 - The GIMP Team)
Go! Go! Nippon! ~My First Trip to Japan~ (HKLM-x32\...\Steam App 251870) (Version: - OVERDRIVE)
Goodbye Deponia (HKLM-x32\...\Deponia 3) (Version: 3.2 - Daedalic Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HF pAppLoc version 1.0 (HKLM-x32\...\{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1) (Version: 1.0 - Inquisitor)
High-Definition Video Playback (x32 Version: 11.1.11500.4.273 - Nero AG) Hidden
IF MY HEART HAD WINGS (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\{5A0D1CE9-01BE-47E7-A019-45D5970AC1DA}) (Version: 1.00.0000 - MoeNovel)
IF MY HEART HAD WINGS (x32 Version: 1.00.0000 - MoeNovel) Hidden
ILLUSION @ふぉーむメイト (HKLM-x32\...\{2510CF9A-3D92-4D1E-9124-080F53F4E293}) (Version: 1.00.0000 - ILLUSION)
ILLUSION ジンコウガクエン (HKLM-x32\...\{C109AF5B-69D0-4C93-B360-F28D9FAB6084}) (Version: 1.00.0000 - ILLUSION)
ILLUSION ジンコウガクエン きゃらめいく (HKLM-x32\...\{502499DC-2EDB-45A2-8F7C-83E6E5DE067E}) (Version: 1.00.0000 - ILLUSION)
Influent (HKLM-x32\...\Steam App 274980) (Version: - Rob Howland)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Japanese Fonts Support For Adobe Reader X (HKLM-x32\...\{AC76BA86-7AD7-5760-0000-A00000000003}) (Version: 10.0.0 - Adobe Systems Incorporated)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Just Cause 1.00.0000 (HKLM-x32\...\{C9E270CC-AE42-4BD8-B9C6-1EB3A8657FF5}) (Version: 1.00.0000 - Eidos)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Legend of Grimrock (HKLM-x32\...\Legend of Grimrock) (Version: - )
Loadout (HKLM-x32\...\Steam App 208090) (Version: - Edge of Reality)
Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version: - Daniel Rebelo)
Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Medal of Honor(TM) Single Player (HKLM-x32\...\Steam App 47790) (Version: - Electronic Arts)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5139.5005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - )
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.32 - mIRC Co. Ltd.)
Mitsurugi Kamui Hikae (HKLM-x32\...\Steam App 263620) (Version: - Zenith Blue)
Mouse Editor (HKLM-x32\...\InstallShield_{3A4218DE-B9DB-4AD5-9DB2-5853D3AA0335}) (Version: 12.08.0006 - Ihr Firmenname)
MOUSE Editor (x32 Version: 12.08.0006 - Ihr Firmenname) Hidden
Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MP3 to WAV RES (HKLM-x32\...\MP3 to WAV RES) (Version: - )
MPC-HC 1.7.3 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.3 - MPC-HC Team)
NEKOPARA vol.1 (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\{64DC04AF-BD7C-4CF4-9CA4-938953224328}) (Version: - NEKO WORKs)
Nero Kwik Media (HKLM-x32\...\{22758D8F-E023-44ED-8647-3C6985ABF663}) (Version: 11.2.00900 - Nero AG)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.2 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)
Onigiri_US (HKLM-x32\...\{E5A8486E-4E03-4F59-A44A-88399E341F41}) (Version: 1.00.0000 - CyberStep, Inc.)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version: - OVERKILL Software)
PDF24 Creator 6.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
piaip AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 2.4 beta r1617 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6631 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Red Faction: Armageddon (HKLM-x32\...\Steam App 55110) (Version: - Volition)
Remote Control Server (HKLM-x32\...\{755C6515-9FEA-490C-B15E-22BB6519E57E}) (Version: 2.0.1.60 - Steppschuh)
Risen (HKLM-x32\...\Steam App 40300) (Version: - Piranha – Bytes)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version: - Piranha Bytes)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.3.2.12064_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.3.2.12064_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.15.0 - SAMSUNG Electronics Co., Ltd.)
Search Protection (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Search Protection) (Version: 11.1.0.1 - Spigot, Inc.) <==== ATTENTION
Serious Sam 2 (HKLM-x32\...\Steam App 204340) (Version: - Croteam)
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version: - Croteam)
Serious Sam Classic: The First Encounter (HKLM-x32\...\Steam App 41050) (Version: - Croteam)
Serious Sam HD: The First Encounter (HKLM-x32\...\Steam App 41000) (Version: - Croteam)
Serious Sam HD: The Second Encounter (HKLM-x32\...\Steam App 41010) (Version: - Croteam)
ShadowExplorer 0.9 (HKLM-x32\...\ShadowExplorer_is1) (Version: 0.9.462.0 - ShadowExplorer.com)
Sierra Utilities (HKLM-x32\...\Sierra Utilities) (Version: - )
SiSoftware Sandra Lite 2013.SP3a (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 19.44.2013.5 - SiSoftware)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Snow Sakura (HKLM-x32\...\Snow Sakura) (Version: - )
Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steins;Gate version 1.0 (HKLM\...\{2A05A52B-BDD8-4FD5-A65A-687CB10D98DF}_is1) (Version: 1.0 - JAST USA)
SUPER © v2012.build.54 (Nov 18, 2012) Version v2012.build.54 (HKLM-x32\...\{8F311E92-C29F-4DF9-8259-B739A1831669}_is1) (Version: v2012.build.54 - eRightSoft)
Swiff Player 1.7.2 (HKLM-x32\...\Swiff Player_is1) (Version: 1.7.2 - GlobFX Technologies)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.38846 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Last Remnant (HKLM-x32\...\Steam App 23310) (Version: - SQUARE ENIX)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unholy Heights (HKLM-x32\...\Steam App 249330) (Version: - Petit Depotto)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
VLC Setup Helper (HKLM-x32\...\VLC Setup Helper_is1) (Version: - )
VLC Streamer 4.96 (HKLM-x32\...\VLC Streamer_is1) (Version: - )
WD Drive Utilities (HKLM-x32\...\{B2BCCFEC-2623-40E5-9522-DEC488E6B730}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{507B1304-194A-4204-A9D9-9BAAF51EF760}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{8A7B24E8-864E-4794-95C4-17644D0991AA}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{A7C403DA-B8D9-4CA0-93D9-6C7F00772240}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{ba99df5b-3e46-419e-81e2-544352772fda}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows 7 Codec Pack 4.0.3 (HKLM-x32\...\Windows 7 - Codec Pack) (Version: 4.0.3 - Windows 7 Codec Pack)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Within A Deep Forest (HKLM-x32\...\{736D1B73-18AC-4F51-B544-44FD149B7E0B}) (Version: 1.00.0000 - Within A Deep Forest)
Wrye Bash (HKLM-x32\...\Wrye Bash) (Version: 0.3.0.0 - Wrye & Wrye Bash Development Team)
Yahoo! Detect (HKLM-x32\...\YTdetect) (Version: - )
Ys Origin (HKLM-x32\...\Steam App 207350) (Version: - Nihon Falcom)
この大空に、翼をひろげて FLIGHT DIARY (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\{0A3E9ABF-9365-4B44-BA12-1D156EFD9545}) (Version: 1.00.0000 - WILLPLUS)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
==================== Restore Points =========================
05-03-2015 15:08:31 Installed Pokémon Uranium Beta 4.0
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2013-04-23 17:49 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0FF3526E-7BC5-4A2F-B424-DCC1819F75B3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-01] (Google Inc.)
Task: {340EA12A-A4AF-45E2-9D23-3554F496B259} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {5553F440-47E7-4C06-82E2-8755F07245BA} - System32\Tasks\EPSON XP-215 217 Series Update {5B557CE1-4321-4890-B411-4403944F2B02} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2012-11-18] (SEIKO EPSON CORPORATION)
Task: {677F7100-32DA-4F87-987B-13C21A2300DA} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {73978015-F6ED-48A4-99C7-5EE52FC4D2FC} - \MySearchDial No Task File <==== ATTENTION
Task: {7CDA93DC-15A4-4BA0-A864-6422D9DE69BD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {AF91DF1E-B4F3-472F-81CE-E5E5702529DB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-01] (Google Inc.)
Task: {CDE5011A-3CF9-4CD7-AF06-FC2B5313157A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06] (Adobe Systems Incorporated)
Task: {D3CD0EDC-F146-4564-A92A-956BC3124E83} - System32\Tasks\EPSON XP-215 217 Series Invitation {5B557CE1-4321-4890-B411-4403944F2B02} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2012-11-18] (SEIKO EPSON CORPORATION)
Task: {D6D7E0C3-779A-4CB7-918F-27FEF2B127C3} - System32\Tasks\{61926E15-433F-4291-AA68-E9A9642D8C27} => pcalua.exe -a C:\Users\Christoph\Downloads\epson327370eu.exe -d C:\Users\Christoph\Downloads
Task: {F9DD4BA9-3FED-4223-A55C-F37EF6523CB9} - System32\Tasks\{8040A18B-8B02-4CE0-91F6-7350FB42E01F} => pcalua.exe -a F:\.\MESIAMLT.exe -d F:\
Task: {FE192D8F-9029-4D2B-ADCE-DC756BB1972F} - System32\Tasks\EPSON XP-215 217 Series Invitation {C08A5572-83AC-495D-AFED-1683BC8FEAD1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2012-11-18] (SEIKO EPSON CORPORATION)
Task: {FE3ED63B-3F14-4A1A-A737-9B902B196F7B} - System32\Tasks\EPSON XP-215 217 Series Update {C08A5572-83AC-495D-AFED-1683BC8FEAD1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2012-11-18] (SEIKO EPSON CORPORATION)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {5B557CE1-4321-4890-B411-4403944F2B02}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {C08A5572-83AC-495D-AFED-1683BC8FEAD1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {5B557CE1-4321-4890-B411-4403944F2B02}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{5B557CE1-4321-4890-B411-4403944F2B02} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {C08A5572-83AC-495D-AFED-1683BC8FEAD1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{C08A5572-83AC-495D-AFED-1683BC8FEAD1} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Loaded Modules (whitelisted) ==============
2014-06-16 15:51 - 2013-03-15 05:16 - 00086304 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-07-30 11:59 - 2012-02-21 11:29 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2013-12-06 07:07 - 2013-12-06 07:07 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-20 02:38 - 2014-05-20 02:38 - 00340088 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2012-01-10 13:41 - 2013-09-03 13:32 - 00567880 _____ () C:\Program Files (x86)\puush\puush.exe
2012-08-16 04:11 - 2012-08-16 04:11 - 03333632 _____ () C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe
2014-04-07 01:24 - 2014-03-07 21:39 - 03168576 _____ () C:\Users\Christoph\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
2015-02-27 10:16 - 2015-02-27 10:16 - 00901728 _____ () C:\Users\Christoph\AppData\Roaming\Search Protection\SP.exe
2012-09-02 13:08 - 2012-09-02 13:08 - 00041160 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2012-09-02 13:08 - 2012-09-02 13:08 - 00734408 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2010-12-02 10:56 - 2010-12-02 10:56 - 00815104 _____ () C:\Program Files (x86)\MOUSE Editor\Data\MouseEditor\Forms\OSD_Text\OSD_Text.dll
2011-01-09 13:45 - 2011-01-09 13:45 - 00088064 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_MouseDeviceManager.dll
2012-06-14 08:59 - 2012-06-14 08:59 - 02414080 _____ () C:\Program Files (x86)\MOUSE Editor\Data\MouseEditor\Forms\ScreenCapture\ScreenCapture.dll
2012-05-17 04:17 - 2012-05-17 04:17 - 01000448 _____ () C:\Program Files (x86)\MOUSE Editor\Data\MouseEditor\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2010-09-20 07:18 - 2010-09-20 07:18 - 00085504 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_ZoomControl.dll
2010-09-20 07:18 - 2010-09-20 07:18 - 00054272 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_ScrollbarControl.dll
2011-04-12 08:14 - 2011-04-12 08:14 - 00063488 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_AnalyzeGesturesInRight.dll
2010-11-01 13:16 - 2010-11-01 13:16 - 00062976 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_AnalyzeGesturesInOne.dll
2012-04-27 04:40 - 2012-04-27 04:40 - 00118272 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_Wheel4D.dll
2015-02-06 00:37 - 2015-02-06 00:37 - 16852144 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll
2012-07-30 11:59 - 2012-02-21 11:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2001810455-1053792824-432003306-1004\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 8.8.8.8
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-2001810455-1053792824-432003306-500 - Administrator - Enabled) => C:\Users\Administrator
Christoph (S-1-5-21-2001810455-1053792824-432003306-1000 - Administrator - Enabled) => C:\Users\Christoph
Gast (S-1-5-21-2001810455-1053792824-432003306-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2001810455-1053792824-432003306-1003 - Limited - Enabled)
UpdatusUser (S-1-5-21-2001810455-1053792824-432003306-1004 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/07/2015 03:08:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (03/07/2015 02:26:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
Error: (03/07/2015 02:21:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GDFwSvcx64.exe, Version: 4.1.14233.221, Zeitstempel: 0x53f54e26
Name des fehlerhaften Moduls: GDFwSvcx64.exe, Version: 4.1.14233.221, Zeitstempel: 0x53f54e26
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000005213e
ID des fehlerhaften Prozesses: 0x105c
Startzeit der fehlerhaften Anwendung: 0xGDFwSvcx64.exe0
Pfad der fehlerhaften Anwendung: GDFwSvcx64.exe1
Pfad des fehlerhaften Moduls: GDFwSvcx64.exe2
Berichtskennung: GDFwSvcx64.exe3
Error: (03/07/2015 02:20:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/07/2015 02:17:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxCUIService.exe, Version: 6.15.10.3958, Zeitstempel: 0x54256c7d
Name des fehlerhaften Moduls: igfxCUIService.exe, Version: 6.15.10.3958, Zeitstempel: 0x54256c7d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000000ee28
ID des fehlerhaften Prozesses: 0x548
Startzeit der fehlerhaften Anwendung: 0xigfxCUIService.exe0
Pfad der fehlerhaften Anwendung: igfxCUIService.exe1
Pfad des fehlerhaften Moduls: igfxCUIService.exe2
Berichtskennung: igfxCUIService.exe3
Error: (03/07/2015 01:17:37 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
Error: (03/07/2015 01:16:39 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (03/07/2015 01:14:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/07/2015 01:14:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GDFwSvcx64.exe, Version: 4.1.14233.221, Zeitstempel: 0x53f54e26
Name des fehlerhaften Moduls: GDFwSvcx64.exe, Version: 4.1.14233.221, Zeitstempel: 0x53f54e26
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000005213e
ID des fehlerhaften Prozesses: 0xe58
Startzeit der fehlerhaften Anwendung: 0xGDFwSvcx64.exe0
Pfad der fehlerhaften Anwendung: GDFwSvcx64.exe1
Pfad des fehlerhaften Moduls: GDFwSvcx64.exe2
Berichtskennung: GDFwSvcx64.exe3
Error: (03/06/2015 10:36:14 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
System errors:
=============
Error: (03/07/2015 02:22:41 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: 0x800700b7
Error: (03/07/2015 02:22:41 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: 00x800700b7hxxp://+:10243/WMPNSSv4/2811996591/
Error: (03/07/2015 02:22:41 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: 0x800700b7
Error: (03/07/2015 02:22:41 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: 00x800700b7hxxp://+:10243/WMPNSSv4/2811996591/
Error: (03/07/2015 02:19:29 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 07.03.2015 um 14:17:25 unerwartet heruntergefahren.
Error: (03/07/2015 02:17:31 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Intel(R) HD Graphics Control Panel Service" wurde mit folgendem Fehler beendet:
%%-2147467259
Error: (03/07/2015 02:17:30 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
GDKBFlt
Error: (03/07/2015 02:16:44 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 07.03.2015 um 14:14:59 unerwartet heruntergefahren.
Error: (03/07/2015 02:14:59 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 07.03.2015 um 14:14:04 unerwartet heruntergefahren.
Error: (03/07/2015 01:15:38 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: 0x800700b7
Microsoft Office Sessions:
=========================
Error: (03/07/2015 03:08:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Christoph\Downloads\esetsmartinstaller_enu.exe
Error: (03/07/2015 02:26:26 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)
Description: 16000000005481010055810100600B0000
Error: (03/07/2015 02:21:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GDFwSvcx64.exe4.1.14233.22153f54e26GDFwSvcx64.exe4.1.14233.22153f54e26c0000005000000000005213e105c01d058d980ac3e90C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exeC:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.execeab13f7-c4cc-11e4-93cf-bc5ff436bab1
Error: (03/07/2015 02:20:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/07/2015 02:17:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxCUIService.exe6.15.10.395854256c7digfxCUIService.exe6.15.10.395854256c7dc0000005000000000000ee2854801d058d8f9aaeacdC:\Windows\system32\igfxCUIService.exeC:\Windows\system32\igfxCUIService.exe55731d65-c4cc-11e4-bc85-bc5ff436bab1
Error: (03/07/2015 01:17:37 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)
Description: 16000000005481010055810100600B0000
Error: (03/07/2015 01:16:39 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Christoph\Downloads\esetsmartinstaller_enu.exe
Error: (03/07/2015 01:14:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/07/2015 01:14:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GDFwSvcx64.exe4.1.14233.22153f54e26GDFwSvcx64.exe4.1.14233.22153f54e26c0000005000000000005213ee5801d058d022ed4b58C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exeC:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe84bc8fe6-c4c3-11e4-ada7-bc5ff436bab1
Error: (03/06/2015 10:36:14 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)
Description: 16000000005481010055810100600B0000
CodeIntegrity Errors:
===================================
Date: 2015-03-02 18:55:08.107
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 18:55:07.951
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:51:49.722
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:51:49.644
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:46:40.866
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:46:40.788
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:20:40.180
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:20:40.102
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 15:52:28.416
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 15:52:28.275
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
Percentage of memory in use: 24%
Total physical RAM: 16270.92 MB
Available physical RAM: 12352.29 MB
Total Pagefile: 32540.02 MB
Available Pagefile: 28272.12 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:160 GB) (Free:13.84 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:771.51 GB) (Free:81.81 GB) NTFS
Drive f: (My Passport) (Fixed) (Total:931.48 GB) (Free:315.75 GB) NTFS
Drive g: (pm-stein) (CDROM) (Total:2.28 GB) (Free:0 GB) CDFS
Drive i: (DRIVE-N-GO) (Fixed) (Total:931.51 GB) (Free:520.57 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: DE2CC6FD)
Partition 1: (Active) - (Size=160 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=771.5 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: CA52B9B9)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 7D8067A8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-03-2015 01
Ran by Christoph (administrator) on CHRISTOPH-PC on 07-03-2015 15:09:55
Running from C:\Users\Christoph\Downloads
Loaded Profiles: Christoph & UpdatusUser (Available profiles: Christoph & UpdatusUser & Administrator)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(www.shadowexplorer.com) C:\Program Files (x86)\ShadowExplorer\sesvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
() C:\Program Files (x86)\puush\puush.exe
() C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe
() C:\Users\Christoph\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Users\Christoph\AppData\Roaming\Search Protection\SP.exe
(BitTorrent Inc.) C:\Users\Christoph\AppData\Roaming\uTorrent\uTorrent.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Christoph\Downloads\FRST64(1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694080 2013-07-10] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5537136 2013-11-02] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [1756792 2014-05-20] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\System32\Userinit.exe,C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [KiesPDLR] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-11-03] (Samsung)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [567880 2013-09-03] ()
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [OscarEditor] => C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe [3333632 2012-08-16] ()
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [Amazon Cloud Player] => C:\Users\Christoph\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3168576 2014-03-07] ()
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-11-03] (Samsung)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [Search Protection] => C:\Users\Christoph\AppData\Roaming\Search Protection\SP.EXE [901728 2015-02-27] ()
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [uTorrent] => C:\Users\Christoph\AppData\Roaming\uTorrent\uTorrent.exe [1051984 2015-03-07] (BitTorrent Inc.)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Policies\system: [DisableLockWorkstation] 0
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [250504 2013-03-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [205184 2013-03-15] (NVIDIA Corporation)
Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2001810455-1053792824-432003306-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope value is missing.
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_15_ff&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyEtAyC0B0A0BtC0A0Azz0BtN0D0Tzu0SzztAtBtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAzzyCzzzztA0EtG0D0B0BzytG0FtD0F0DtG0DyEyByDtGyEtAyDtA0EyByDyE0FyDtB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCtCyC0ByDyD0BtGyEyD0BtBtGtBtDtBtCtGzz0C0C0CtGyCtCtCyCzy0BtBtC0FyDtDyE2Q&cr=1745046569&ir=
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-2001810455-1053792824-432003306-1000 -> DefaultScope {669DCF8C-6CB2-4C40-BBF5-FE948542B767} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=242154&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2001810455-1053792824-432003306-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKU\S-1-5-21-2001810455-1053792824-432003306-1000 -> {669DCF8C-6CB2-4C40-BBF5-FE948542B767} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=242154&p={searchTerms}
BHO: Browser Extensions -> {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} -> C:\Users\Christoph\AppData\Roaming\Browser Extensions\Coupons64.dll (S p i g o t, I n c .)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ATLAS Toolbar -> {3C6301ED-0F78-4AF2-8150-D9C052361A8E} -> C:\Program Files (x86)\ATLAS V14\ATLIECP.DLL (FUJITSU LIMITED)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - ATLAS Toolbar - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - C:\Program Files (x86)\ATLAS V14\ATLIECP.DLL (FUJITSU LIMITED)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{B0C7E6B8-57C9-4D8E-BBA1-51AE72F78CD9}: [NameServer] 8.8.8.8
FireFox:
========
FF ProfilePath: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste
FF SelectedSearchEngine: Yahoo!
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=242154&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2001810455-1053792824-432003306-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-2001810455-1053792824-432003306-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\searchplugins\yahoo_ff.xml
FF Extension: Avira Browser Safety - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\abs@avira.com [2014-08-05]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\ich@maltegoetz.de [2013-12-13]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7} [2013-12-06]
FF Extension: Start Page - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{32da2f20-827d-40aa-a3b4-2fc4a294352e} [2014-09-16]
FF Extension: Slick Savings - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{46eddf51-a4f6-4476-8d6c-31c5187b2a2f} [2014-09-16]
FF Extension: Amazon Shopping Assistant by Spigot - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{84a93d51-b7a9-431e-8ff8-d60e5d7f5df1} [2014-09-16]
FF Extension: DownloadHelper - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25]
FF Extension: Ebay Shopping Assistant by Spigot - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{f894a29a-f065-40c3-bb19-da6057778493} [2014-09-16]
FF Extension: MEGA EXTENSION - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\firefox@mega.co.nz.xpi [2013-03-13]
FF Extension: Adblock Plus - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-07]
FF Extension: Manga Fetcher - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\mfetcher@gmx.net [2014-09-11]
FF Extension: Rikaichan Japanese-German Dictionary File - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\rikaichan-jpde@polarcloud.com [2014-07-15]
FF Extension: Rikaichan - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{0AA9101C-D3C1-4129-A9B7-D778C6A17F82} [2014-07-15]
FF Extension: FireShot - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2015-02-24]
FF Extension: DownloadHelper - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-06]
FF Extension: FlashDisable - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\jid0-bbA9VAawX3LMWDu668aUDrpQVXU@jetpack.xpi [2015-01-17]
FF Extension: No Name - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\jid1-7NbXi2AqS1oUFw@jetpack.xpi [2014-04-06]
FF Extension: ProxTube - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-07-31]
FF Extension: No Name - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-29]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-03-05]
Chrome:
=======
CHR HomePage: Default -> https://de.search.yahoo.com/?type=242154&fr=yo-yhp-ch
CHR StartupUrls: Default -> "https://de.search.yahoo.com/?type=242154&fr=yo-yhp-ch"
CHR DefaultSearchKeyword: Default -> yahoo.com search
CHR DefaultSearchURL: Default -> https://de.search.yahoo.com/search?fr=chr-yo_gc&ei=utf-8&ilc=12&type=242154&p={searchTerms}
CHR DefaultSuggestURL: Default -> https://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}
CHR Profile: C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-06]
CHR Extension: (Google Drive) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-19]
CHR Extension: (YouTube) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-06]
CHR Extension: (Google Search) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-06]
CHR Extension: (Google Wallet) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-06]
CHR Extension: (Gmail) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-06]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2250360 2014-10-14] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe [2683760 2014-05-20] (G Data Software AG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [782208 2015-01-16] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [3228136 2014-08-21] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700536 2014-05-20] (G Data Software AG)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-06] ()
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\RpcAgentSrv.exe [71832 2009-04-22] (SiSoftware) [File not signed]
R2 sesvc; C:\Program Files (x86)\ShadowExplorer\sesvc.exe [9216 2013-01-02] (www.shadowexplorer.com) [File not signed]
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2014-12-28] (Microsoft Corporation) [File not signed]
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-11-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-11-02] (Western Digital Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-06-13] (Disc Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [55808 2014-12-15] (G Data Software AG)
R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-01-15] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [142336 2014-12-15] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64000 2014-12-15] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-03-03] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-03-03] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [61440 2014-12-15] (G Data Software AG)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [239104 2013-01-30] (Huawei Technologies Co., Ltd.)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-07-19] ()
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-09] (Malwarebytes Corporation)
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-07 14:54 - 2015-03-07 14:54 - 02092544 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64(1).exe
2015-03-07 14:13 - 2015-03-07 14:13 - 695185348 _____ () C:\Windows\MEMORY.DMP
2015-03-07 13:07 - 2015-03-07 13:10 - 00004169 _____ () C:\Users\Christoph\Desktop\magnets.txt
2015-03-06 00:46 - 2015-03-06 00:46 - 00017858 _____ () C:\Users\Christoph\Downloads\[DeadFish] Akatsuki no Yona - 14 [720p][AAC].mp4.torrent
2015-03-05 22:42 - 2015-03-05 22:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-05 16:19 - 2015-03-05 16:20 - 00000000 ____D () C:\Users\Christoph\Downloads\Dame - Auf die guten alten Zeiten [Official HD Video]
2015-03-05 14:08 - 2015-03-05 14:52 - 63463424 _____ () C:\Users\Christoph\Downloads\EpicGamesLauncherInstaller-2.0.1-2467307.msi
2015-03-03 20:38 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-03 20:38 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-03 20:38 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-03 20:38 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-03-03 15:39 - 2015-03-03 15:42 - 06208736 _____ (Tim Kosse) C:\Users\Christoph\Downloads\FileZilla_3.10.2_win32-setup.exe
2015-03-03 10:22 - 2015-03-03 10:22 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2015-03-03 10:22 - 2015-03-03 10:22 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2015-03-03 10:19 - 2015-03-03 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY
2015-03-03 09:40 - 2015-03-03 09:40 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-03-02 23:46 - 2015-03-07 14:19 - 00000000 ____D () C:\Windows\SysWOW64\NV
2015-03-02 23:46 - 2015-03-07 14:19 - 00000000 ____D () C:\Windows\system32\NV
2015-03-02 23:46 - 2015-03-02 23:46 - 00000451 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-03-02 23:11 - 2015-03-02 23:11 - 01363456 _____ (Björn Bastian) C:\Users\Christoph\Downloads\USB-Fehlerbehebung_2.2.exe
2015-03-02 18:46 - 2015-03-02 18:52 - 00000000 ____D () C:\Users\Christoph\Downloads\usblogview
2015-03-02 18:46 - 2015-03-02 18:46 - 00208537 _____ () C:\Users\Christoph\Downloads\usblogview.zip
2015-03-02 16:50 - 2015-03-02 16:50 - 00002253 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2015-03-02 16:50 - 2015-03-02 16:50 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2015-03-02 16:42 - 2015-03-02 17:29 - 00000000 ____D () C:\Users\Christoph\Downloads\usbdeview-x64
2015-03-02 16:42 - 2015-03-02 16:42 - 00108330 _____ () C:\Users\Christoph\Downloads\usbdeview-x64.zip
2015-02-28 20:58 - 2015-02-28 20:58 - 00000222 _____ () C:\Users\Christoph\Desktop\Influent.url
2015-02-28 13:33 - 2015-02-28 13:33 - 00021314 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Lonely Yuri.torrent
2015-02-27 21:37 - 2015-02-27 21:37 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Steam
2015-02-26 00:50 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-26 00:50 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-24 23:20 - 2015-02-24 23:20 - 00025138 _____ () C:\Users\Christoph\Downloads\[DeadFish] Koufuku Graffiti - 07 [720p][AAC].mp4.torrent
2015-02-24 23:19 - 2015-02-24 23:19 - 00024772 _____ () C:\Users\Christoph\Downloads\[DeadFish] Dog Days'' - 07 [720p][AAC].mp4.torrent
2015-02-24 23:18 - 2015-02-24 23:18 - 00028267 _____ () C:\Users\Christoph\Downloads\[DeadFish] Shinmai Maou no Testament - 07 [720p][AAC].mp4.torrent
2015-02-24 23:18 - 2015-02-24 23:18 - 00025738 _____ () C:\Users\Christoph\Downloads\[DeadFish] Akatsuki no Yona - 19 [720p][AAC].mp4.torrent
2015-02-24 23:18 - 2015-02-24 23:18 - 00019150 _____ () C:\Users\Christoph\Downloads\[DeadFish] Saenai Heroine no Sodatekata - 06 [720p][AAC].mp4.torrent
2015-02-24 23:17 - 2015-02-24 23:17 - 00032958 _____ () C:\Users\Christoph\Downloads\[DeadFish] JoJo no Kimyou na Bouken_ Stardust Crusaders - Egypt Hen - 07 [720p][AAC].mp4.torrent
2015-02-24 23:17 - 2015-02-24 23:17 - 00023538 _____ () C:\Users\Christoph\Downloads\[DeadFish] Bishoujo Senshi Sailor Moon_ Crystal - 16 [720p][AAC].mp4.torrent
2015-02-24 23:16 - 2015-02-24 23:16 - 00018745 _____ () C:\Users\Christoph\Downloads\[DeadFish] Shigatsu wa Kimi no Uso - 18 [720p][AAC].mp4.torrent
2015-02-24 19:59 - 2015-02-24 19:59 - 00000090 _____ () C:\Users\Christoph\Desktop\mirai.txt
2015-02-23 13:19 - 2015-02-23 13:19 - 00715796 _____ () C:\Users\Christoph\Downloads\MKVExtractGUI-2.2.2.8.zip
2015-02-23 13:19 - 2015-02-23 13:19 - 00000000 ____D () C:\Users\Christoph\Downloads\MKVExtractGUI-2.2.2.8
2015-02-22 16:15 - 2015-02-22 16:15 - 00037691 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Tsukihime.torrent
2015-02-22 16:15 - 2015-02-22 16:15 - 00023675 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Tsukihime Plus Disc.torrent
2015-02-22 13:06 - 2015-02-22 13:06 - 00041519 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss for the Petals Sweet Grownup Kisses.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00046797 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss for the Petals PetalColored Angel.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00041377 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals Sweet Enchanting Kisses.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00034845 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals The Joy Of Loving You.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00032354 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss for the Petals Whisper With A Kiss.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00028349 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals Joined In Love With You.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00016697 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals Beloved Photograph.torrent
2015-02-22 13:04 - 2015-02-22 13:04 - 00030340 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals My Dear Prince.torrent
2015-02-22 12:58 - 2015-02-22 12:58 - 00016524 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Fate Hollow Ataraxia.torrent
2015-02-21 22:45 - 2015-02-21 22:45 - 00026518 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Wind A Breath of Heart Regratitude(1).torrent
2015-02-21 22:43 - 2015-02-21 22:43 - 00026518 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Wind A Breath of Heart Regratitude.torrent
2015-02-21 21:29 - 2015-03-05 16:20 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 12-(720p x264 AAC)(8 Bit)
2015-02-21 20:14 - 2015-02-21 21:29 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 13-(720p x264 AAC)(8 Bit - Softsub)
2015-02-21 17:55 - 2015-02-21 20:14 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 11-(720p x264 AAC)(8 Bit)
2015-02-21 15:58 - 2015-02-21 17:55 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 10-(720p x264 AAC)(8 Bit)
2015-02-21 10:21 - 2015-02-21 15:58 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 09-(720p x264 AAC)(8 Bit)
2015-02-21 10:14 - 2015-02-21 10:18 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 01-(720p x264 AAC)[8 Bit]
2015-02-21 00:09 - 2015-02-21 00:59 - 139061960 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 09-(720p x264 AAC)(8 Bit).mp4.part
2015-02-19 23:34 - 2015-02-20 18:22 - 351114264 _____ () C:\Users\Christoph\Downloads\[YY-S]_Tokyo_Ravens_-_7.mp4
2015-02-19 23:23 - 2015-02-21 00:09 - 287466475 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 08-(720p x264 AAC)(8 Bit).mp4
2015-02-19 20:09 - 2015-02-19 23:23 - 457882993 _____ () C:\Users\Christoph\Downloads\[YY-S] Tokyo Ravens - 22.mp4
2015-02-19 11:22 - 2015-02-19 23:31 - 351114264 _____ () C:\Users\Christoph\Downloads\[YY-S] Tokyo Ravens - 07.mp4
2015-02-18 15:18 - 2015-02-18 15:19 - 00000026 _____ () C:\Users\Christoph\Desktop\Neues Textdokument (3).txt
2015-02-16 16:12 - 2015-02-19 03:37 - 292248901 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo_Ravens_-_06-(720p_x264__AAC)(8_Bit).mp4
2015-02-15 14:14 - 2015-02-15 14:14 - 00002134 _____ () C:\Users\Christoph\Desktop\All in One Runtimes - CHIP Downloader.lnk
2015-02-15 13:58 - 2015-02-15 13:58 - 00010736 _____ () C:\Windows\unins000.dat
2015-02-15 13:58 - 2015-02-15 13:56 - 01198049 _____ () C:\Windows\unins000.exe
2015-02-15 13:58 - 2014-06-05 08:07 - 01177088 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2015-02-15 13:58 - 2014-06-05 08:07 - 00271360 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll
2015-02-15 13:58 - 2014-06-05 08:07 - 00271360 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libssl32.dll
2015-02-15 13:58 - 2014-06-01 19:53 - 00460104 _____ (AutoIt Team) C:\Windows\SysWOW64\autoitx3.dll
2015-02-15 13:58 - 2014-01-25 14:30 - 00131072 _____ (Sereby Corporation) C:\Windows\SysWOW64\AiORuntimes.dll
2015-02-15 13:58 - 2013-12-20 01:48 - 00444328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshflxgd.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00416408 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\comct332.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00279192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatgrd.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00259736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msflxgrd.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00253080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatlst.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00219288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\richtx32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00218776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dblist32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00212112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mci32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00179352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmask32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00170920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comct232.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00131728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00130712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2015-02-15 13:58 - 2013-12-20 01:48 - 00127640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswinsck.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00119960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomm32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00108696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstkprp.dll
2015-02-15 13:58 - 2013-12-20 01:48 - 00104088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\picclp32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00084624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysinfo.ocx
2015-02-15 13:58 - 2013-08-31 21:40 - 03115385 _____ (Red Hat) C:\Windows\SysWOW64\cygwin1.dll
2015-02-15 13:58 - 2012-06-14 15:36 - 00107520 _____ () C:\Windows\SysWOW64\zlib1.dll
2015-02-15 13:58 - 2012-04-03 17:11 - 00138752 _____ () C:\Windows\SysWOW64\libpng15.dll
2015-02-15 13:58 - 2011-10-12 04:09 - 04033440 _____ (Intel Corporation) C:\Windows\SysWOW64\libmmd.dll
2015-02-15 13:58 - 2011-01-12 14:36 - 01054208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71u.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71DEU.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ITA.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71FRA.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ESP.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ENU.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71KOR.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71JPN.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71CHT.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71CHS.dll
2015-02-15 13:58 - 2011-01-12 14:19 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2015-02-15 13:58 - 2011-01-12 13:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl71.dll
2015-02-15 13:58 - 2010-06-27 18:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\Windows\system\plugin.dll
2015-02-15 13:58 - 2010-03-18 21:21 - 00799568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdia100.dll
2015-02-15 13:58 - 2008-08-26 07:40 - 00162304 _____ () C:\Windows\SysWOW64\libpng13.dll
2015-02-15 13:58 - 2008-03-14 18:21 - 01008128 _____ (GnuWin32 <hxxp://gnuwin32.sourceforge.net>) C:\Windows\SysWOW64\libiconv2.dll
2015-02-15 13:58 - 2007-01-30 23:04 - 00339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2015-02-15 13:58 - 2006-08-26 01:28 - 01017344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70u.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ITA.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70FRA.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ESP.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70DEU.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ENU.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70KOR.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70JPN.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70CHT.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70CHS.dll
2015-02-15 13:58 - 2006-08-26 01:07 - 01024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2015-02-15 13:58 - 2006-08-26 00:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl70.dll
2015-02-15 13:58 - 2005-05-06 14:52 - 00103424 _____ (GNU <www.gnu.org>) C:\Windows\SysWOW64\libintl3.dll
2015-02-15 13:58 - 2005-01-20 20:25 - 00054784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvci70.dll
2015-02-15 13:58 - 2002-01-05 06:40 - 00487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp70.dll
2015-02-15 13:58 - 1996-01-12 04:00 - 00935632 _____ (Microsoft Corporation) C:\Windows\system\vb40016.dll
2015-02-15 13:58 - 1994-11-17 14:00 - 00210944 _____ () C:\Windows\system\msvcrt10.dll
2015-02-15 13:58 - 1993-05-11 20:00 - 00398416 _____ (Microsoft Corporation) C:\Windows\system\vbrun300.dll
2015-02-15 13:58 - 1992-10-21 01:00 - 00356992 _____ (Microsoft Corporation) C:\Windows\system\vbrun200.dll
2015-02-15 13:58 - 1991-05-10 02:00 - 00271264 _____ () C:\Windows\system\vbrun100.dll
2015-02-15 13:48 - 2015-02-15 13:48 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-02-15 13:47 - 2015-02-15 13:47 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-02-15 13:23 - 2015-02-15 13:23 - 01203488 _____ () C:\Users\Christoph\Downloads\All in One Runtimes - CHIP-Installer.exe
2015-02-15 03:57 - 2015-02-15 03:57 - 00000222 _____ () C:\Users\Christoph\Desktop\Go! Go! Nippon! ~My First Trip to Japan~.url
2015-02-15 03:54 - 2015-02-15 14:23 - 00000842 _____ () C:\Users\Christoph\Desktop\NeptuniaReBirth1.exe - Verknüpfung.lnk
2015-02-15 03:02 - 2015-02-15 03:02 - 00000000 ____D () C:\ProgramData\Steam
2015-02-14 17:28 - 2015-03-03 15:43 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\FileZilla
2015-02-14 17:27 - 2015-02-14 17:27 - 00000000 ____D () C:\Users\Christoph\Downloads\filezilla_3.10.1.1_win32
2015-02-14 17:23 - 2015-02-14 17:27 - 09498456 _____ () C:\Users\Christoph\Downloads\filezilla_3.10.1.1_win32.zip
2015-02-14 16:26 - 2015-02-14 16:33 - 00000000 ____D () C:\Users\Christoph\Downloads\winscp556setup
2015-02-14 03:50 - 2015-02-16 16:12 - 279979903 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo_Ravens_-_05-(720p_x264__AAC)(8_Bit).mp4
2015-02-14 03:50 - 2015-02-14 15:01 - 261714515 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 04-(720p x264 AAC)(8 Bit).mp4
2015-02-14 03:48 - 2015-02-14 03:48 - 00002171 _____ () C:\Users\Christoph\Desktop\JDownloader 2.lnk
2015-02-14 03:48 - 2015-02-14 03:48 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2015-02-14 03:31 - 2015-03-05 16:25 - 00000000 ____D () C:\Users\Christoph\AppData\Local\JDownloader 2.0
2015-02-14 03:14 - 2015-02-14 03:14 - 00000000 ____D () C:\Users\Christoph\Downloads\Humble_VanentinesDay_Cards
2015-02-14 02:05 - 2015-02-14 02:16 - 26816094 _____ () C:\Users\Christoph\Downloads\Humble_VanentinesDay_Cards.zip
2015-02-13 18:43 - 2015-02-14 05:34 - 366756189 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]_Tokyo_Ravens_-_03.mp4
2015-02-13 14:22 - 2015-02-13 18:43 - 376518273 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo_Ravens_-_02-(720p_x264__AAC)(8_Bit).mp4
2015-02-13 12:07 - 2015-02-13 13:16 - 164042310 _____ () C:\Users\Christoph\Downloads\www.eliteanimes.com_[No]Da_Capo_if_-_02(XviD)[F36F6EC8].avi
2015-02-13 08:43 - 2015-02-13 12:07 - 184385536 _____ () C:\Users\Christoph\Downloads\www.eliteanimes.com_[No]Da_Capo_if_-_01(XviD)[DC32D2A2].avi
2015-02-11 09:30 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 09:30 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 09:30 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 09:30 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 09:30 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 09:30 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 09:30 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 09:30 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 09:30 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 09:30 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 09:30 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 09:30 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 09:30 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 09:30 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 09:30 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 09:30 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 09:30 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 09:30 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 09:19 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 09:19 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 09:19 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 09:19 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 09:19 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 09:19 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 09:19 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 09:16 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 09:16 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 09:16 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 09:12 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 09:12 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 09:12 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 09:12 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 09:12 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 09:12 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 09:11 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 09:11 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 09:11 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 09:11 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 09:11 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-07 00:50 - 2015-02-07 00:51 - 24182127 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_06_[22CDD48F].mkv
2015-02-07 00:43 - 2015-02-07 00:46 - 26061354 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_05_[CE0DBBDD].mkv
2015-02-07 00:34 - 2015-02-07 00:46 - 24276997 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_04_[3BBFA608].mkv
2015-02-07 00:26 - 2015-02-07 00:46 - 26580394 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_03_[B239612B].mkv
2015-02-07 00:15 - 2015-02-07 00:15 - 24428202 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_02_[90DD7FA3].mkv
2015-02-07 00:07 - 2015-02-07 00:14 - 24075110 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_Demo_Koi_ga_Shitai!_Lite_-_01_[E8C17E9A].mkv
2015-02-06 00:45 - 2015-02-06 00:45 - 00031359 _____ () C:\Users\Christoph\AppData\Local\recently-used.xbel
2015-02-06 00:15 - 2015-02-13 14:22 - 207926204 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo_Ravens_-_01-(720p_x264__AAC)[8_Bit].mp4
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-07 15:10 - 2014-03-28 10:53 - 00000000 ____D () C:\FRST
2015-03-07 15:09 - 2014-03-28 10:54 - 00030137 _____ () C:\Users\Christoph\Downloads\FRST.txt
2015-03-07 15:09 - 2012-11-22 23:35 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\NetSpeedMonitor
2015-03-07 15:06 - 2013-02-21 18:41 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\uTorrent
2015-03-07 15:05 - 2012-12-01 00:29 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Skype
2015-03-07 14:35 - 2012-07-16 11:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-07 14:27 - 2009-07-14 05:45 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-07 14:27 - 2009-07-14 05:45 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-07 14:23 - 2012-07-12 16:42 - 01914316 _____ () C:\Windows\WindowsUpdate.log
2015-03-07 14:21 - 2013-12-25 11:55 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2015-03-07 14:20 - 2014-07-01 10:35 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-07 14:19 - 2012-07-30 12:00 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2015-03-07 14:19 - 2012-07-16 10:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-07 14:19 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-07 14:19 - 2009-07-14 05:51 - 00140643 _____ () C:\Windows\setupact.log
2015-03-07 14:18 - 2014-07-01 10:35 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-07 14:17 - 2014-09-20 00:17 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {5B557CE1-4321-4890-B411-4403944F2B02}.job
2015-03-07 14:17 - 2014-09-20 00:17 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {5B557CE1-4321-4890-B411-4403944F2B02}.job
2015-03-07 14:13 - 2010-11-21 04:47 - 00414628 _____ () C:\Windows\PFRO.log
2015-03-07 13:19 - 2014-09-20 00:19 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {C08A5572-83AC-495D-AFED-1683BC8FEAD1}.job
2015-03-07 13:19 - 2014-09-20 00:19 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {C08A5572-83AC-495D-AFED-1683BC8FEAD1}.job
2015-03-07 12:32 - 2012-08-07 19:16 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\vlc
2015-03-06 17:47 - 2012-07-30 12:00 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2015-03-06 10:31 - 2014-03-29 00:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-06 10:12 - 2009-07-14 05:45 - 00306840 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-06 00:50 - 2012-07-16 10:03 - 00068824 _____ () C:\Users\Christoph\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-05 16:26 - 2012-08-07 21:41 - 00000000 ____D () C:\Users\Christoph\dwhelper
2015-03-05 15:04 - 2012-07-12 17:28 - 00281503 _____ () C:\Windows\DirectX.log
2015-03-05 08:44 - 2013-05-04 09:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-03-04 09:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-03-03 13:04 - 2014-09-15 13:57 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Browser Extensions
2015-03-03 12:43 - 2014-12-31 10:50 - 00003304 _____ () C:\Users\Christoph\Desktop\PC.txt
2015-03-03 10:19 - 2015-01-15 00:08 - 00001984 _____ () C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk
2015-03-03 10:18 - 2014-12-15 23:38 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2015-03-03 10:18 - 2013-12-25 11:54 - 00032186 _____ () C:\Windows\DPINST.LOG
2015-03-02 23:47 - 2012-07-12 17:31 - 00000000 ____D () C:\Users\Christoph
2015-03-02 23:44 - 2012-07-30 11:59 - 00000000 ____D () C:\Program Files\Intel
2015-03-02 16:50 - 2012-10-11 10:07 - 00001427 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-02 16:50 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-02-25 10:31 - 2015-01-14 11:06 - 00000194 _____ () C:\Users\Christoph\Desktop\zahlungen.txt
2015-02-24 03:17 - 2010-11-21 04:27 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-23 11:13 - 2013-02-23 23:55 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Aegisub
2015-02-20 10:10 - 2013-04-27 00:43 - 00120832 ___SH () C:\Users\Christoph\Thumbs.db
2015-02-16 03:00 - 2014-02-15 03:09 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-15 14:39 - 2012-08-07 19:22 - 00000000 ____D () C:\Users\Christoph\.gimp-2.8
2015-02-15 13:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system
2015-02-15 13:56 - 2012-07-16 12:27 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2015-02-15 13:56 - 2012-07-16 11:36 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-02-15 13:47 - 2013-05-04 13:02 - 00000000 ____D () C:\Program Files\Java
2015-02-15 13:47 - 2013-03-12 09:13 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-15 03:02 - 2012-08-12 11:37 - 00000000 ____D () C:\Users\Christoph\Documents\My Games
2015-02-14 03:00 - 2014-07-18 23:04 - 00001108 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2015-02-14 00:12 - 2013-04-05 22:41 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\TS3Client
2015-02-13 18:10 - 2014-11-28 12:36 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Skyrim
2015-02-13 18:03 - 2014-11-28 13:00 - 00000000 ____D () C:\Users\Christoph\Documents\Nexus Mod Manager
2015-02-12 19:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-12 03:12 - 2014-12-11 07:55 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 03:12 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-08 10:36 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-06 19:13 - 2014-07-01 10:35 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 19:13 - 2014-07-01 10:35 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-06 00:37 - 2012-07-16 11:36 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-06 00:37 - 2012-07-16 11:36 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-06 00:37 - 2012-07-16 11:36 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
==================== Files in the root of some directories =======
2013-03-01 10:38 - 2013-03-09 00:39 - 0002298 _____ () C:\Users\Christoph\AppData\Roaming\ASSDraw3.cfg
2014-12-15 23:38 - 2014-12-15 23:38 - 0000000 _____ () C:\Users\Christoph\AppData\Roaming\gdfw.log
2014-12-15 23:38 - 2014-12-15 23:38 - 0000779 _____ () C:\Users\Christoph\AppData\Roaming\gdscan.log
2013-04-28 15:45 - 2013-12-16 14:15 - 13492224 _____ () C:\Users\Christoph\AppData\Roaming\Sandra.mdb
2014-04-12 03:48 - 2014-04-12 03:48 - 0000044 _____ () C:\Users\Christoph\AppData\Roaming\WB.CFG
2015-02-06 00:45 - 2015-02-06 00:45 - 0031359 _____ () C:\Users\Christoph\AppData\Local\recently-used.xbel
Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
C:\Users\Christoph\AppData\Local\Temp\drm_dyndata_7380015.dll
C:\Users\Christoph\AppData\Local\Temp\EAD1860.exe
C:\Users\Christoph\AppData\Local\Temp\EAD6576.exe
C:\Users\Christoph\AppData\Local\Temp\EADC189.exe
C:\Users\Christoph\AppData\Local\Temp\EADD622.exe
C:\Users\Christoph\AppData\Local\Temp\EADF16F.exe
C:\Users\Christoph\AppData\Local\Temp\fileutil.dll
C:\Users\Christoph\AppData\Local\Temp\i4jdel0.exe
C:\Users\Christoph\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Christoph\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Christoph\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Christoph\AppData\Local\Temp\mirc732.exe
C:\Users\Christoph\AppData\Local\Temp\Nexus Mod Manager-0.53.2.exe
C:\Users\Christoph\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Christoph\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Christoph\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Christoph\AppData\Local\Temp\nvStInst.exe
C:\Users\Christoph\AppData\Local\Temp\proxy_vole7457242831514053379.dll
C:\Users\Christoph\AppData\Local\Temp\Quarantine.exe
C:\Users\Christoph\AppData\Local\Temp\SDuninst.exe
C:\Users\Christoph\AppData\Local\Temp\SearchProtectionSetup.exe
C:\Users\Christoph\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Christoph\AppData\Local\Temp\sonarinst.exe
C:\Users\Christoph\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Christoph\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.0.6-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.0.8-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.1.1-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Christoph\AppData\Local\Temp\{3F613B63-973B-4427-8397-4AD8AED28425}-38.0.2125.104_37.0.2062.124_chrome_updater.exe
Some zero byte size files/folders:
==========================
C:\Windows\System32\regsvr32.exe
C:\Windows\System32\sdiageng.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-05 10:16
==================== End Of Log ============================
Mittlerweile sind übrigens auch noch zwei andere Symptome aufgetreten die möglicherweise damit im Zusammenhang stehen. 1.) Die Maus reagiert teiles bei einem normalen Klick mit einem Doppelklick 2.) Mindestens einmal am Tag ein Blackscreen, welcher einen manuellen Neustart erfordert, heute kam nach einem Neustart wegen diesem Problem 3-4 mal hintereinander nach dem Start von Windows ein Blackscreen. |
|
07.03.2015, 15:50
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Lösung: Andauernd USB-Ton und Fehlercode 43 Bitte mit MBAR fortfahren: Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
07.03.2015, 16:52
| #5 |
| | Wie Andauernd USB-Ton und Fehlercode 43 Logfile vor CleanUp Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org
Database version:
main: v2015.03.07.03
rootkit: v2015.02.25.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17041
Christoph :: CHRISTOPH-PC [administrator]
07.03.2015 16:07:27
mbar-log-2015-03-07 (16-07-27).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 479889
Time elapsed: 14 minute(s), 13 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
C:\Users\Christoph\Downloads\OpenOffice - CHIP-Installer.exe (Backdoor.Bot) -> Delete on reboot. [416e142e2e5c9b9b28e0b1bc679932ce]
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org
Database version:
main: v2015.03.07.03
rootkit: v2015.02.25.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17041
Christoph :: CHRISTOPH-PC [administrator]
07.03.2015 16:31:11
mbar-log-2015-03-07 (16-31-11).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 479736
Time elapsed: 17 minute(s), 57 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
 |
|
07.03.2015, 17:00
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Wo Andauernd USB-Ton und Fehlercode 43 Lösung! Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ --> Andauernd USB-Ton und Fehlercode 43 |
|
07.03.2015, 17:41
| #7 |
| | Andauernd USB-Ton und Fehlercode 43 adwCleaner: Code:
ATTFilter # AdwCleaner v4.111 - Bericht erstellt 07/03/2015 um 17:20:56
# Aktualisiert 18/02/2015 von Xplode
# Datenbank : 2015-03-05.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Christoph - CHRISTOPH-PC
# Gestarted von : C:\Users\Christoph\Desktop\AdwCleaner_4.111.exe
# Option : Loschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Geloscht : C:\ProgramData\SecTaskMan
Ordner Geloscht : C:\Program Files (x86)\BrowseMark
Ordner Geloscht : C:\Users\CHRIST~1\AppData\Local\Temp\OCS
Ordner Geloscht : C:\Users\CHRIST~1\AppData\Local\Temp\neurowise
Ordner Geloscht : C:\Users\Christoph\AppData\Roaming\Browser Extensions
Ordner Geloscht : C:\Users\Christoph\AppData\Roaming\Search Protection
Ordner Geloscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{32da2f20-827d-40aa-a3b4-2fc4a294352e}
Ordner Geloscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{84a93d51-b7a9-431e-8ff8-d60e5d7f5df1}
Ordner Geloscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{f894a29a-f065-40c3-bb19-da6057778493}
Ordner Geloscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{46eddf51-a4f6-4476-8d6c-31c5187b2a2f}
Datei Geloscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\foxydeal.sqlite
Datei Geloscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\searchplugins\yahoo_ff.xml
Datei Geloscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\searchplugins\yahoo_ff.xml
***** [ Geplante Tasks ] *****
Task Geloscht : MySearchDial
***** [ Verknupfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Search Protection]
Schlussel Geloscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Schlussel Geloscht : HKCU\Software\OCS
Schlussel Geloscht : HKCU\Software\AppDataLow\Software\Search Protection
Schlussel Geloscht : HKCU\Software\AppDataLow\Software\Browser Extensions
Schlussel Geloscht : HKLM\SOFTWARE\BrowseMark
Schlussel Geloscht : HKLM\SOFTWARE\DriverTuner_Init
Schlussel Geloscht : HKLM\SOFTWARE\DriverTuner
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6}
Schlussel Geloscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Search Protection
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlussel Geloscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\90C64EA18BA25EE488BF80DCF07F2FFD
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17041
-\\ Mozilla Firefox v36.0.1 (x86 de)
-\\ Google Chrome v40.0.2214.115
*************************
AdwCleaner[R0].txt - [4240 Bytes] - [25/03/2014 00:13:00]
AdwCleaner[R1].txt - [1060 Bytes] - [28/03/2014 11:50:47]
AdwCleaner[R2].txt - [14622 Bytes] - [09/07/2014 23:57:30]
AdwCleaner[R3].txt - [4399 Bytes] - [07/03/2015 17:19:02]
AdwCleaner[S0].txt - [3974 Bytes] - [25/03/2014 00:18:34]
AdwCleaner[S1].txt - [1122 Bytes] - [28/03/2014 11:52:32]
AdwCleaner[S2].txt - [13610 Bytes] - [09/07/2014 23:58:12]
AdwCleaner[S3].txt - [4247 Bytes] - [07/03/2015 17:20:56]
########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [4306 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.3 (03.01.2015:1)
OS: Windows 7 Home Premium x64
Ran by Christoph on 07.03.2015 at 17:26:01,90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util browsemark
~~~ Files
Successfully deleted: [File] "C:\Windows\wininit.ini"
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\8pd685pl.Teste\minidumps [176 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.03.2015 at 17:30:30,25
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-03-2015 01
Ran by Christoph (administrator) on CHRISTOPH-PC on 07-03-2015 17:34:17
Running from C:\Users\Christoph\Downloads
Loaded Profiles: Christoph & UpdatusUser (Available profiles: Christoph & UpdatusUser & Administrator)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(www.shadowexplorer.com) C:\Program Files (x86)\ShadowExplorer\sesvc.exe
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
() C:\Program Files (x86)\puush\puush.exe
() C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe
() C:\Users\Christoph\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(G Data Software AG) C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694080 2013-07-10] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5537136 2013-11-02] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [1756792 2014-05-20] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\System32\Userinit.exe,C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe,
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [KiesPDLR] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-11-03] (Samsung)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [567880 2013-09-03] ()
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [OscarEditor] => C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe [3333632 2012-08-16] ()
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [Amazon Cloud Player] => C:\Users\Christoph\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3168576 2014-03-07] ()
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-11-03] (Samsung)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Run: [uTorrent] => C:\Users\Christoph\AppData\Roaming\uTorrent\uTorrent.exe [1051984 2015-03-07] (BitTorrent Inc.)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Policies\system: [DisableLockWorkstation] 0
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [250504 2013-03-15] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [205184 2013-03-15] (NVIDIA Corporation)
Startup: C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2001810455-1053792824-432003306-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2001810455-1053792824-432003306-1000 -> {669DCF8C-6CB2-4C40-BBF5-FE948542B767} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=242154&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2001810455-1053792824-432003306-1004 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2015-02-15] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2015-02-15] (Oracle Corporation)
BHO-x32: ATLAS Toolbar -> {3C6301ED-0F78-4AF2-8150-D9C052361A8E} -> C:\Program Files (x86)\ATLAS V14\ATLIECP.DLL [2007-10-04] (FUJITSU LIMITED)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll [2015-02-15] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll [2015-02-15] (Oracle Corporation)
Toolbar: HKLM-x32 - ATLAS Toolbar - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - C:\Program Files (x86)\ATLAS V14\ATLIECP.DLL [2007-10-04] (FUJITSU LIMITED)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{B0C7E6B8-57C9-4D8E-BBA1-51AE72F78CD9}: [NameServer] 8.8.8.8
FireFox:
========
FF ProfilePath: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste
FF SelectedSearchEngine: Yahoo!
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: https://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=242154&p=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-06] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2015-02-15] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2015-02-15] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-06] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-01-09] (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll [2013-11-21] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll [2015-02-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll [2015-02-15] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-05-14] (Nero AG)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-03-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-03-14] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-05-10] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2001810455-1053792824-432003306-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll [2012-12-07] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-2001810455-1053792824-432003306-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-04-18] (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2013-05-10] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\abs@avira.com [2014-08-05]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\ich@maltegoetz.de [2013-12-13]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7} [2013-12-06]
FF Extension: DownloadHelper - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25]
FF Extension: MEGA EXTENSION - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\firefox@mega.co.nz.xpi [2013-03-13]
FF Extension: Adblock Plus - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-07]
FF Extension: Manga Fetcher - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\mfetcher@gmx.net [2014-09-11]
FF Extension: Rikaichan Japanese-German Dictionary File - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\rikaichan-jpde@polarcloud.com [2014-07-15]
FF Extension: Rikaichan - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{0AA9101C-D3C1-4129-A9B7-D778C6A17F82} [2014-07-15]
FF Extension: FireShot - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2015-02-24]
FF Extension: DownloadHelper - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-06]
FF Extension: FlashDisable - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\jid0-bbA9VAawX3LMWDu668aUDrpQVXU@jetpack.xpi [2015-01-17]
FF Extension: No Name - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\jid1-7NbXi2AqS1oUFw@jetpack.xpi [2014-04-06]
FF Extension: ProxTube - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-07-31]
FF Extension: Adblock Plus - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8pd685pl.Teste\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-29]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-03-05]
Chrome:
=======
CHR HomePage: Default -> https://de.search.yahoo.com/?type=242154&fr=yo-yhp-ch
CHR StartupUrls: Default -> "https://de.search.yahoo.com/?type=242154&fr=yo-yhp-ch"
CHR DefaultSearchKeyword: Default -> yahoo.com search
CHR DefaultSearchURL: Default -> https://de.search.yahoo.com/search?fr=chr-yo_gc&ei=utf-8&ilc=12&type=242154&p={searchTerms}
CHR DefaultSuggestURL: Default -> https://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}
CHR Profile: C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-06]
CHR Extension: (Google Drive) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-19]
CHR Extension: (YouTube) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-06]
CHR Extension: (Google Search) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-06]
CHR Extension: (Google Wallet) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-06]
CHR Extension: (Gmail) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-06]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2250360 2014-10-14] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe [2683760 2014-05-20] (G Data Software AG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [782208 2015-01-16] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [3228136 2014-08-21] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700536 2014-05-20] (G Data Software AG)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-06] ()
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\RpcAgentSrv.exe [71832 2009-04-22] (SiSoftware) [File not signed]
R2 sesvc; C:\Program Files (x86)\ShadowExplorer\sesvc.exe [9216 2013-01-02] (www.shadowexplorer.com) [File not signed]
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2014-12-28] (Microsoft Corporation) [File not signed]
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-11-02] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-11-02] (Western Digital Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-06-13] (Disc Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [55808 2014-12-15] (G Data Software AG)
R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-01-15] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [142336 2014-12-15] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [64000 2014-12-15] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-03-03] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-03-03] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [61440 2014-12-15] (G Data Software AG)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [239104 2013-01-30] (Huawei Technologies Co., Ltd.)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-07-19] ()
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-07 17:34 - 2015-03-07 17:34 - 00028113 _____ () C:\Users\Christoph\Downloads\FRST.txt
2015-03-07 17:32 - 2015-03-07 17:33 - 00000000 ____D () C:\Users\Christoph\Downloads\FRST-OlderVersion
2015-03-07 17:30 - 2015-03-07 17:30 - 00001085 _____ () C:\Users\Christoph\Desktop\JRT.txt
2015-03-07 17:11 - 2015-03-07 17:11 - 02126848 _____ () C:\Users\Christoph\Desktop\AdwCleaner_4.111.exe
2015-03-07 17:11 - 2015-03-07 17:11 - 01388333 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2015-03-07 16:07 - 2015-03-07 17:22 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-03-07 15:54 - 2015-03-07 16:49 - 00000000 ____D () C:\Users\Christoph\Desktop\mbar
2015-03-07 14:13 - 2015-03-07 14:13 - 695185348 _____ () C:\Windows\MEMORY.DMP
2015-03-07 13:07 - 2015-03-07 13:10 - 00004169 _____ () C:\Users\Christoph\Desktop\magnets.txt
2015-03-06 00:46 - 2015-03-06 00:46 - 00017858 _____ () C:\Users\Christoph\Downloads\[DeadFish] Akatsuki no Yona - 14 [720p][AAC].mp4.torrent
2015-03-05 22:42 - 2015-03-05 22:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-05 16:19 - 2015-03-05 16:20 - 00000000 ____D () C:\Users\Christoph\Downloads\Dame - Auf die guten alten Zeiten [Official HD Video]
2015-03-05 14:08 - 2015-03-05 14:52 - 63463424 _____ () C:\Users\Christoph\Downloads\EpicGamesLauncherInstaller-2.0.1-2467307.msi
2015-03-03 20:38 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-03 20:38 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-03 20:38 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-03 20:38 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-03-03 15:39 - 2015-03-03 15:42 - 06208736 _____ (Tim Kosse) C:\Users\Christoph\Downloads\FileZilla_3.10.2_win32-setup.exe
2015-03-03 10:22 - 2015-03-03 10:22 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2015-03-03 10:22 - 2015-03-03 10:22 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2015-03-03 10:19 - 2015-03-03 10:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY
2015-03-03 09:40 - 2015-03-03 09:40 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-03-02 23:46 - 2015-03-07 14:19 - 00000000 ____D () C:\Windows\SysWOW64\NV
2015-03-02 23:46 - 2015-03-07 14:19 - 00000000 ____D () C:\Windows\system32\NV
2015-03-02 23:46 - 2015-03-02 23:46 - 00000451 _____ () C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-03-02 23:11 - 2015-03-02 23:11 - 01363456 _____ (Björn Bastian) C:\Users\Christoph\Downloads\USB-Fehlerbehebung_2.2.exe
2015-03-02 18:46 - 2015-03-02 18:52 - 00000000 ____D () C:\Users\Christoph\Downloads\usblogview
2015-03-02 18:46 - 2015-03-02 18:46 - 00208537 _____ () C:\Users\Christoph\Downloads\usblogview.zip
2015-03-02 16:50 - 2015-03-02 16:50 - 00002253 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2015-03-02 16:50 - 2015-03-02 16:50 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2015-03-02 16:42 - 2015-03-02 17:29 - 00000000 ____D () C:\Users\Christoph\Downloads\usbdeview-x64
2015-03-02 16:42 - 2015-03-02 16:42 - 00108330 _____ () C:\Users\Christoph\Downloads\usbdeview-x64.zip
2015-02-28 20:58 - 2015-02-28 20:58 - 00000222 _____ () C:\Users\Christoph\Desktop\Influent.url
2015-02-28 13:33 - 2015-02-28 13:33 - 00021314 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Lonely Yuri.torrent
2015-02-27 21:37 - 2015-02-27 21:37 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Steam
2015-02-26 00:50 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-02-26 00:50 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-24 23:20 - 2015-02-24 23:20 - 00025138 _____ () C:\Users\Christoph\Downloads\[DeadFish] Koufuku Graffiti - 07 [720p][AAC].mp4.torrent
2015-02-24 23:19 - 2015-02-24 23:19 - 00024772 _____ () C:\Users\Christoph\Downloads\[DeadFish] Dog Days'' - 07 [720p][AAC].mp4.torrent
2015-02-24 23:18 - 2015-02-24 23:18 - 00028267 _____ () C:\Users\Christoph\Downloads\[DeadFish] Shinmai Maou no Testament - 07 [720p][AAC].mp4.torrent
2015-02-24 23:18 - 2015-02-24 23:18 - 00025738 _____ () C:\Users\Christoph\Downloads\[DeadFish] Akatsuki no Yona - 19 [720p][AAC].mp4.torrent
2015-02-24 23:18 - 2015-02-24 23:18 - 00019150 _____ () C:\Users\Christoph\Downloads\[DeadFish] Saenai Heroine no Sodatekata - 06 [720p][AAC].mp4.torrent
2015-02-24 23:17 - 2015-02-24 23:17 - 00032958 _____ () C:\Users\Christoph\Downloads\[DeadFish] JoJo no Kimyou na Bouken_ Stardust Crusaders - Egypt Hen - 07 [720p][AAC].mp4.torrent
2015-02-24 23:17 - 2015-02-24 23:17 - 00023538 _____ () C:\Users\Christoph\Downloads\[DeadFish] Bishoujo Senshi Sailor Moon_ Crystal - 16 [720p][AAC].mp4.torrent
2015-02-24 23:16 - 2015-02-24 23:16 - 00018745 _____ () C:\Users\Christoph\Downloads\[DeadFish] Shigatsu wa Kimi no Uso - 18 [720p][AAC].mp4.torrent
2015-02-24 19:59 - 2015-02-24 19:59 - 00000090 _____ () C:\Users\Christoph\Desktop\mirai.txt
2015-02-23 13:19 - 2015-02-23 13:19 - 00715796 _____ () C:\Users\Christoph\Downloads\MKVExtractGUI-2.2.2.8.zip
2015-02-23 13:19 - 2015-02-23 13:19 - 00000000 ____D () C:\Users\Christoph\Downloads\MKVExtractGUI-2.2.2.8
2015-02-22 16:15 - 2015-02-22 16:15 - 00037691 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Tsukihime.torrent
2015-02-22 16:15 - 2015-02-22 16:15 - 00023675 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Tsukihime Plus Disc.torrent
2015-02-22 13:06 - 2015-02-22 13:06 - 00041519 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss for the Petals Sweet Grownup Kisses.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00046797 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss for the Petals PetalColored Angel.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00041377 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals Sweet Enchanting Kisses.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00034845 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals The Joy Of Loving You.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00032354 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss for the Petals Whisper With A Kiss.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00028349 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals Joined In Love With You.torrent
2015-02-22 13:05 - 2015-02-22 13:05 - 00016697 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals Beloved Photograph.torrent
2015-02-22 13:04 - 2015-02-22 13:04 - 00030340 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] A Kiss For The Petals My Dear Prince.torrent
2015-02-22 12:58 - 2015-02-22 12:58 - 00016524 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Fate Hollow Ataraxia.torrent
2015-02-21 22:45 - 2015-02-21 22:45 - 00026518 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Wind A Breath of Heart Regratitude(1).torrent
2015-02-21 22:43 - 2015-02-21 22:43 - 00026518 _____ () C:\Users\Christoph\Downloads\[Fuwanovel] Wind A Breath of Heart Regratitude.torrent
2015-02-21 21:29 - 2015-03-05 16:20 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 12-(720p x264 AAC)(8 Bit)
2015-02-21 20:14 - 2015-02-21 21:29 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 13-(720p x264 AAC)(8 Bit - Softsub)
2015-02-21 17:55 - 2015-02-21 20:14 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 11-(720p x264 AAC)(8 Bit)
2015-02-21 15:58 - 2015-02-21 17:55 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 10-(720p x264 AAC)(8 Bit)
2015-02-21 10:21 - 2015-02-21 15:58 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 09-(720p x264 AAC)(8 Bit)
2015-02-21 10:14 - 2015-02-21 10:18 - 00000000 ____D () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 01-(720p x264 AAC)[8 Bit]
2015-02-21 00:09 - 2015-02-21 00:59 - 139061960 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 09-(720p x264 AAC)(8 Bit).mp4.part
2015-02-19 23:34 - 2015-02-20 18:22 - 351114264 _____ () C:\Users\Christoph\Downloads\[YY-S]_Tokyo_Ravens_-_7.mp4
2015-02-19 23:23 - 2015-02-21 00:09 - 287466475 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 08-(720p x264 AAC)(8 Bit).mp4
2015-02-19 20:09 - 2015-02-19 23:23 - 457882993 _____ () C:\Users\Christoph\Downloads\[YY-S] Tokyo Ravens - 22.mp4
2015-02-19 11:22 - 2015-02-19 23:31 - 351114264 _____ () C:\Users\Christoph\Downloads\[YY-S] Tokyo Ravens - 07.mp4
2015-02-18 15:18 - 2015-02-18 15:19 - 00000026 _____ () C:\Users\Christoph\Desktop\Neues Textdokument (3).txt
2015-02-16 16:12 - 2015-02-19 03:37 - 292248901 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo_Ravens_-_06-(720p_x264__AAC)(8_Bit).mp4
2015-02-15 14:14 - 2015-02-15 14:14 - 00002134 _____ () C:\Users\Christoph\Desktop\All in One Runtimes - CHIP Downloader.lnk
2015-02-15 13:58 - 2015-02-15 13:58 - 00010736 _____ () C:\Windows\unins000.dat
2015-02-15 13:58 - 2015-02-15 13:56 - 01198049 _____ () C:\Windows\unins000.exe
2015-02-15 13:58 - 2014-06-05 08:07 - 01177088 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2015-02-15 13:58 - 2014-06-05 08:07 - 00271360 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll
2015-02-15 13:58 - 2014-06-05 08:07 - 00271360 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libssl32.dll
2015-02-15 13:58 - 2014-06-01 19:53 - 00460104 _____ (AutoIt Team) C:\Windows\SysWOW64\autoitx3.dll
2015-02-15 13:58 - 2014-01-25 14:30 - 00131072 _____ (Sereby Corporation) C:\Windows\SysWOW64\AiORuntimes.dll
2015-02-15 13:58 - 2013-12-20 01:48 - 00444328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshflxgd.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00416408 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\comct332.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00279192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatgrd.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00259736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msflxgrd.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00253080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatlst.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00219288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\richtx32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00218776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dblist32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00212112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mci32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00179352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmask32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00170920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comct232.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00131728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00130712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2015-02-15 13:58 - 2013-12-20 01:48 - 00127640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswinsck.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00119960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomm32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00108696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstkprp.dll
2015-02-15 13:58 - 2013-12-20 01:48 - 00104088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\picclp32.ocx
2015-02-15 13:58 - 2013-12-20 01:48 - 00084624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysinfo.ocx
2015-02-15 13:58 - 2013-08-31 21:40 - 03115385 _____ (Red Hat) C:\Windows\SysWOW64\cygwin1.dll
2015-02-15 13:58 - 2012-06-14 15:36 - 00107520 _____ () C:\Windows\SysWOW64\zlib1.dll
2015-02-15 13:58 - 2012-04-03 17:11 - 00138752 _____ () C:\Windows\SysWOW64\libpng15.dll
2015-02-15 13:58 - 2011-10-12 04:09 - 04033440 _____ (Intel Corporation) C:\Windows\SysWOW64\libmmd.dll
2015-02-15 13:58 - 2011-01-12 14:36 - 01054208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71u.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71DEU.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ITA.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71FRA.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ESP.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ENU.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71KOR.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71JPN.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71CHT.dll
2015-02-15 13:58 - 2011-01-12 14:25 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71CHS.dll
2015-02-15 13:58 - 2011-01-12 14:19 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2015-02-15 13:58 - 2011-01-12 13:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl71.dll
2015-02-15 13:58 - 2010-06-27 18:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\Windows\system\plugin.dll
2015-02-15 13:58 - 2010-03-18 21:21 - 00799568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdia100.dll
2015-02-15 13:58 - 2008-08-26 07:40 - 00162304 _____ () C:\Windows\SysWOW64\libpng13.dll
2015-02-15 13:58 - 2008-03-14 18:21 - 01008128 _____ (GnuWin32 <hxxp://gnuwin32.sourceforge.net>) C:\Windows\SysWOW64\libiconv2.dll
2015-02-15 13:58 - 2007-01-30 23:04 - 00339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2015-02-15 13:58 - 2006-08-26 01:28 - 01017344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70u.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ITA.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70FRA.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ESP.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70DEU.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ENU.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70KOR.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70JPN.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70CHT.dll
2015-02-15 13:58 - 2006-08-26 01:15 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70CHS.dll
2015-02-15 13:58 - 2006-08-26 01:07 - 01024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2015-02-15 13:58 - 2006-08-26 00:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl70.dll
2015-02-15 13:58 - 2005-05-06 14:52 - 00103424 _____ (GNU <www.gnu.org>) C:\Windows\SysWOW64\libintl3.dll
2015-02-15 13:58 - 2005-01-20 20:25 - 00054784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvci70.dll
2015-02-15 13:58 - 2002-01-05 06:40 - 00487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp70.dll
2015-02-15 13:58 - 1996-01-12 04:00 - 00935632 _____ (Microsoft Corporation) C:\Windows\system\vb40016.dll
2015-02-15 13:58 - 1994-11-17 14:00 - 00210944 _____ () C:\Windows\system\msvcrt10.dll
2015-02-15 13:58 - 1993-05-11 20:00 - 00398416 _____ (Microsoft Corporation) C:\Windows\system\vbrun300.dll
2015-02-15 13:58 - 1992-10-21 01:00 - 00356992 _____ (Microsoft Corporation) C:\Windows\system\vbrun200.dll
2015-02-15 13:58 - 1991-05-10 02:00 - 00271264 _____ () C:\Windows\system\vbrun100.dll
2015-02-15 13:48 - 2015-02-15 13:48 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-02-15 13:47 - 2015-02-15 13:47 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-02-15 13:23 - 2015-02-15 13:23 - 01203488 _____ () C:\Users\Christoph\Downloads\All in One Runtimes - CHIP-Installer.exe
2015-02-15 03:57 - 2015-02-15 03:57 - 00000222 _____ () C:\Users\Christoph\Desktop\Go! Go! Nippon! ~My First Trip to Japan~.url
2015-02-15 03:54 - 2015-02-15 14:23 - 00000842 _____ () C:\Users\Christoph\Desktop\NeptuniaReBirth1.exe - Verknüpfung.lnk
2015-02-15 03:02 - 2015-02-15 03:02 - 00000000 ____D () C:\ProgramData\Steam
2015-02-14 17:28 - 2015-03-03 15:43 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\FileZilla
2015-02-14 17:27 - 2015-02-14 17:27 - 00000000 ____D () C:\Users\Christoph\Downloads\filezilla_3.10.1.1_win32
2015-02-14 17:23 - 2015-02-14 17:27 - 09498456 _____ () C:\Users\Christoph\Downloads\filezilla_3.10.1.1_win32.zip
2015-02-14 16:26 - 2015-02-14 16:33 - 00000000 ____D () C:\Users\Christoph\Downloads\winscp556setup
2015-02-14 03:50 - 2015-02-16 16:12 - 279979903 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo_Ravens_-_05-(720p_x264__AAC)(8_Bit).mp4
2015-02-14 03:50 - 2015-02-14 15:01 - 261714515 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo Ravens - 04-(720p x264 AAC)(8 Bit).mp4
2015-02-14 03:48 - 2015-02-14 03:48 - 00002171 _____ () C:\Users\Christoph\Desktop\JDownloader 2.lnk
2015-02-14 03:48 - 2015-02-14 03:48 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2015-02-14 03:31 - 2015-03-05 16:25 - 00000000 ____D () C:\Users\Christoph\AppData\Local\JDownloader 2.0
2015-02-14 03:14 - 2015-02-14 03:14 - 00000000 ____D () C:\Users\Christoph\Downloads\Humble_VanentinesDay_Cards
2015-02-14 02:05 - 2015-02-14 02:16 - 26816094 _____ () C:\Users\Christoph\Downloads\Humble_VanentinesDay_Cards.zip
2015-02-13 18:43 - 2015-02-14 05:34 - 366756189 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]_Tokyo_Ravens_-_03.mp4
2015-02-13 14:22 - 2015-02-13 18:43 - 376518273 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo_Ravens_-_02-(720p_x264__AAC)(8_Bit).mp4
2015-02-13 12:07 - 2015-02-13 13:16 - 164042310 _____ () C:\Users\Christoph\Downloads\www.eliteanimes.com_[No]Da_Capo_if_-_02(XviD)[F36F6EC8].avi
2015-02-13 08:43 - 2015-02-13 12:07 - 184385536 _____ () C:\Users\Christoph\Downloads\www.eliteanimes.com_[No]Da_Capo_if_-_01(XviD)[DC32D2A2].avi
2015-02-11 09:30 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 09:30 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 09:30 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 09:30 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 09:30 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 09:30 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 09:30 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 09:30 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 09:30 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 09:30 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 09:30 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 09:30 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 09:30 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 09:30 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 09:30 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 09:30 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 09:30 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 09:30 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 09:19 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 09:19 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 09:19 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 09:19 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 09:19 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 09:19 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 09:19 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-02-11 09:16 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-02-11 09:16 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-02-11 09:16 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-11 09:16 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-11 09:12 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 09:12 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 09:12 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 09:12 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 09:12 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 09:12 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 09:11 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 09:11 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 09:11 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-11 09:11 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-02-11 09:11 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-02-07 00:50 - 2015-02-07 00:51 - 24182127 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_06_[22CDD48F].mkv
2015-02-07 00:43 - 2015-02-07 00:46 - 26061354 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_05_[CE0DBBDD].mkv
2015-02-07 00:34 - 2015-02-07 00:46 - 24276997 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_04_[3BBFA608].mkv
2015-02-07 00:26 - 2015-02-07 00:46 - 26580394 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_03_[B239612B].mkv
2015-02-07 00:15 - 2015-02-07 00:15 - 24428202 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_demo_Koi_ga_Shitai!_Lite_-_02_[90DD7FA3].mkv
2015-02-07 00:07 - 2015-02-07 00:14 - 24075110 _____ () C:\Users\Christoph\Downloads\[URW]_Chuunibyou_Demo_Koi_ga_Shitai!_Lite_-_01_[E8C17E9A].mkv
2015-02-06 00:45 - 2015-02-06 00:45 - 00031359 _____ () C:\Users\Christoph\AppData\Local\recently-used.xbel
2015-02-06 00:15 - 2015-02-13 14:22 - 207926204 _____ () C:\Users\Christoph\Downloads\[YinYang-Subs]Tokyo_Ravens_-_01-(720p_x264__AAC)[8_Bit].mp4
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-07 17:34 - 2014-03-28 10:53 - 00000000 ____D () C:\FRST
2015-03-07 17:34 - 2012-11-22 23:35 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\NetSpeedMonitor
2015-03-07 17:32 - 2014-03-28 10:41 - 02094592 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2015-03-07 17:30 - 2009-07-14 05:45 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-07 17:30 - 2009-07-14 05:45 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-07 17:26 - 2012-07-12 16:42 - 01936057 _____ () C:\Windows\WindowsUpdate.log
2015-03-07 17:25 - 2013-02-21 18:41 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\uTorrent
2015-03-07 17:25 - 2012-12-01 00:29 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Skype
2015-03-07 17:23 - 2013-12-25 11:55 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2015-03-07 17:22 - 2014-07-01 10:35 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-07 17:22 - 2012-07-30 12:00 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2015-03-07 17:22 - 2012-07-16 10:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-07 17:22 - 2010-11-21 04:47 - 00415336 _____ () C:\Windows\PFRO.log
2015-03-07 17:22 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-07 17:22 - 2009-07-14 05:51 - 00140755 _____ () C:\Windows\setupact.log
2015-03-07 17:20 - 2014-03-25 00:12 - 00000000 ____D () C:\AdwCleaner
2015-03-07 17:19 - 2014-09-20 00:19 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {C08A5572-83AC-495D-AFED-1683BC8FEAD1}.job
2015-03-07 17:19 - 2014-09-20 00:19 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {C08A5572-83AC-495D-AFED-1683BC8FEAD1}.job
2015-03-07 17:18 - 2014-07-01 10:35 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-07 17:17 - 2014-09-20 00:17 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Update {5B557CE1-4321-4890-B411-4403944F2B02}.job
2015-03-07 17:17 - 2014-09-20 00:17 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {5B557CE1-4321-4890-B411-4403944F2B02}.job
2015-03-07 16:49 - 2014-03-25 13:14 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-07 16:35 - 2012-07-16 11:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-07 16:31 - 2014-03-25 13:14 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-07 12:32 - 2012-08-07 19:16 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\vlc
2015-03-06 17:47 - 2012-07-30 12:00 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2015-03-06 10:31 - 2014-03-29 00:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-06 10:12 - 2009-07-14 05:45 - 00306840 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-06 00:50 - 2012-07-16 10:03 - 00068824 _____ () C:\Users\Christoph\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-05 16:26 - 2012-08-07 21:41 - 00000000 ____D () C:\Users\Christoph\dwhelper
2015-03-05 15:04 - 2012-07-12 17:28 - 00281503 _____ () C:\Windows\DirectX.log
2015-03-05 08:44 - 2013-05-04 09:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-03-04 09:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-03-03 12:43 - 2014-12-31 10:50 - 00003304 _____ () C:\Users\Christoph\Desktop\PC.txt
2015-03-03 10:19 - 2015-01-15 00:08 - 00001984 _____ () C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk
2015-03-03 10:18 - 2014-12-15 23:38 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2015-03-03 10:18 - 2013-12-25 11:54 - 00032186 _____ () C:\Windows\DPINST.LOG
2015-03-02 23:47 - 2012-07-12 17:31 - 00000000 ____D () C:\Users\Christoph
2015-03-02 23:44 - 2012-07-30 11:59 - 00000000 ____D () C:\Program Files\Intel
2015-03-02 16:50 - 2012-10-11 10:07 - 00001427 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-02 16:50 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-02-25 10:31 - 2015-01-14 11:06 - 00000194 _____ () C:\Users\Christoph\Desktop\zahlungen.txt
2015-02-24 03:17 - 2010-11-21 04:27 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-23 11:13 - 2013-02-23 23:55 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Aegisub
2015-02-20 10:10 - 2013-04-27 00:43 - 00120832 ___SH () C:\Users\Christoph\Thumbs.db
2015-02-16 03:00 - 2014-02-15 03:09 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-15 14:39 - 2012-08-07 19:22 - 00000000 ____D () C:\Users\Christoph\.gimp-2.8
2015-02-15 13:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system
2015-02-15 13:56 - 2012-07-16 12:27 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2015-02-15 13:56 - 2012-07-16 11:36 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-02-15 13:47 - 2013-05-04 13:02 - 00000000 ____D () C:\Program Files\Java
2015-02-15 13:47 - 2013-03-12 09:13 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-15 03:02 - 2012-08-12 11:37 - 00000000 ____D () C:\Users\Christoph\Documents\My Games
2015-02-14 03:00 - 2014-07-18 23:04 - 00001108 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2015-02-14 00:12 - 2013-04-05 22:41 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\TS3Client
2015-02-13 18:10 - 2014-11-28 12:36 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Skyrim
2015-02-13 18:03 - 2014-11-28 13:00 - 00000000 ____D () C:\Users\Christoph\Documents\Nexus Mod Manager
2015-02-12 19:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-12 03:12 - 2014-12-11 07:55 - 00000000 ____D () C:\Windows\system32\appraiser
2015-02-12 03:12 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-02-08 10:36 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-02-06 19:13 - 2014-07-01 10:35 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-06 19:13 - 2014-07-01 10:35 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-06 00:37 - 2012-07-16 11:36 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-06 00:37 - 2012-07-16 11:36 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-06 00:37 - 2012-07-16 11:36 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
==================== Files in the root of some directories =======
2013-03-01 10:38 - 2013-03-09 00:39 - 0002298 _____ () C:\Users\Christoph\AppData\Roaming\ASSDraw3.cfg
2014-12-15 23:38 - 2014-12-15 23:38 - 0000000 _____ () C:\Users\Christoph\AppData\Roaming\gdfw.log
2014-12-15 23:38 - 2014-12-15 23:38 - 0000779 _____ () C:\Users\Christoph\AppData\Roaming\gdscan.log
2013-04-28 15:45 - 2013-12-16 14:15 - 13492224 _____ () C:\Users\Christoph\AppData\Roaming\Sandra.mdb
2014-04-12 03:48 - 2014-04-12 03:48 - 0000044 _____ () C:\Users\Christoph\AppData\Roaming\WB.CFG
2015-02-06 00:45 - 2015-02-06 00:45 - 0031359 _____ () C:\Users\Christoph\AppData\Local\recently-used.xbel
Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
C:\Users\Christoph\AppData\Local\Temp\drm_dyndata_7380015.dll
C:\Users\Christoph\AppData\Local\Temp\EAD1860.exe
C:\Users\Christoph\AppData\Local\Temp\EAD6576.exe
C:\Users\Christoph\AppData\Local\Temp\EADC189.exe
C:\Users\Christoph\AppData\Local\Temp\EADD622.exe
C:\Users\Christoph\AppData\Local\Temp\EADF16F.exe
C:\Users\Christoph\AppData\Local\Temp\fileutil.dll
C:\Users\Christoph\AppData\Local\Temp\i4jdel0.exe
C:\Users\Christoph\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Christoph\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Christoph\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Christoph\AppData\Local\Temp\mirc732.exe
C:\Users\Christoph\AppData\Local\Temp\Nexus Mod Manager-0.53.2.exe
C:\Users\Christoph\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Christoph\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Christoph\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Christoph\AppData\Local\Temp\nvStInst.exe
C:\Users\Christoph\AppData\Local\Temp\proxy_vole7457242831514053379.dll
C:\Users\Christoph\AppData\Local\Temp\Quarantine.exe
C:\Users\Christoph\AppData\Local\Temp\SDuninst.exe
C:\Users\Christoph\AppData\Local\Temp\SearchProtectionSetup.exe
C:\Users\Christoph\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Christoph\AppData\Local\Temp\sonarinst.exe
C:\Users\Christoph\AppData\Local\Temp\sqlite3.dll
C:\Users\Christoph\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Christoph\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.0.6-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.0.8-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.1.1-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Christoph\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Christoph\AppData\Local\Temp\{3F613B63-973B-4427-8397-4AD8AED28425}-38.0.2125.104_37.0.2062.124_chrome_updater.exe
Some zero byte size files/folders:
==========================
C:\Windows\System32\regsvr32.exe
C:\Windows\System32\sdiageng.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-05 10:16
==================== End Of Log ============================
Addition.txt: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-03-2015 01
Ran by Christoph at 2015-03-07 17:34:52
Running from C:\Users\Christoph\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: G DATA INTERNET SECURITY (Disabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G DATA INTERNET SECURITY (Disabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G DATA Personal Firewall (Disabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
FLIGHT DIARY (x32 Version: 1.00.0000 - WILLPLUS) Hidden
[Windows 7 Theme] Erica Hartmann by Shiroskin (HKLM-x32\...\{bf6e38f6-d0c6-46cb-8d5b-3378cfb0725e}_is1) (Version: - k-rlitos.com)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.3.0.29126 - BitTorrent Inc.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acoustica MP3 To Wave Converter PLUS (HKLM-x32\...\Acoustica MP3 To Wave Converter PLUS) (Version: 2.5 - Acoustica, Inc.)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader X (10.1.7) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.1 (HKLM-x32\...\{7E33E883-0D17-4397-A461-B576605E34B1}) (Version: 12.1.6.156 - Adobe Systems, Inc)
Aegisub 3.0.2 (HKLM-x32\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.0.2 - Aegisub Team)
Alan Wake (HKLM-x32\...\Steam App 108710) (Version: - Remedy Entertainment)
Alan Wake's American Nightmare (HKLM-x32\...\Steam App 202750) (Version: - Remedy Entertainment)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.8 - Sereby Corporation)
Amazon Cloud Player (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Amazon Amazon Cloud Player) (Version: 2.4.0.26 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version: - Frictional Games)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
ATLAS Translation Standard V14.0 Trial Version (HKLM-x32\...\{6652750B-AA69-49B7-9D09-C0A28B6FFC9F}) (Version: 14.00.2000 - FUJITSU LIMITED)
Audacity 2.0.2 (HKLM-x32\...\Audacity_is1) (Version: 2.0.2 - Audacity Team)
Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.0.8179 - )
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
Belkin Connect Wireless USB Adapter (HKLM-x32\...\InstallShield_{08B73C99-D071-488F-8861-5DDA897C510D}) (Version: 1.0.0.3 - Belkin)
Belkin Connect Wireless USB Adapter (x32 Version: 1.0.0.3 - Belkin) Hidden
Binary Domain (HKLM-x32\...\Steam App 203750) (Version: - Sega)
Burnout Paradise: The Ultimate Box (HKLM-x32\...\Steam App 24740) (Version: - Criterion Games)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.4852 - CDBurnerXP)
Combined Community Codec Pack 2014-07-13 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2014.07.13.0 - CCCP Project)
Command and Conquer: Red Alert 3 - Uprising (HKLM-x32\...\Steam App 24800) (Version: - EA Los Angeles)
Crazy Taxi (HKLM-x32\...\Steam App 71230) (Version: - SEGA)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Darksiders II (HKLM-x32\...\Steam App 50650) (Version: - Vigil Games)
DayZ Commander (HKLM-x32\...\{7B2CA5E9-763C-4FCE-81EE-13E81ABFE908}) (Version: 0.92.115 - Dotjosh Studios)
Dead Island (HKLM-x32\...\Steam App 91310) (Version: - Techland)
Dropbox (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Dropbox) (Version: 2.0.0 - Dropbox, Inc.)
Druckerdeinstallation für EPSON XP-215 217 Series (HKLM\...\EPSON XP-215 217 Series) (Version: - SEIKO EPSON Corporation)
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Eufloria HD (HKLM-x32\...\EufloriaHD) (Version: - )
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Everlasting Summer (HKLM-x32\...\Steam App 331470) (Version: - Soviet Games)
eXceed 2nd - Vampire REX (HKLM-x32\...\Steam App 207380) (Version: - Tennen-sozai)
Exif-Viewer 2.51 (HKLM-x32\...\Exif-Viewer) (Version: 2.51 - Ralf Bibinger)
Fraps (HKLM-x32\...\Fraps) (Version: - )
G DATA INTERNET SECURITY (HKLM-x32\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.2.5 - G DATA Software AG)
GIMP 2.8.0 (HKLM\...\GIMP-2_is1) (Version: 2.8.0 - The GIMP Team)
Go! Go! Nippon! ~My First Trip to Japan~ (HKLM-x32\...\Steam App 251870) (Version: - OVERDRIVE)
Goodbye Deponia (HKLM-x32\...\Deponia 3) (Version: 3.2 - Daedalic Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HF pAppLoc version 1.0 (HKLM-x32\...\{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1) (Version: 1.0 - Inquisitor)
High-Definition Video Playback (x32 Version: 11.1.11500.4.273 - Nero AG) Hidden
IF MY HEART HAD WINGS (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\{5A0D1CE9-01BE-47E7-A019-45D5970AC1DA}) (Version: 1.00.0000 - MoeNovel)
IF MY HEART HAD WINGS (x32 Version: 1.00.0000 - MoeNovel) Hidden
ILLUSION @ふぉーむメイト (HKLM-x32\...\{2510CF9A-3D92-4D1E-9124-080F53F4E293}) (Version: 1.00.0000 - ILLUSION)
ILLUSION ジンコウガクエン (HKLM-x32\...\{C109AF5B-69D0-4C93-B360-F28D9FAB6084}) (Version: 1.00.0000 - ILLUSION)
ILLUSION ジンコウガクエン きゃらめいく (HKLM-x32\...\{502499DC-2EDB-45A2-8F7C-83E6E5DE067E}) (Version: 1.00.0000 - ILLUSION)
Influent (HKLM-x32\...\Steam App 274980) (Version: - Rob Howland)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Japanese Fonts Support For Adobe Reader X (HKLM-x32\...\{AC76BA86-7AD7-5760-0000-A00000000003}) (Version: 10.0.0 - Adobe Systems Incorporated)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Just Cause 1.00.0000 (HKLM-x32\...\{C9E270CC-AE42-4BD8-B9C6-1EB3A8657FF5}) (Version: 1.00.0000 - Eidos)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Legend of Grimrock (HKLM-x32\...\Legend of Grimrock) (Version: - )
Loadout (HKLM-x32\...\Steam App 208090) (Version: - Edge of Reality)
Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version: - Daniel Rebelo)
Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Medal of Honor(TM) Single Player (HKLM-x32\...\Steam App 47790) (Version: - Electronic Arts)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5139.5005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - )
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.32 - mIRC Co. Ltd.)
Mitsurugi Kamui Hikae (HKLM-x32\...\Steam App 263620) (Version: - Zenith Blue)
Mouse Editor (HKLM-x32\...\InstallShield_{3A4218DE-B9DB-4AD5-9DB2-5853D3AA0335}) (Version: 12.08.0006 - Ihr Firmenname)
MOUSE Editor (x32 Version: 12.08.0006 - Ihr Firmenname) Hidden
Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MP3 to WAV RES (HKLM-x32\...\MP3 to WAV RES) (Version: - )
MPC-HC 1.7.3 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.3 - MPC-HC Team)
NEKOPARA vol.1 (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\{64DC04AF-BD7C-4CF4-9CA4-938953224328}) (Version: - NEKO WORKs)
Nero Kwik Media (HKLM-x32\...\{22758D8F-E023-44ED-8647-3C6985ABF663}) (Version: 11.2.00900 - Nero AG)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.2 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 314.22 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
Oblivion (HKLM-x32\...\{C66BF9FD-D367-4E13-8EB8-385FFEA20DB3}) (Version: 1.2.0416 - Bethesda Softworks)
Onigiri_US (HKLM-x32\...\{E5A8486E-4E03-4F59-A44A-88399E341F41}) (Version: 1.00.0000 - CyberStep, Inc.)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284C}) (Version: 0.0.0.0 - peppy)
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version: - OVERKILL Software)
PDF24 Creator 6.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
piaip AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 2.4 beta r1617 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6631 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Red Faction: Armageddon (HKLM-x32\...\Steam App 55110) (Version: - Volition)
Remote Control Server (HKLM-x32\...\{755C6515-9FEA-490C-B15E-22BB6519E57E}) (Version: 2.0.1.60 - Steppschuh)
Risen (HKLM-x32\...\Steam App 40300) (Version: - Piranha – Bytes)
Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version: - Piranha Bytes)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.3.2.12064_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.3.2.12064_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.15.0 - SAMSUNG Electronics Co., Ltd.)
Serious Sam 2 (HKLM-x32\...\Steam App 204340) (Version: - Croteam)
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version: - Croteam)
Serious Sam Classic: The First Encounter (HKLM-x32\...\Steam App 41050) (Version: - Croteam)
Serious Sam HD: The First Encounter (HKLM-x32\...\Steam App 41000) (Version: - Croteam)
Serious Sam HD: The Second Encounter (HKLM-x32\...\Steam App 41010) (Version: - Croteam)
ShadowExplorer 0.9 (HKLM-x32\...\ShadowExplorer_is1) (Version: 0.9.462.0 - ShadowExplorer.com)
Sierra Utilities (HKLM-x32\...\Sierra Utilities) (Version: - )
SiSoftware Sandra Lite 2013.SP3a (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 19.44.2013.5 - SiSoftware)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Snow Sakura (HKLM-x32\...\Snow Sakura) (Version: - )
Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steins;Gate version 1.0 (HKLM\...\{2A05A52B-BDD8-4FD5-A65A-687CB10D98DF}_is1) (Version: 1.0 - JAST USA)
SUPER © v2012.build.54 (Nov 18, 2012) Version v2012.build.54 (HKLM-x32\...\{8F311E92-C29F-4DF9-8259-B739A1831669}_is1) (Version: v2012.build.54 - eRightSoft)
Swiff Player 1.7.2 (HKLM-x32\...\Swiff Player_is1) (Version: 1.7.2 - GlobFX Technologies)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.38846 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Last Remnant (HKLM-x32\...\Steam App 23310) (Version: - SQUARE ENIX)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unholy Heights (HKLM-x32\...\Steam App 249330) (Version: - Petit Depotto)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
VLC Setup Helper (HKLM-x32\...\VLC Setup Helper_is1) (Version: - )
VLC Streamer 4.96 (HKLM-x32\...\VLC Streamer_is1) (Version: - )
WD Drive Utilities (HKLM-x32\...\{B2BCCFEC-2623-40E5-9522-DEC488E6B730}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{507B1304-194A-4204-A9D9-9BAAF51EF760}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{8A7B24E8-864E-4794-95C4-17644D0991AA}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{A7C403DA-B8D9-4CA0-93D9-6C7F00772240}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{ba99df5b-3e46-419e-81e2-544352772fda}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows 7 Codec Pack 4.0.3 (HKLM-x32\...\Windows 7 - Codec Pack) (Version: 4.0.3 - Windows 7 Codec Pack)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Within A Deep Forest (HKLM-x32\...\{736D1B73-18AC-4F51-B544-44FD149B7E0B}) (Version: 1.00.0000 - Within A Deep Forest)
Wrye Bash (HKLM-x32\...\Wrye Bash) (Version: 0.3.0.0 - Wrye & Wrye Bash Development Team)
Yahoo! Detect (HKLM-x32\...\YTdetect) (Version: - )
Ys Origin (HKLM-x32\...\Steam App 207350) (Version: - Nihon Falcom)
この大空に、翼をひろげて FLIGHT DIARY (HKU\S-1-5-21-2001810455-1053792824-432003306-1000\...\{0A3E9ABF-9365-4B44-BA12-1D156EFD9545}) (Version: 1.00.0000 - WILLPLUS)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2001810455-1053792824-432003306-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll (Dropbox, Inc.)
==================== Restore Points =========================
05-03-2015 15:08:31 Installed Pokémon Uranium Beta 4.0
07-03-2015 16:22:51 Malwarebytes Anti-Rootkit Restore Point
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2013-04-23 17:49 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0FF3526E-7BC5-4A2F-B424-DCC1819F75B3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-01] (Google Inc.)
Task: {340EA12A-A4AF-45E2-9D23-3554F496B259} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {5553F440-47E7-4C06-82E2-8755F07245BA} - System32\Tasks\EPSON XP-215 217 Series Update {5B557CE1-4321-4890-B411-4403944F2B02} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2012-11-18] (SEIKO EPSON CORPORATION)
Task: {677F7100-32DA-4F87-987B-13C21A2300DA} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {7CDA93DC-15A4-4BA0-A864-6422D9DE69BD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {AF91DF1E-B4F3-472F-81CE-E5E5702529DB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-01] (Google Inc.)
Task: {CDE5011A-3CF9-4CD7-AF06-FC2B5313157A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06] (Adobe Systems Incorporated)
Task: {D3CD0EDC-F146-4564-A92A-956BC3124E83} - System32\Tasks\EPSON XP-215 217 Series Invitation {5B557CE1-4321-4890-B411-4403944F2B02} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2012-11-18] (SEIKO EPSON CORPORATION)
Task: {D6D7E0C3-779A-4CB7-918F-27FEF2B127C3} - System32\Tasks\{61926E15-433F-4291-AA68-E9A9642D8C27} => pcalua.exe -a C:\Users\Christoph\Downloads\epson327370eu.exe -d C:\Users\Christoph\Downloads
Task: {F9DD4BA9-3FED-4223-A55C-F37EF6523CB9} - System32\Tasks\{8040A18B-8B02-4CE0-91F6-7350FB42E01F} => pcalua.exe -a F:\.\MESIAMLT.exe -d F:\
Task: {FE192D8F-9029-4D2B-ADCE-DC756BB1972F} - System32\Tasks\EPSON XP-215 217 Series Invitation {C08A5572-83AC-495D-AFED-1683BC8FEAD1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2012-11-18] (SEIKO EPSON CORPORATION)
Task: {FE3ED63B-3F14-4A1A-A737-9B902B196F7B} - System32\Tasks\EPSON XP-215 217 Series Update {C08A5572-83AC-495D-AFED-1683BC8FEAD1} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE [2012-11-18] (SEIKO EPSON CORPORATION)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {5B557CE1-4321-4890-B411-4403944F2B02}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {C08A5572-83AC-495D-AFED-1683BC8FEAD1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {5B557CE1-4321-4890-B411-4403944F2B02}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{5B557CE1-4321-4890-B411-4403944F2B02} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {C08A5572-83AC-495D-AFED-1683BC8FEAD1}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLGE.EXE:/EXE:{C08A5572-83AC-495D-AFED-1683BC8FEAD1} /F:UpdateSYSTEM
Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Loaded Modules (whitelisted) ==============
2014-06-16 15:51 - 2013-03-15 05:16 - 00086304 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-07-30 11:59 - 2012-02-21 11:29 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2013-12-06 07:07 - 2013-12-06 07:07 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-20 02:38 - 2014-05-20 02:38 - 00340088 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2012-01-10 13:41 - 2013-09-03 13:32 - 00567880 _____ () C:\Program Files (x86)\puush\puush.exe
2012-08-16 04:11 - 2012-08-16 04:11 - 03333632 _____ () C:\Program Files (x86)\MOUSE Editor\MouseEditor.exe
2014-04-07 01:24 - 2014-03-07 21:39 - 03168576 _____ () C:\Users\Christoph\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
2012-09-02 13:08 - 2012-09-02 13:08 - 00041160 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2012-09-02 13:08 - 2012-09-02 13:08 - 00734408 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2010-12-02 10:56 - 2010-12-02 10:56 - 00815104 _____ () C:\Program Files (x86)\MOUSE Editor\Data\MouseEditor\Forms\OSD_Text\OSD_Text.dll
2011-01-09 13:45 - 2011-01-09 13:45 - 00088064 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_MouseDeviceManager.dll
2012-06-14 08:59 - 2012-06-14 08:59 - 02414080 _____ () C:\Program Files (x86)\MOUSE Editor\Data\MouseEditor\Forms\ScreenCapture\ScreenCapture.dll
2012-05-17 04:17 - 2012-05-17 04:17 - 01000448 _____ () C:\Program Files (x86)\MOUSE Editor\Data\MouseEditor\Forms\TrayIconWebAdvertisement\TrayIconWebAdvertisement.dll
2010-09-20 07:18 - 2010-09-20 07:18 - 00085504 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_ZoomControl.dll
2010-09-20 07:18 - 2010-09-20 07:18 - 00054272 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_ScrollbarControl.dll
2011-04-12 08:14 - 2011-04-12 08:14 - 00063488 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_AnalyzeGesturesInRight.dll
2010-11-01 13:16 - 2010-11-01 13:16 - 00062976 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_AnalyzeGesturesInOne.dll
2012-04-27 04:40 - 2012-04-27 04:40 - 00118272 _____ () C:\Program Files (x86)\MOUSE Editor\DLL\DLL_Wheel4D.dll
2012-07-30 11:59 - 2012-02-21 11:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Christoph\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2001810455-1053792824-432003306-1004\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg
DNS Servers: 8.8.8.8
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-2001810455-1053792824-432003306-500 - Administrator - Enabled) => C:\Users\Administrator
Christoph (S-1-5-21-2001810455-1053792824-432003306-1000 - Administrator - Enabled) => C:\Users\Christoph
Gast (S-1-5-21-2001810455-1053792824-432003306-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2001810455-1053792824-432003306-1003 - Limited - Enabled)
UpdatusUser (S-1-5-21-2001810455-1053792824-432003306-1004 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/07/2015 05:32:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (03/07/2015 05:29:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)
Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten.
System errors:
=============
Microsoft Office Sessions:
=========================
Error: (03/07/2015 05:32:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Christoph\Downloads\esetsmartinstaller_enu.exe
Error: (03/07/2015 05:29:44 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3001) (User: NT-AUTORITÄT)
Description: 16000000005481010055810100600B0000
CodeIntegrity Errors:
===================================
Date: 2015-03-02 18:55:08.107
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 18:55:07.951
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:51:49.722
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:51:49.644
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:46:40.866
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:46:40.788
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:20:40.180
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 16:20:40.102
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 15:52:28.416
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2015-03-02 15:52:28.275
Description: Windows konnte die Abbildintegritat der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\igdkmd64.sys" nicht uberprufen, weil der Dateihash nicht im System gefunden wurde. Moglicherweise wurde durch eine kurzlich durchgefuhrte Hardware- oder Softwareanderung eine falsch signierte oder beschadigte Datei oder eine Datei, bei der es sich um schadliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
Percentage of memory in use: 18%
Total physical RAM: 16270.92 MB
Available physical RAM: 13335.84 MB
Total Pagefile: 32540.02 MB
Available Pagefile: 29436.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:160 GB) (Free:13.61 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:771.51 GB) (Free:81.81 GB) NTFS
Drive f: (My Passport) (Fixed) (Total:931.48 GB) (Free:315.75 GB) NTFS
Drive g: (pm-stein) (CDROM) (Total:2.28 GB) (Free:0 GB) CDFS
Drive i: (DRIVE-N-GO) (Fixed) (Total:931.51 GB) (Free:520.57 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: DE2CC6FD)
Partition 1: (Active) - (Size=160 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=771.5 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: CA52B9B9)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 7D8067A8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
07.03.2015, 22:56
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Andauernd USB-Ton und Fehlercode 43 FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\S-1-5-21-2001810455-1053792824-432003306-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2001810455-1053792824-432003306-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
EmptyTemp:
Hosts:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.03.2015, 00:09
| #9 |
| | Andauernd USB-Ton und Fehlercode 43 Ich konnte bei Gdata nur die einzelnen Komponenten abschalten (Firewall, Webschutz, Echtzeitschutz etc.) komplett ausstellen war nicht möglich. Fixlog: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-03-2015 01
Ran by Christoph at 2015-03-07 23:53:07 Run:1
Running from C:\Users\Christoph\Desktop
Loaded Profiles: Christoph & UpdatusUser (Available profiles: Christoph & UpdatusUser & Administrator)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2001810455-1053792824-432003306-1004\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
EmptyTemp:
Hosts:
*****************
"HKU\S-1-5-21-2001810455-1053792824-432003306-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value deleted successfully.
HKU\S-1-5-21-2001810455-1053792824-432003306-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-2001810455-1053792824-432003306-1004\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 3.1 GB temporary data.
The system needed a reboot.
==== End of Fixlog 23:54:16 ====
|
|
08.03.2015, 00:45
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Andauernd USB-Ton und Fehlercode 43 [gelöst] Okay, dann Kontrollscans mit MBAM und ESET bitte: Downloade Dir bitte  Malwarebytes Anti-Malware
ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.03.2015, 23:17
| #11 |
| | Andauernd USB-Ton und Fehlercode 43 [gelöst] Suchlauf hat ein bisschen gedauert, gab auch wieder einige Blackscreens als ich den PC starten wollte. Hier nun die Logs mbam.txt Code:
ATTFilter Malware Schutz: Deaktiviert
Bosartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Christoph
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 464743
Verstrichene Zeit: 9 Min, 38 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(Keine schadliche Elemente erkannt)
Module: 0
(Keine schadliche Elemente erkannt)
Registrierungsschlussel: 1
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-2001810455-1053792824-432003306-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantane, [6ca831128bff979feee03b6947bcff01],
Registrierungswerte: 2
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-2001810455-1053792824-432003306-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}|TopResultURLFallback, hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_15_ff&cd=2XzuyEtN2Y1L1Qzu0B0CyD0F0FyEtAyC0B0A0BtC0A0Azz0BtN0D0Tzu0SzztAtBtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEtAzzyCzzzztA0EtG0D0B0BzytG0FtD0F0DtG0DyEyByDtGyEtAyDtA0EyByDyE0FyDtB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCtCyC0ByDyD0BtGyEyD0BtBtGtBtDtBtCtGzz0C0C0CtGyCtCtCyCzy0BtBtC0FyDtDyE2Q&cr=1745046569&ir=, In Quarantane, [6ca831128bff979feee03b6947bcff01]
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-2001810455-1053792824-432003306-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Mysearchdial, In Quarantane, [59bba89b820887af27a7aafaf80b1fe1]
Registrierungsdaten: 0
(Keine schadliche Elemente erkannt)
Ordner: 0
(Keine schadliche Elemente erkannt)
Dateien: 0
(Keine schadliche Elemente erkannt)
Physische Sektoren: 0
(Keine schadliche Elemente erkannt)
(end)
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=5a7356f44c13d14f9cc98ec6d2bae79b
# engine=22809
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-08 07:40:39
# local_time=2015-03-08 08:40:39 (+0100, Mitteleurop臺sche Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 101256 177473489 0 0
# scanned=401785
# found=26
# cleaned=0
# scan_time=13729
sh=D77F42CDA1D34E5E6555924F66AE2268DD1A1805 ft=1 fh=ea8a85954c3201c0 vn="Win64/Toolbar.Widgi.D evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Browser Extensions\Button64.exe.vir"
sh=FA5184AA87272C99FBF2C75A30D79EAD7B6D981D ft=1 fh=228503d460a4529c vn="Win64/Toolbar.Widgi.D evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Browser Extensions\ButtonWrap64.dll.vir"
sh=93987296EE19D5984CBAAEDA15EDC2F40E4BDA59 ft=1 fh=925ca12a43f88dfc vn="Variante von Win64/Toolbar.Widgi.D evtl. unerwunschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Browser Extensions\Coupons64.dll.vir"
sh=A358970E2D28B923203D0AD0BDA2AD8559925E45 ft=0 fh=0000000000000000 vn="JS/Adware.Spigot.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Browser Extensions\coupons_3.3.xpi.vir"
sh=A4789C4DF004E3CC3A75322399BEBA9E21BC5980 ft=0 fh=0000000000000000 vn="JS/Adware.Spigot.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Browser Extensions\saamazon_1.8.xpi.vir"
sh=950C6750EAF8A2FF5755CE5E5DCEA23DFB55B84F ft=0 fh=0000000000000000 vn="JS/Adware.Spigot.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Browser Extensions\saebay_1.8.xpi.vir"
sh=B29413922D225A2273610FAA33B03605B70AB3DE ft=0 fh=0000000000000000 vn="JS/Adware.Spigot.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{46eddf51-a4f6-4476-8d6c-31c5187b2a2f}\chrome\content\spigot.js.vir"
sh=C0F79BFB907FD7BAAA1563BC04852133238AA035 ft=0 fh=0000000000000000 vn="JS/Adware.Spigot.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{84a93d51-b7a9-431e-8ff8-d60e5d7f5df1}\chrome\content\spigot.js.vir"
sh=28158D403F833BD5B12E3E41B7E81FC6292AD120 ft=0 fh=0000000000000000 vn="JS/Adware.Spigot.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\tclm7k0f.default\Extensions\{f894a29a-f065-40c3-bb19-da6057778493}\chrome\content\spigot.js.vir"
sh=83561345B99EFA08ED5BD0C388CFE91BCD356030 ft=1 fh=88c1e1bcf2b13739 vn="Variante von Win32/DownloadSponsor.C evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Christoph\Downloads\AdwCleaner - CHIP-Downloader.exe"
sh=67854683ADA1990673F25489841CBF25B9138029 ft=1 fh=666e47d43795656c vn="Variante von Win32/DownloadSponsor.C evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Christoph\Downloads\All in One Runtimes - CHIP-Installer.exe"
sh=4370E4F60FB96627C6AD4F4820A4FA8A61F8EC29 ft=1 fh=3b60eb1472d7e959 vn="Variante von Win32/CNETInstaller.B evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Christoph\Downloads\cbsidlm-cbsi213-KLite_Codec_Pack_Full-ORG-64246.exe"
sh=E8CD33623287C08C7CC3662A042E45522654BB30 ft=1 fh=7cd3b160b0dbd4bd vn="Win32/Toolbar.Conduit evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Christoph\Downloads\FreeYouTubeToMP3Converter.exe"
sh=709D0B68EBAA79E2909ADA8D39B7A0005BA4313D ft=1 fh=e602743e8780b8c5 vn="Win32/DownWare.W evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Christoph\Downloads\Logon_Screen_2.56.exe"
sh=90CBB2C74263CFBD7608953698E6F5D383705F62 ft=1 fh=1203414960ca13e0 vn="Variante von Win32/DownloadSponsor.C evtl. unerwunschte Anwendung" ac=I fn="C:\Users\Christoph\Downloads\Pinup_Poser_150 - CHIP-Installer.exe"
sh=4AB903184DACDD93F8445CA3E4748D3A89618037 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Themida evtl. unerwunschte Anwendung" ac=I fn="D:\Christoph\Dateien\Shuffle!\Shuffle!_-_ANIME-SHARING.COM.part1.rar"
sh=4F82A7C5F1E3511EC691034367E495069AB483C1 ft=1 fh=df96cfa22e593717 vn="Variante von Win32/Packed.Themida evtl. unerwunschte Anwendung" ac=I fn="D:\Christoph\Dateien\Shuffle!\Shuffle!\BGI.exe"
sh=99C21D41CB60D860DE981C7B9771446059C019EB ft=0 fh=0000000000000000 vn="Variante von Win32/MessengerPlus.A evtl. unerwunschte Anwendung" ac=I fn="D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated.rar"
sh=E77828791C6B814E74B663CFE196512DA2487219 ft=0 fh=0000000000000000 vn="Variante von Win32/MessengerPlus.A evtl. unerwunschte Anwendung" ac=I fn="D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated\mod\Spirits\Messenger Plus! Live 5.00.702.zip"
sh=708D0E6816F8B8CD709CF7D1CD2EAAC67FEE5EAD ft=1 fh=441ef35990086bba vn="Variante von Win32/MessengerPlus.A evtl. unerwunschte Anwendung" ac=I fn="D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated\mod\Spirits\Setup-MsgPlus-511.exe"
sh=8A72F448F17C026A1B2A59686DE720079CCBA08F ft=1 fh=4d4a711952b3453e vn="Win32/DownWare.L evtl. unerwunschte Anwendung" ac=I fn="D:\Christoph\Videos\VN\[Fuwanovel] Ikinari Anata ni Koishiteiru\DTLite4481-0347.exe"
sh=5356B12A8240625D0015BAC194269B8211EEC15D ft=0 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C evtl. unerwunschte Anwendung" ac=I fn="D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 16.zip"
sh=2517B60F5E150357A7EC52E2FE0ED0580951D2D8 ft=0 fh=0000000000000000 vn="Variante von Win32/CNETInstaller.B evtl. unerwunschte Anwendung" ac=I fn="D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 17.zip"
sh=260E34F7B0B013AA35F5938DF25DF0BA70032E7D ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwunschte Anwendung" ac=I fn="D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 18.zip"
sh=89C976F46E17A6D839577976827484168317DAC2 ft=0 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C evtl. unerwunschte Anwendung" ac=I fn="D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 19.zip"
sh=47BEC7EB1BE904CF2AC3827EF51389C760550C2E ft=0 fh=0000000000000000 vn="JS/Adware.Spigot.A Anwendung" ac=I fn="D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 9.zip"
|
|
09.03.2015, 10:59
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Andauernd USB-Ton und Fehlercode 43 [gelöst] FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\Christoph\Downloads\AdwCleaner - CHIP-Downloader.exe
C:\Users\Christoph\Downloads\All in One Runtimes - CHIP-Installer.exe
C:\Users\Christoph\Downloads\cbsidlm-cbsi213-KLite_Codec_Pack_Full-ORG-64246.exe
C:\Users\Christoph\Downloads\FreeYouTubeToMP3Converter.exe
C:\Users\Christoph\Downloads\Logon_Screen_2.56.exe
C:\Users\Christoph\Downloads\Pinup_Poser_150 - CHIP-Installer.exe
D:\Christoph\Dateien\Shuffle!\Shuffle!_-_ANIME-SHARING.COM.part1.rar
D:\Christoph\Dateien\Shuffle!\Shuffle!\BGI.exe
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated.rar
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated\mod\Spirits\Messenger Plus! Live 5.00.702.zip
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated\mod\Spirits\Setup-MsgPlus-511.exe
D:\Christoph\Videos\VN\[Fuwanovel] Ikinari Anata ni Koishiteiru\DTLite4481-0347.exe
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 16.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 17.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 18.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 19.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 9.zip
EmptyTemp:
Hosts:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
09.03.2015, 14:46
| #13 |
| | Andauernd USB-Ton und Fehlercode 43 [gelöst] Hier der Log Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-03-2015 01
Ran by Christoph at 2015-03-09 14:38:59 Run:2
Running from C:\Users\Christoph\Desktop\frst
Loaded Profiles: Christoph & UpdatusUser (Available profiles: Christoph & UpdatusUser & Administrator)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Users\Christoph\Downloads\AdwCleaner - CHIP-Downloader.exe
C:\Users\Christoph\Downloads\All in One Runtimes - CHIP-Installer.exe
C:\Users\Christoph\Downloads\cbsidlm-cbsi213-KLite_Codec_Pack_Full-ORG-64246.exe
C:\Users\Christoph\Downloads\FreeYouTubeToMP3Converter.exe
C:\Users\Christoph\Downloads\Logon_Screen_2.56.exe
C:\Users\Christoph\Downloads\Pinup_Poser_150 - CHIP-Installer.exe
D:\Christoph\Dateien\Shuffle!\Shuffle!_-_ANIME-SHARING.COM.part1.rar
D:\Christoph\Dateien\Shuffle!\Shuffle!\BGI.exe
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated.rar
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated\mod\Spirits\Messenger Plus! Live 5.00.702.zip
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated\mod\Spirits\Setup-MsgPlus-511.exe
D:\Christoph\Videos\VN\[Fuwanovel] Ikinari Anata ni Koishiteiru\DTLite4481-0347.exe
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 16.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 17.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 18.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 19.zip
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 9.zip
EmptyTemp:
Hosts:
*****************
C:\Users\Christoph\Downloads\AdwCleaner - CHIP-Downloader.exe => Moved successfully.
C:\Users\Christoph\Downloads\All in One Runtimes - CHIP-Installer.exe => Moved successfully.
C:\Users\Christoph\Downloads\cbsidlm-cbsi213-KLite_Codec_Pack_Full-ORG-64246.exe => Moved successfully.
C:\Users\Christoph\Downloads\FreeYouTubeToMP3Converter.exe => Moved successfully.
C:\Users\Christoph\Downloads\Logon_Screen_2.56.exe => Moved successfully.
C:\Users\Christoph\Downloads\Pinup_Poser_150 - CHIP-Installer.exe => Moved successfully.
D:\Christoph\Dateien\Shuffle!\Shuffle!_-_ANIME-SHARING.COM.part1.rar => Moved successfully.
D:\Christoph\Dateien\Shuffle!\Shuffle!\BGI.exe => Moved successfully.
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated.rar => Moved successfully.
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated\mod\Spirits\Messenger Plus! Live 5.00.702.zip => Moved successfully.
D:\Christoph\Videos\VN\Monster Girl Quest\MGQ Parts 1-3 100% Translated\mod\Spirits\Setup-MsgPlus-511.exe => Moved successfully.
D:\Christoph\Videos\VN\[Fuwanovel] Ikinari Anata ni Koishiteiru\DTLite4481-0347.exe => Moved successfully.
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 16.zip => Moved successfully.
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 17.zip => Moved successfully.
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 18.zip => Moved successfully.
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 19.zip => Moved successfully.
D:\CHRISTOPH-PC\Backup Set 2014-10-05 190000\Backup Files 2014-10-05 190000\Backup files 9.zip => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 160.7 MB temporary data.
The system needed a reboot.
==== End of Fixlog 14:40:16 ====
|
|
09.03.2015, 15:53
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Andauernd USB-Ton und Fehlercode 43 [gelöst] Sieht soweit ok aus  Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) empfehle ich die Erweiterung Ghostery, diese verhindert weitgehend Usertracking bzw. das Anzeigen von Werbebannern. Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie ) Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird. Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
09.03.2015, 19:09
| #15 |
| | Andauernd USB-Ton und Fehlercode 43 [gelöst] Danke für die Hilfe USB Fehler ist heute noch einmal aufgetreten, ansonsten die letzten Tage nicht mehr, das Problem mit dem Blackscreen liegt anscheinend an dem Intel HD Graphics 4000 Treiber, habe diesen heute noch einmal geupdatet, danach kam nochmal ein Blackscreen mit folgendem Fehler. Soweit läuft aber alles. Code:
ATTFilter Problemsignatur:
Problemereignisname: BlueScreen
Betriebsystemversion: 6.1.7601.2.1.0.768.3
Gebietsschema-ID: 1031
Zusatzinformationen zum Problem:
BCCode: 116
BCP1: FFFFFA800CC5F010
BCP2: FFFFF88007BBF6AC
BCP3: FFFFFFFFC000009A
BCP4: 0000000000000004
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1
Dateien, die bei der Beschreibung des Problems hilfreich sind:
C:\Windows\Minidump\030915-33945-01.dmp
C:\Users\Christoph\AppData\Local\Temp\WER-98857-0.sysdata.xml
Lesen Sie unsere Datenschutzbestimmungen online:
hxxp://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0407
Wenn die Onlinedatenschutzbestimmungen nicht verfugbar sind, lesen Sie unsere Datenschutzbestimmungen offline:
C:\Windows\system32\de-DE\erofflps.txt
|
|
| Themen zu Andauernd USB-Ton und Fehlercode 43 |
| antivirus, avira, browser, computer, defender, fehler, festplatte, firefox, gdata, google, home, infizierte, internet, maus, mozilla, prozesse, prüfen, scan, sekunden, software, tastatur, temp, usb, virus, warum, windows |
Linear-Darstellung
