![]() |
|
Log-Analyse und Auswertung: Windows 7x64: Norton Security Fehler 8504,101Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() | ![]() Windows 7x64: Norton Security Fehler 8504,101 Hallo ! Vor kurzem hat Schrauber mir bei einem BSOD Problem bei diesem Rechner geholfen (http://www.trojaner-board.de/163919-...dsskiller.html). Jetzt brauche ich leider schon wieder Hilfe. Bereits vor der ersten Systemüberprüfung hatte ich schon zweimal das Problem, das NS plötzlich nicht mehr lief (ich habe es erst bermerkt, nachdem die Windows Firewall sich mit einem Popup meldete, die ja eigentlich gar nicht laufen dürfte). Ich habe dann NS erneut gestartet und NS AutoFix konnte auch nicht helfen und verwies auf eine Supportseit mit der Fehlermeldung: ![]() Ich habe dann (wie empfohlen) Norton Power Eraser laufen lassen... ![]() ![]() Die gefunden Dateien halte ich für unverdächtig, und die meisten habe ich mit VirusTotal geprüft. Immer nur ein positiver Befund, meist durch Symantec. Ich habe jetzt NS neu installiert. Aber auch aufgrund des Hinweises auf der Norton Seite glaube ich es könnte ein Virus im Spiel sein. Ich bitte daher nochmal um Hilfe! FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-03-2015 Ran by Holger (administrator) on HOLGER-QUADCORE on 03-03-2015 19:55:04 Running from C:\Users\Holger\Desktop Loaded Profiles: Holger (Available profiles: Holger & Administrator) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Sandboxie Holdings, LLC) G:\Program Files\Sandboxie\SbieSvc.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe (CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe (CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe () G:\Program Files (x86)\GNU\GnuPG\dirmngr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) G:\Program Files (x86)\StarMoney9.0\ouservice\StarMoneyOnlineUpdate.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\pg_ctl.exe (UltraVNC) G:\Program Files\UltraVNC\winvnc.exe (VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe () G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\syncthru6.exe () G:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe (Sun Microsystems, Inc.) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\Tools\jre1.6.0_30\bin\java.exe (VMware, Inc.) G:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe (UltraVNC) G:\Program Files\UltraVNC\winvnc.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe () C:\Windows\SysWOW64\UMonit.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe (Deutsche Post AG) G:\Program Files (x86)\STAMPIT\Binary\STRAY.EXE (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe (Sandboxie Holdings, LLC) G:\Program Files\Sandboxie\SbieCtrl.exe (Flexera Software, Inc.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe () G:\Program Files (x86)\applord GmbH\ecoDMS - Client\ecodmssinglesignon.exe () G:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe (Acronis) G:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boincmgr.exe (Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boinctray.exe (VMware, Inc.) G:\Program Files (x86)\VMware\VMware Player\hqtray.exe (CyberLink) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe (CyberLink Corp.) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\PowerDVD12Agent.exe (Elaborate Bytes AG) G:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Space Sciences Laboratory) G:\Program Files (x86)\BOINC\boinc.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Piriform Ltd) G:\Program Files (x86)\CCleaner\CCleaner64.exe (CyberLink Corp.) G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe (BitLeader) G:\Program Files (x86)\lg_fwupdate\fwupdate.exe (Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe (Symantec Corporation) C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe () G:\Program Files\Core Temp\Core Temp.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe (PostgreSQL Global Development Group) G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\postgres.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [391296 2010-09-08] (Acronis) HKLM\...\Run: [UMonit] => C:\Windows\SysWOW64\UMonit.exe [200704 2006-12-29] () HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13774040 2015-02-15] (Realtek Semiconductor) HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] () HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-02-05] (NVIDIA Corporation) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] () HKLM-x32\...\Run: [TrueImageMonitor.exe] => G:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5514296 2010-09-08] (Acronis) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [boincmgr] => G:\Program Files (x86)\BOINC\boincmgr.exe [4793088 2009-11-06] (Space Sciences Laboratory) HKLM-x32\...\Run: [boinctray] => G:\Program Files (x86)\BOINC\boinctray.exe [58112 2009-11-06] (Space Sciences Laboratory) HKLM-x32\...\Run: [LGODDFU] => G:\Program Files (x86)\lg_fwupdate\lgfw.exe [27760 2012-08-11] (Bitleader) HKLM-x32\...\Run: [VMware hqtray] => G:\Program Files (x86)\VMware\VMware Player\hqtray.exe [64112 2010-11-11] (VMware, Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-02-13] (Apple Inc.) HKLM-x32\...\Run: [PowerDVD12DMREngine] => G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe [505872 2012-09-19] (CyberLink) HKLM-x32\...\Run: [PowerDVD12Agent] => G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\PowerDVD12Agent.exe [374560 2012-09-19] (CyberLink Corp.) HKLM-x32\...\Run: [VirtualCloneDrive] => G:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG) HKLM-x32\...\Run: [OmniPage Preload] => G:\Program Files (x86)\Nuance\OmniPage18\OmniPage18.exe [2987880 2011-07-28] (Nuance Communications, Inc.) HKLM-x32\...\Run: [Nuance OmniPage 18-reminder] => G:\Program Files (x86)\Nuance\OmniPage18\Ereg\Ereg.exe [333088 2011-05-16] (Nuance Communications, Inc.) HKLM-x32\...\Run: [KeePass 2 PreLoad] => G:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2109952 2014-10-07] (Dominik Reichl) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [] => [X] Winlogon\Notify\ScCertProp: wlnotify.dll [X] HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [163328 2010-11-20] (Microsoft Corporation) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [STAMPIT-Tray] => G:\Program Files (x86)\STAMPIT\Binary\Stray.exe [83336 2010-06-11] (Deutsche Post AG) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2011-06-20] (Hewlett-Packard Company) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [SandboxieControl] => G:\Program Files\Sandboxie\SbieCtrl.exe [785416 2015-02-18] (Sandboxie Holdings, LLC) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Konni Symbol Autostart] => [X] HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [Personal ID] => G:\coolspot AG\Personal ID\pid.exe [1134008 2009-03-04] (coolspot AG, Düsseldorf) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [OpAgent] => "OpAgent.exe" /agent HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [324976 2010-05-21] (Flexera Software, Inc.) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [ecoprint] => G:\Program Files (x86)\applord GmbH\ecoDMS - Client\runcon.bat [95 2013-12-21] () HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [CCleaner Monitoring] => G:\Program Files (x86)\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\Run: [FileHippo.com] => G:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe [2926800 2015-01-27] () HKU\S-1-5-21-2149552335-4145356072-959976354-1000\...\MountPoints2: {b0c0aea2-36ae-11df-b355-806e6f6e6963} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL I:\ubcd\website\index.html HKU\S-1-5-21-2149552335-4145356072-959976354-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-20] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Network PC Fax.lnk ShortcutTarget: Samsung Network PC Fax.lnk -> C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe (Samsung Electronics Co., Ltd.) Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Core Temp (2).lnk ShortcutTarget: Core Temp (2).lnk -> G:\Program Files\Core Temp\Core Temp.exe () Startup: C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-2149552335-4145356072-959976354-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> {47F43F50-68E2-4F28-B949-26EE0EC9C505} URL = hxxp://www.buyertools.net/cgi-bin/preispiraten_de/nph.fcgi?qry_str={searchTerms}&category=deutsch&how=and&searchtype=simple&Web=on&wiki_tab=on&wiki_tab_old=+CHECKED&ebay_tab=on&ebay_tab_old=+CHECKED&shoppingcom_tab=on&shoppingcom_tab_old=+CHECKED&pirat_tab=on&pirat_tab_old=+CHECKED&JavaScript=enabled&submit=SUCHEN SearchScopes: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> {65C238F8-3FA6-4AEC-914D-8CD376F70CC6} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms} BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> G:\Program Files (x86)\SnagIT\DLLx64\SnagitBHO64.dll (TechSmith Corporation) BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security\Engine64\22.1.0.9\coIEPlg.dll (Symantec Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> G:\Program Files (x86)\SnagIT\SnagitBHO.dll (TechSmith Corporation) BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coIEPlg.dll (Symantec Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) BHO-x32: Preispiraten -> {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} -> G:\Program Files (x86)\Preispiraten6\IEButtonPPInterface.dll () Toolbar: HKLM - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - G:\Program Files (x86)\SnagIT\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine64\22.1.0.9\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH) Toolbar: HKLM-x32 - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - G:\Program Files (x86)\SnagIT\SnagitIEAddin.dll (TechSmith Corporation) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\coIEPlg.dll (Symantec Corporation) Toolbar: HKU\S-1-5-21-2149552335-4145356072-959976354-1000 -> No Name - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No File DPF: HKLM-x32 {62415890-4985-0825-2508-23487C2A845F} hxxp://192.168.178.130/en/cab/ipcamera.cab DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\..\Interfaces\{5F13DFFA-CEB5-450C-8AC0-7FB7FA277C11}: [NameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o FF Homepage: about:home FF NetworkProxy: "socks_remote_dns", true FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File FF Plugin: synology.com/SurveillancePlugin_x86_64 -> C:\Program Files (x86)\Synology\SurveillancePlugin\1.0.0.565\npSurveillancePlugin_x86_64.dll (Synology) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @qnap.com/MonitorPlayer -> C:\Program Files (x86)\QNAP\VioStorMonitor\npMonHost.dll ( QNAP System, Inc) FF Plugin-x32: @videolan.org/vlc,version=0.9.9 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: synology.com/SurveillancePlugin -> C:\Program Files (x86)\Synology\SurveillancePlugin\1.0.0.565\npSurveillancePlugin.dll (Synology) FF Plugin HKU\S-1-5-21-2149552335-4145356072-959976354-1000: @hola.org/vlc,version=1.6.732 -> C:\Users\Holger\AppData\Local\Hola\firefox\app\vlc () FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\searchplugins\firefox-add-ons.xml FF SearchPlugin: C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\searchplugins\ixquick-https.xml FF Extension: German Dictionary - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\de-DE@dictionaries.addons.mozilla.org [2014-06-08] FF Extension: FoxyProxy Standard - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\foxyproxy@eric.h.jung [2015-02-06] FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\iobitascsurfingprotection@iobit.com [2015-02-15] FF Extension: Hola Better Internet - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\jid1-4P0kohSJxU1qGg@jetpack [2015-03-02] FF Extension: KeeFox - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\keefox@chris.tomlinson [2015-01-17] FF Extension: npIpcam - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\npapi@n.com [2013-07-01] FF Extension: Flashblock - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-12-12] FF Extension: Buyertools - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{411F2F11-830F-4AB5-B7F0-FBC77B870B5A} [2012-03-07] FF Extension: WOT - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-12-03] FF Extension: Preispiraten4 - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{A86278FF-6B63-446C-B109-DD4E1BAAC868} [2010-01-24] FF Extension: Biet-O-Matic Firefox Erweiterung - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{B0D70E72-2FC1-4b9f-A3D4-5921C854D906} [2010-03-07] FF Extension: Preispiraten 4 Kontextmenü - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{D2A8BC29-8CA3-4C0A-A206-631C44E9620F} [2009-12-08] FF Extension: PassIFox - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\passifox@hanhuy.com.xpi [2014-08-17] FF Extension: TrashMail.com - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\spam@trashmail.net.xpi [2011-03-27] FF Extension: Password Exporter - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi [2014-08-17] FF Extension: Adblock Plus - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-03-27] FF Extension: DownThemAll! - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-17] FF Extension: QuickJava - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2015-02-07] FF Extension: MyKey Interface - C:\Users\Holger\AppData\Roaming\Mozilla\Firefox\Profiles\default.e2o\Extensions\{FACC66B7-E49F-49ed-997E-66A221FD956D}.xpi [2011-04-01] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{2E6861CA-9A88-4B7B-B935-F810DE84D259} [2015-02-25] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{3F4D6A2C-841D-403C-8CD8-48E54192DDEB} [2015-02-25] FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-02] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.1.0.9\coFFPlgn FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.1.0.9\coFFPlgn [2015-03-03] Chrome: ======= CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\Exts\Chrome.crx [2015-03-03] CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\Exts\Chrome.crx [2015-03-03] CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.) R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [506288 2011-02-08] (REINER SCT) R2 CLHNServiceForPowerDVD12; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe [90640 2012-09-19] (CyberLink Corp.) R2 CyberLink PowerDVD 12 Media Server Monitor Service; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [78352 2012-09-19] (CyberLink) R2 CyberLink PowerDVD 12 Media Server Service; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [295440 2012-09-19] (CyberLink) R2 DirMngr; G:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [218112 2013-10-07] () [File not signed] R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2015-02-05] (NVIDIA Corporation) R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2015-02-07] (SurfRight B.V.) R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-06-20] (Hewlett-Packard Company) [File not signed] S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2724128 2015-01-16] (IObit) R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software) R2 NS; C:\Program Files (x86)\Norton Security\Engine\22.1.0.9\NS.exe [282528 2014-12-10] (Symantec Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-02-05] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-02-05] (NVIDIA Corporation) R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [508464 2013-07-01] (Samsung Electronics Co., Ltd.) S3 SandraAgentSrv; G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe [68760 2008-09-05] (SiSoftware) [File not signed] R2 SbieSvc; G:\Program Files\Sandboxie\SbieSvc.exe [175112 2015-02-18] (Sandboxie Holdings, LLC) R2 StarMoney 9.0 OnlineUpdate; G:\Program Files (x86)\StarMoney9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH) R2 SyncThru Admin 6; G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\syncthru6.exe [204800 2013-05-03] () [File not signed] R2 SyncThru Admin 6 Database; G:\Program Files (x86)\Samsung Network Printer Utilities\SyncThru Admin 6\UniThruTargetPlatform\PostgreSQL\engine\bin\pg_ctl.exe [66048 2012-08-31] (PostgreSQL Global Development Group) [File not signed] R2 SynoDrService; G:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [404480 2010-03-24] () [File not signed] S3 ufad-ws60; G:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe [191024 2010-08-19] (VMware, Inc.) R2 uvnc_service; G:\Program Files\UltraVNC\WinVNC.exe [1793976 2009-12-07] (UltraVNC) R2 VMAuthdService; G:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe [113264 2010-11-11] (VMware, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AVXBAR; C:\Windows\System32\DRIVERS\88xAXbar.sys [20544 2009-11-05] (DTV-DVB Technology, Inc.) R3 BDATUNE; C:\Windows\System32\DRIVERS\88xBdaTune.sys [60096 2009-11-05] (DTV-DVB Technology, Inc.) R1 BHDrvx64; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\BASHDefs\20150224.001\BHDrvx64.sys [1622744 2015-02-24] (Symantec Corporation) R1 ccSet_NS; C:\Windows\system32\drivers\NSx64\1601000.009\ccSetx64.sys [165080 2014-09-09] (Symantec Corporation) R3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT) S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2009-12-18] () R3 CX23880; C:\Windows\System32\DRIVERS\88xAStream.sys [200896 2009-11-05] (DTV-DVB Technology, Inc.) R3 CX88IR; C:\Windows\System32\DRIVERS\88xBdaIr.sys [28224 2009-11-05] (DTV-DVB Technology, Inc.) R3 CXAVSTS; C:\Windows\System32\DRIVERS\88xBdaCap.sys [35648 2009-11-05] (DTV-DVB Technology, Inc.) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2015-03-03] (Symantec Corporation) U3 EraserUtilDrv11411; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11411.sys [142640 2015-03-03] (Symantec Corporation) S3 FIXUSTOR; C:\Windows\System32\DRIVERS\fixustor.sys [18568 2006-11-28] (Genesys Logic) S3 FIXUSTOR; C:\Windows\SysWOW64\DRIVERS\fixustor.sys [18568 2006-11-28] (Genesys Logic) R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2015-02-07] () R0 hotcore3; C:\Windows\SysWow64\drivers\hotcore3.sys [35096 2008-02-14] (Paragon Software Group) R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-02-15] (REALiX(tm)) R1 IDSVia64; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\IPSDefs\20150302.001\IDSvia64.sys [669400 2015-03-02] (Symantec Corporation) S3 MEMSWEEP2; C:\Windows\system32\FF9A.tmp [6144 2010-05-26] (Sophos Plc) [File not signed] R3 NAVENG; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\VirusDefs\20150302.034\ENG64.SYS [129752 2015-03-03] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton Security\NortonData\22.1.0.9\Definitions\VirusDefs\20150302.034\EX64.SYS [2137304 2015-03-03] (Symantec Corporation) R2 ntk_PowerDVD12; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys [83704 2012-06-20] (Cyberlink Corp.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-02-05] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) S3 RemoteControl-USBLAN; C:\Windows\System32\DRIVERS\rcblan.sys [46616 2007-01-24] (Belcarra Technologies) S3 RTCore64; G:\Program Files (x86)\EVGA Precision X\RTCore64.sys [15176 2013-07-18] () S3 SANDRA; G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware) R3 SbieDrv; G:\Program Files\Sandboxie\SbieDrv.sys [237064 2015-02-18] (Sandboxie Holdings, LLC) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2015-02-15] (Synaptics Incorporated) R3 SRTSP; C:\Windows\system32\drivers\NSx64\1601000.009\SRTSP64.SYS [914648 2014-12-02] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NSx64\1601000.009\SRTSPX64.SYS [42200 2014-12-02] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NSx64\1601000.009\SYMDS64.SYS [490712 2014-09-09] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NSx64\1601000.009\SYMEFA64.SYS [1151704 2014-09-09] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102616 2015-03-03] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NSx64\1601000.009\Ironx64.SYS [271576 2014-09-09] (Symantec Corporation) R1 SymNetS; C:\Windows\system32\drivers\NSx64\1601000.009\SYMNETS.SYS [565464 2014-09-09] (Symantec Corporation) S3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [30720 2005-04-13] (The OpenVPN Project) [File not signed] S3 tapoas; C:\Windows\System32\DRIVERS\tapoas.sys [30720 2011-08-19] (The OpenVPN Project) R1 UGURU; C:\Windows\System32\drivers\uGuru.sys [22064 2006-09-20] (ABIT) U5 UnlockerDriver5; G:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 usbser64; C:\Windows\System32\DRIVERS\usbser.sys [33280 2013-08-29] (Microsoft Corporation) R2 vstor2-ws60; G:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys [32816 2010-08-19] (VMware, Inc.) R2 {73526619-C24F-470B-9BED-53D455FBB5C6}; G:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12\Common\NavFilter\000.fcl [147704 2012-09-19] (CyberLink Corp.) R3 ALSysIO; \??\C:\Users\Holger\AppData\Local\Temp\ALSysIO64.sys [X] S3 EST_BusEnum; system32\DRIVERS\GenBus.sys [X] S3 NUS_Bus; system32\DRIVERS\NUS_Bus.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-03 19:55 - 2015-03-03 19:55 - 00036331 _____ () C:\Users\Holger\Desktop\FRST.txt 2015-03-03 19:54 - 2015-03-03 19:55 - 00000000 ____D () C:\FRST 2015-03-03 19:28 - 2015-03-03 19:28 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Security 2015-03-03 19:25 - 2015-03-03 19:25 - 00102616 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2015-03-03 19:25 - 2015-03-03 19:25 - 00008214 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2015-03-03 19:25 - 2015-03-03 19:25 - 00002457 _____ () C:\Users\Public\Desktop\Norton Security.lnk 2015-03-03 19:24 - 2015-03-03 19:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security 2015-03-03 19:24 - 2015-03-03 19:24 - 00001301 _____ () C:\Users\Holger\Desktop\Norton-Installationsdateien.lnk 2015-03-03 19:24 - 2015-03-03 19:24 - 00000000 ____D () C:\Program Files (x86)\Norton Security 2015-03-03 19:12 - 2015-03-03 19:12 - 00000022 _____ () C:\Windows\S.dirmngr 2015-03-03 19:00 - 2015-03-03 19:00 - 02092544 _____ (Farbar) C:\Users\Holger\Desktop\FRST64.exe 2015-03-03 18:34 - 2015-03-03 19:09 - 00000000 ____D () C:\Users\Holger\Desktop\Virus 2015-03-03 17:42 - 2015-03-03 17:42 - 00002499 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 3.lnk 2015-03-03 17:42 - 2015-03-03 17:42 - 00000000 ____D () C:\Program Files\Common Files\Nitro 2015-03-03 17:42 - 2015-03-03 17:42 - 00000000 ____D () C:\Program Files (x86)\Nitro 2015-03-03 17:42 - 2013-07-26 06:57 - 00029712 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll 2015-03-03 17:42 - 2013-07-26 06:57 - 00017936 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll 2015-03-03 16:55 - 2015-03-03 16:55 - 00000704 _____ () C:\Users\Public\Desktop\CanWay.lnk 2015-03-03 16:55 - 2015-03-03 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CanWay 2015-03-02 19:25 - 2015-03-02 19:35 - 16572928 _____ (CanWay ) C:\Users\Holger\Downloads\CanWay Installer_1.1.10.exe 2015-03-02 19:23 - 2015-03-02 19:23 - 00000000 ____D () C:\Users\Holger\AppData\Local\GMap.NET 2015-03-02 19:21 - 2015-03-03 16:57 - 00010658 _____ () C:\Windows\DPINST.LOG 2015-03-02 19:21 - 2015-03-03 16:57 - 00000000 ____D () C:\Users\Holger\AppData\Local\CanWay 2015-03-02 19:21 - 2015-03-02 19:21 - 00000000 ____D () C:\Program Files (x86)\STMicroelectronics 2015-03-02 18:44 - 2015-03-02 18:44 - 00000000 ____D () C:\Users\Holger\Downloads\DGS-1210-24_fw_revD_4-20-B002_all_en_20141208 2015-03-02 18:42 - 2015-03-02 18:43 - 09189201 _____ () C:\Users\Holger\Downloads\DGS-1210-24_fw_revD_4-20-B002_all_en_20141208.zip 2015-03-02 17:49 - 2015-03-02 17:49 - 00003565 _____ () C:\Users\Holger\Downloads\config.bin 2015-03-02 17:49 - 2015-03-02 17:49 - 00001190 _____ () C:\Users\Holger\Downloads\Syslog.log 2015-02-26 18:22 - 2015-02-26 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-02-26 18:21 - 2015-02-26 18:22 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-02-26 18:21 - 2015-02-26 18:22 - 00000000 ____D () C:\Program Files\iTunes 2015-02-26 18:21 - 2015-02-26 18:21 - 00000000 ____D () C:\Program Files\iPod 2015-02-26 18:21 - 2015-02-26 18:21 - 00000000 ____D () C:\Program Files (x86)\iTunes 2015-02-25 17:05 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls 2015-02-25 17:05 - 2015-01-09 00:43 - 00419936 _____ () C:\Windows\system32\locale.nls 2015-02-25 16:56 - 2015-02-25 16:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-02-22 15:12 - 2015-02-22 15:12 - 00000903 _____ () C:\Users\Public\Desktop\FileZilla Client.lnk 2015-02-22 15:09 - 2015-02-22 15:10 - 06372800 _____ (Tim Kosse) C:\Users\Holger\Downloads\FileZilla_3.10.1.1_win32-setup.exe 2015-02-21 20:21 - 2015-02-21 20:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie 2015-02-21 16:01 - 2015-02-21 16:01 - 00000000 ____D () C:\Users\Holger\Downloads\fat32formatteren 2015-02-21 16:00 - 2015-02-21 16:01 - 00188133 _____ () C:\Users\Holger\Downloads\fat32formatteren.zip 2015-02-17 18:50 - 2015-02-17 18:50 - 00000000 ____D () C:\Windows\ERUNT 2015-02-17 18:12 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2015-02-17 18:12 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2015-02-17 18:12 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2015-02-17 18:12 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll 2015-02-16 10:42 - 2015-03-03 19:12 - 00040728 _____ () C:\Windows\PFRO.log 2015-02-15 19:25 - 2015-02-15 19:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf 2015-02-15 19:09 - 2015-02-15 19:09 - 02333416 _____ (Intel) C:\Users\Holger\Downloads\Intel Driver Update Utility Installer.exe 2015-02-15 18:47 - 2015-02-15 18:47 - 00000000 ____H () C:\ProgramData\DP45977C.lfl 2015-02-15 18:44 - 2015-02-15 18:44 - 71040000 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2015-02-15 18:44 - 2015-02-15 18:44 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2015-02-15 18:44 - 2015-02-15 18:44 - 04263128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2015-02-15 18:44 - 2015-02-15 18:44 - 03186544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 02860760 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 02827120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2015-02-15 18:44 - 2015-02-15 18:44 - 01443340 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2015-02-15 18:44 - 2015-02-15 18:44 - 01411096 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 01287384 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00959704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00856992 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00629464 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00451096 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00366104 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00326680 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00326680 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2015-02-15 18:44 - 2015-02-15 18:44 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 14048512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 12967680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 05234952 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01550528 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01499984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01353472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00995120 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00979280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00922880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00560328 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00303776 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll 2015-02-15 18:43 - 2015-02-15 18:43 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2015-02-15 18:40 - 2015-02-15 18:40 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll 2015-02-15 18:40 - 2015-02-15 18:40 - 00942808 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2015-02-15 18:40 - 2015-02-15 18:40 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2015-02-15 18:40 - 2015-02-15 18:40 - 00034544 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys 2015-02-15 18:40 - 2015-02-15 18:40 - 00015160 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys 2015-02-15 18:40 - 2015-02-15 18:40 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2015-02-15 18:40 - 2015-02-15 18:40 - 00000000 ____D () C:\Program Files\Synaptics 2015-02-15 18:38 - 2015-02-15 18:38 - 00123704 _____ (JMicron Technology Corp.) C:\Windows\system32\Drivers\jraid.sys 2015-02-15 18:28 - 2015-02-15 18:28 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\ProductData 2015-02-15 18:27 - 2015-02-15 19:30 - 00002920 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Holger 2015-02-15 18:27 - 2015-02-15 18:27 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled 2015-02-15 18:27 - 2015-02-15 18:27 - 00000000 ____D () C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} 2015-02-15 18:26 - 2015-02-16 10:35 - 00000000 ____D () C:\Program Files (x86)\IObit 2015-02-15 18:24 - 2015-02-25 17:19 - 00000000 ____D () C:\ProgramData\ProductData 2015-02-15 18:24 - 2015-02-15 19:30 - 00000000 ____D () C:\ProgramData\IObit 2015-02-15 18:24 - 2015-02-15 19:24 - 00002856 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Holger) 2015-02-15 18:24 - 2015-02-15 18:28 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\IObit 2015-02-15 18:24 - 2015-02-15 18:24 - 00026528 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS 2015-02-15 18:02 - 2015-02-15 18:02 - 00000000 ____D () C:\Program Files\Intel 2015-02-15 18:00 - 2015-02-15 18:00 - 01203488 _____ () C:\Users\Holger\Downloads\Driver Booster Free - CHIP-Installer.exe 2015-02-15 17:59 - 2015-02-15 17:59 - 02894032 _____ (Intel(R) Corporation) C:\Users\Holger\Downloads\SetupChipset.exe 2015-02-15 17:57 - 2015-02-15 17:57 - 00000134 _____ () C:\Users\Holger\Downloads\inf_v9001007.zip 2015-02-12 20:42 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-12 20:42 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-12 20:42 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-02-12 20:42 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-02-12 18:11 - 2015-02-05 18:57 - 00621384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2015-02-12 18:07 - 2015-02-05 22:01 - 32106640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 24768144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 20466496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 16017040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 14119744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 13294528 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 13208200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 10773704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 10284872 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-02-12 18:07 - 2015-02-05 22:01 - 03610768 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 03247248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434752.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434752.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00995248 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00969872 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00943760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00929936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00908104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00877816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00353224 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00305136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00177624 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2015-02-12 18:07 - 2015-02-05 22:01 - 00164752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-02-12 18:04 - 2015-02-12 18:04 - 00000000 ____D () C:\NVIDIA 2015-02-12 17:59 - 2015-02-12 17:59 - 00640424 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\Holger\Downloads\rufus-1.4.12.exe 2015-02-12 17:55 - 2015-02-12 17:55 - 00000000 ____D () C:\Users\Holger\Downloads\grub4dos 2015-02-12 17:37 - 2015-02-12 18:00 - 00000000 ____D () C:\Users\Holger\Downloads\Hirens.BootCD.15.2 2015-02-12 17:32 - 2015-02-12 17:37 - 309136440 _____ (NVIDIA Corporation) C:\Users\Holger\Downloads\347.52-desktop-win8-win7-winvista-64bit-international-whql.exe 2015-02-12 17:26 - 2015-02-12 17:33 - 621283886 _____ () C:\Users\Holger\Downloads\Hirens.BootCD.15.2.zip 2015-02-12 17:11 - 2015-02-12 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\bluescreenview-x64 2015-02-12 17:09 - 2015-02-12 17:09 - 00085380 _____ () C:\Users\Holger\Downloads\bluescreenview-x64.zip 2015-02-12 17:09 - 2015-02-12 17:09 - 00001672 _____ () C:\Users\Holger\Downloads\bluescreenview_german.zip 2015-02-11 20:30 - 2015-02-11 20:33 - 00000335 _____ () C:\local.conf 2015-02-11 20:30 - 2015-02-11 20:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-02-11 07:29 - 2015-02-04 04:16 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-02-11 07:29 - 2015-02-04 04:16 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-02-11 07:29 - 2015-02-04 04:16 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-02-11 07:29 - 2015-02-04 04:16 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-02-11 07:29 - 2015-02-04 04:16 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-02-11 07:29 - 2015-02-04 04:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-02-11 07:29 - 2015-02-04 04:13 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-02-11 07:29 - 2015-01-28 00:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2015-02-11 07:29 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-11 07:29 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-02-11 07:29 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-11 07:29 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-02-11 07:29 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-02-11 07:29 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-11 07:29 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-11 07:29 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-11 07:29 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-11 07:29 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-11 07:29 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-11 07:29 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-11 07:29 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-11 07:29 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-11 07:29 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-11 07:29 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-02-11 07:29 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-02-11 07:29 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-02-11 07:29 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-11 07:29 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-11 07:29 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-02-11 07:29 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-11 07:29 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-11 07:29 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-02-11 07:29 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-02-11 07:29 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-02-11 07:29 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-11 07:29 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-02-11 07:29 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-02-11 07:29 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-02-11 07:29 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-02-11 07:29 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-02-11 07:29 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-11 07:29 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-11 07:29 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-11 07:29 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-02-11 07:29 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-02-11 07:29 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-11 07:29 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-02-11 07:29 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-02-11 07:29 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-02-11 07:29 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-02-11 07:29 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-11 07:29 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-02-11 07:29 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-02-11 07:29 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-02-11 07:29 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-02-11 07:29 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-11 07:29 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-11 07:29 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-02-11 07:29 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-02-11 07:29 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-02-11 07:29 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-11 07:29 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-11 07:29 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-02-11 07:29 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-02-11 07:29 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-02-11 07:29 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-02-11 07:29 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-02-11 07:29 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-02-11 07:29 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-02-11 07:29 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-02-11 07:29 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-02-11 07:29 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-02-11 07:29 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-02-11 07:29 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-02-11 07:28 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-11 07:28 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-02-11 07:28 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-11 07:28 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-02-11 07:28 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-02-11 07:28 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-02-11 07:28 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-02-11 07:28 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-02-11 07:28 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-11 07:28 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-02-11 07:28 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-11 07:28 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-02-11 07:28 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-02-11 07:28 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-02-11 07:28 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-02-11 07:28 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-02-11 07:28 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-02-11 07:28 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-11 07:28 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-11 07:28 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2015-02-11 07:28 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-11 07:28 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2015-02-11 07:28 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-11 07:28 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2015-02-11 07:28 - 2014-10-04 03:10 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-11 07:28 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-02-11 07:28 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2015-02-11 07:28 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-02-11 07:28 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-02-11 07:28 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2015-02-11 07:28 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2015-02-11 07:27 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-11 07:27 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-02-11 07:27 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-02-11 07:27 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-02-11 07:27 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-02-11 07:27 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-02-11 07:27 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-02-11 07:27 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-11 07:27 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-11 07:27 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll 2015-02-09 17:19 - 2015-02-09 17:19 - 00005398 _____ () C:\Users\Holger\Downloads\LAN24TB_20150209.dss 2015-02-08 19:42 - 2015-02-08 19:42 - 00000000 ____D () C:\Users\Holger\Downloads\qd560w550bger 2015-02-08 19:39 - 2015-02-08 19:40 - 03067440 _____ () C:\Users\Holger\Downloads\qd560w550bger.exe 2015-02-08 01:00 - 2015-03-03 19:27 - 02211158 _____ () C:\Windows\setupact.log 2015-02-08 01:00 - 2015-02-08 01:00 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-07 19:34 - 2015-02-07 19:34 - 00000000 ____D () C:\Users\Holger\Downloads\Hola 2015-02-07 15:54 - 2015-02-07 15:54 - 00037970 _____ () C:\Users\Holger\Documents\cc_20150207_155358.reg 2015-02-07 15:54 - 2015-02-07 15:54 - 00024290 _____ () C:\Users\Holger\Documents\cc_20150207_155444.reg 2015-02-07 15:50 - 2015-02-07 15:50 - 05325208 _____ (Piriform Ltd) C:\Users\Holger\Downloads\ccsetup502.exe 2015-02-07 15:48 - 2015-02-07 15:48 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert 2015-02-07 15:47 - 2015-03-03 19:15 - 00000000 ____D () C:\Windows\CryptoGuard 2015-02-07 15:47 - 2015-02-09 15:32 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert 2015-02-07 15:47 - 2015-02-07 19:34 - 00548424 _____ (SurfRight) C:\Windows\system32\hmpalert.dll 2015-02-07 15:47 - 2015-02-07 19:34 - 00477008 _____ (SurfRight) C:\Windows\SysWOW64\hmpalert.dll 2015-02-07 15:47 - 2015-02-07 19:34 - 00093144 _____ () C:\Windows\system32\Drivers\hmpalert.sys 2015-02-07 15:47 - 2015-02-07 15:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert 2015-02-07 15:46 - 2015-02-07 15:46 - 01889616 _____ (SurfRight B.V.) C:\Users\Holger\Downloads\hmpalert.exe 2015-02-07 15:45 - 2015-02-07 15:45 - 00000913 _____ () C:\Users\Holger\Desktop\FileHippo App Manager.lnk 2015-02-07 15:45 - 2015-02-07 15:45 - 00000913 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileHippo App Manager.lnk 2015-02-07 15:45 - 2015-02-07 15:45 - 00000000 ____D () C:\ProgramData\IsolatedStorage 2015-02-07 15:41 - 2015-02-07 15:41 - 00849352 _____ () C:\Users\Holger\Downloads\AppManagerSetup_1.47.exe 2015-02-07 14:17 - 2015-02-07 14:17 - 00000000 ____D () C:\Windows\en 2015-02-07 14:16 - 2015-02-07 14:16 - 00001313 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2015-02-07 14:16 - 2015-02-07 14:16 - 00000000 ____D () C:\Windows\de 2015-02-07 14:15 - 2015-02-07 14:15 - 00001382 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2015-02-07 14:11 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys 2015-02-07 14:08 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2015-02-07 14:08 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2015-02-07 14:08 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2015-02-07 14:08 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2015-02-07 14:08 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2015-02-07 14:08 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2015-02-07 14:04 - 2015-02-07 14:04 - 00002212 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2015-02-07 14:04 - 2015-02-07 14:04 - 00002128 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2015-02-07 14:04 - 2015-02-07 14:04 - 00002128 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ___RD () C:\Users\Holger\OneDrive 2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive 2015-02-07 14:04 - 2015-02-07 14:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive 2015-02-07 13:55 - 2015-02-07 13:56 - 01239752 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-web(1).exe 2015-02-07 12:42 - 2015-02-07 12:42 - 00003206 _____ () C:\Windows\System32\Tasks\{00751C2C-0DE5-4235-8359-A01ADA1506E1} 2015-02-07 12:42 - 2015-02-07 12:42 - 00000093 _____ () C:\Windows\SysWOW64\FTCD2XXUN.ini 2015-02-07 12:42 - 2015-02-07 12:42 - 00000065 _____ () C:\Windows\SysWOW64\FTD2XXUN.ini 2015-02-07 12:42 - 2015-02-07 12:40 - 00420864 _____ (FTDI Ltd.) C:\Windows\SysWOW64\FTDIUNIN.exe 2015-02-07 12:39 - 2015-02-07 12:39 - 00000000 ____D () C:\Users\Holger\Downloads\FTClean 2015-02-07 12:36 - 2015-02-07 12:36 - 00452958 _____ () C:\Users\Holger\Downloads\FTClean.zip 2015-02-07 11:49 - 2015-02-07 11:49 - 156896601 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-222956-1423258196.mp4 2015-02-07 11:48 - 2015-02-07 11:48 - 58965039 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-222421-1423257861.mp4 2015-02-07 11:48 - 2015-02-07 11:48 - 169651682 _____ () C:\Users\Holger\Downloads\Wohnzimmer20150206-220453-1423256693.mp4 2015-02-07 11:09 - 2015-02-07 11:09 - 00000000 ____D () C:\Program Files (x86)\Synology 2015-02-07 09:50 - 2015-02-07 09:50 - 17465344 _____ () C:\Users\Holger\Downloads\SurveillancePlugin(1).msi 2015-02-06 20:43 - 2015-02-07 13:07 - 00000634 _____ () C:\Users\Holger\Desktop\SANUK Control 3.0.lnk 2015-02-06 20:43 - 2015-02-06 20:43 - 00000634 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\SANUK Control 3.0.lnk 2015-02-06 20:43 - 2015-02-06 20:43 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SANUK CyberControl 3.0 2015-02-06 20:42 - 2015-02-06 20:43 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install(2).exe 2015-02-06 19:54 - 2015-02-06 19:55 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install(1).exe 2015-02-04 17:14 - 2015-02-04 17:14 - 00000000 ____D () C:\Program Files (x86)\ESET 2015-02-04 15:56 - 2015-02-17 18:50 - 00001183 _____ () C:\DelFix.txt 2015-02-04 15:09 - 2015-02-04 15:09 - 00000331 _____ () C:\Users\Holger\Downloads\regfix(1).zip 2015-02-02 18:48 - 2015-02-02 18:48 - 00000000 ____D () C:\Users\Holger\Downloads\regfix 2015-02-02 18:47 - 2015-02-02 18:47 - 00000605 _____ () C:\Users\Holger\Downloads\regfix.zip 2015-02-01 14:17 - 2015-02-01 14:17 - 15209658 _____ () C:\Users\Holger\Downloads\scc_30_install.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-03 19:43 - 2014-08-17 14:37 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\KeePass 2015-03-03 19:43 - 2012-04-06 20:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-03-03 19:28 - 2012-11-21 18:24 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton 2015-03-03 19:28 - 2011-02-01 17:12 - 00000000 ____D () C:\ProgramData\Norton 2015-03-03 19:25 - 2015-01-24 15:06 - 00003214 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2015-03-03 19:25 - 2011-02-01 17:13 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared 2015-03-03 19:21 - 2010-03-23 20:06 - 00016784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-03-03 19:21 - 2010-03-23 20:06 - 00016784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-03-03 19:20 - 2010-07-29 15:06 - 00000373 _____ () C:\Windows\lgfwup.ini 2015-03-03 19:17 - 2010-03-23 20:26 - 01771805 _____ () C:\Windows\WindowsUpdate.log 2015-03-03 19:15 - 2013-10-15 19:17 - 00010636 _____ () C:\Users\Holger\IP_Log_Data.js 2015-03-03 19:15 - 2010-07-28 14:02 - 00000000 ____D () C:\ProgramData\Temp 2015-03-03 19:12 - 2013-10-12 10:39 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-03-03 19:12 - 2010-10-21 14:11 - 00000000 ____D () C:\ProgramData\VMware 2015-03-03 19:12 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-03-03 19:10 - 2013-03-16 17:33 - 00000032 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Usage.ini 2015-03-03 19:03 - 2011-10-13 16:22 - 00000000 ____D () C:\Users\Holger\AppData\Local\NPE 2015-03-03 19:00 - 2013-03-13 14:51 - 00648922 _____ () C:\Users\Holger\Network_Meter_Data.js 2015-03-03 18:16 - 2014-10-06 14:25 - 00000000 ____D () C:\NPE 2015-03-03 17:42 - 2012-09-25 19:42 - 00002011 _____ () C:\Users\Public\Desktop\Nitro Reader.lnk 2015-03-03 17:41 - 2012-09-25 19:41 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Downloaded Installations 2015-03-03 17:22 - 2010-03-23 21:24 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{424B6B76-676E-4BCF-A3EB-94365BADB9E1} 2015-03-02 19:21 - 2008-12-25 22:52 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-03-02 19:20 - 2010-01-13 16:51 - 00000000 ____D () C:\Windows\Downloaded Installations 2015-03-02 19:06 - 2011-02-09 19:51 - 00000000 ____D () C:\Users\Holger\AppData\Local\CrashDumps 2015-03-02 18:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-03-02 16:24 - 2011-02-26 20:56 - 00001864 _____ () C:\Windows\Sandboxie.ini 2015-03-02 16:21 - 2012-05-03 18:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-02-26 20:08 - 2010-09-29 12:52 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc 2015-02-26 18:22 - 2014-02-08 12:05 - 00001761 _____ () C:\Users\Public\Desktop\iTunes.lnk 2015-02-26 18:21 - 2014-02-08 12:03 - 00000000 ____D () C:\Program Files\Common Files\Apple 2015-02-26 18:19 - 2009-07-14 18:58 - 00752936 _____ () C:\Windows\system32\perfh007.dat 2015-02-26 18:19 - 2009-07-14 18:58 - 00171984 _____ () C:\Windows\system32\perfc007.dat 2015-02-26 18:19 - 2009-07-14 06:13 - 01759042 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-22 15:14 - 2010-09-26 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\FileZilla 2015-02-22 15:11 - 2010-09-26 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2015-02-19 17:06 - 2013-02-22 21:37 - 00000000 ____D () C:\Users\Holger\Documents\Scan 2015-02-18 03:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing 2015-02-17 18:53 - 2011-07-14 15:47 - 00001389 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Settings.ini 2015-02-17 18:46 - 2010-03-23 20:08 - 00000000 ____D () C:\Users\Holger 2015-02-16 17:26 - 2013-02-22 17:54 - 00000072 _____ () C:\Users\Public\LMDebug.log 2015-02-16 09:49 - 2014-11-20 17:32 - 00000000 ____D () C:\Program Files (x86)\Versandhelfer 2015-02-15 18:46 - 2010-03-23 20:06 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2015-02-15 18:40 - 2010-01-06 00:39 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2015-02-15 18:26 - 2009-08-11 14:33 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Apple Computer 2015-02-15 18:01 - 2013-02-25 17:51 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-13 04:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2015-02-12 18:13 - 2013-10-12 13:36 - 00001355 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2015-02-12 18:12 - 2013-10-12 11:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-02-12 18:12 - 2010-07-29 15:06 - 00000000 ____D () C:\Temp 2015-02-12 18:04 - 2011-04-01 15:11 - 00000580 __RSH () C:\ProgramData\ntuser.pol 2015-02-12 17:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2015-02-12 17:42 - 2011-04-24 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster 2015-02-12 15:00 - 2010-06-12 16:24 - 00000000 ____D () C:\Windows\Minidump 2015-02-12 14:59 - 2012-10-19 11:35 - 00350400 _____ () C:\Windows\Minidump\021215-91453-01.dmp 2015-02-12 14:20 - 2009-07-14 05:45 - 02375592 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-12 14:18 - 2012-10-19 11:35 - 00350400 _____ () C:\Windows\Minidump\021215-114171-01.dmp 2015-02-12 04:45 - 2014-12-11 03:42 - 00000000 ____D () C:\Windows\system32\appraiser 2015-02-12 04:45 - 2014-05-07 02:04 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-02-12 04:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-02-12 03:41 - 2009-01-27 22:49 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-02-12 03:36 - 2013-08-16 02:02 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-12 03:23 - 2010-04-14 15:32 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-02-11 20:30 - 2015-01-25 21:10 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-11 20:30 - 2015-01-25 21:10 - 00097496 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-09 15:56 - 2013-09-03 15:06 - 00000000 ____D () C:\Users\Administrator 2015-02-09 15:41 - 2012-09-25 19:42 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Nitro PDF 2015-02-09 15:32 - 2012-10-19 11:35 - 00350776 _____ () C:\Windows\Minidump\020915-120312-01.dmp 2015-02-07 15:51 - 2010-11-20 18:49 - 00000730 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-07 14:16 - 2010-10-27 17:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2015-02-07 14:14 - 2010-10-27 17:24 - 00001466 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2015-02-07 14:13 - 2010-10-27 17:24 - 00002494 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2015-02-07 14:12 - 2010-10-27 17:21 - 00000000 ____D () C:\Program Files (x86)\Windows Live 2015-02-07 14:11 - 2010-10-27 17:21 - 00000000 ____D () C:\Program Files\Windows Live 2015-02-07 14:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2015-02-06 20:31 - 2009-12-07 16:59 - 00000778 _____ () C:\Windows\HBCIKRNL.INI 2015-02-06 19:58 - 2010-10-09 12:23 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\TeamViewer 2015-02-05 22:01 - 2014-06-03 15:09 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2015-02-05 22:01 - 2014-06-03 15:09 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2015-02-05 22:01 - 2014-03-12 17:05 - 00027441 _____ () C:\Windows\system32\nvinfo.pb 2015-02-05 22:01 - 2013-10-28 16:14 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2015-02-05 22:01 - 2013-10-28 16:14 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2015-02-05 22:01 - 2013-10-12 13:14 - 17253848 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-02-05 22:01 - 2013-10-12 13:14 - 10713256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-02-05 22:01 - 2013-10-12 13:14 - 02902784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-02-05 22:01 - 2012-10-19 16:05 - 18575880 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2015-02-05 22:01 - 2012-10-19 16:05 - 03299512 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-02-05 20:07 - 2013-10-12 10:39 - 00062792 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-02-05 20:07 - 2011-01-16 16:13 - 06861128 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-02-05 20:07 - 2011-01-16 16:13 - 03517584 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-02-05 20:07 - 2011-01-16 16:13 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-02-05 20:07 - 2011-01-16 16:13 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-02-05 20:06 - 2011-01-16 16:13 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-02-05 13:50 - 2013-10-12 11:21 - 04236870 _____ () C:\Windows\system32\nvcoproc.bin 2015-02-05 00:43 - 2012-04-06 20:12 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-02-05 00:43 - 2012-04-06 20:12 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-02-05 00:43 - 2011-05-17 16:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl ==================== Files in the root of some directories ======= 2012-11-22 17:29 - 2012-11-22 17:29 - 0000545 _____ () C:\Users\Holger\AppData\Roaming\All CPU MeterV3_Settings.ini 2011-07-14 15:45 - 2012-01-27 18:51 - 0000412 _____ () C:\Users\Holger\AppData\Roaming\All CPU Meter_Settings.ini 2014-11-20 17:31 - 2014-11-20 17:31 - 0000353 _____ () C:\Users\Holger\AppData\Roaming\dpdhl.versandhelfer_state.xml 2012-03-04 17:31 - 2013-03-02 20:42 - 0000841 _____ () C:\Users\Holger\AppData\Roaming\Drives Meter_Settings.ini 2009-06-08 16:32 - 2012-02-04 12:35 - 0099384 _____ () C:\Users\Holger\AppData\Roaming\inst.exe 2011-07-14 15:47 - 2015-02-17 18:53 - 0001389 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Settings.ini 2013-03-16 17:33 - 2015-03-03 19:10 - 0000032 _____ () C:\Users\Holger\AppData\Roaming\Network Meter_Usage.ini 2009-06-08 16:32 - 2012-02-04 12:35 - 0007859 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.cat 2009-06-08 16:32 - 2012-02-04 12:35 - 0001167 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.inf 2009-06-08 16:33 - 2012-02-04 12:35 - 0000033 _____ () C:\Users\Holger\AppData\Roaming\pcouffin.log 2009-06-08 16:32 - 2012-02-04 12:35 - 0082816 _____ (VSO Software) C:\Users\Holger\AppData\Roaming\pcouffin.sys 2012-10-23 16:01 - 2012-10-27 17:16 - 11718656 _____ () C:\Users\Holger\AppData\Roaming\Sandra.mdb 2013-09-30 15:29 - 2013-10-05 15:10 - 0000676 _____ () C:\Users\Holger\AppData\Roaming\sqlite3Explorer.xml 2011-03-13 14:09 - 2013-12-12 17:22 - 0042744 _____ () C:\Users\Holger\AppData\Roaming\UserTile.png 2010-09-15 16:45 - 2014-07-27 16:49 - 0006144 _____ () C:\Users\Holger\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2010-09-27 14:58 - 2012-04-21 19:23 - 0000600 _____ () C:\Users\Holger\AppData\Local\PUTTY.RND 2013-10-29 12:39 - 2013-10-29 12:39 - 0001706 _____ () C:\Users\Holger\AppData\Local\recently-used.xbel 2010-04-07 14:59 - 2011-02-06 20:38 - 0007605 _____ () C:\Users\Holger\AppData\Local\resmon.resmoncfg 2012-02-04 11:43 - 2012-11-29 16:31 - 0000040 ___SH () C:\ProgramData\.zreglib 2015-02-15 18:47 - 2015-02-15 18:47 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2013-02-15 17:00 - 2013-03-13 14:41 - 0017571 _____ () C:\ProgramData\Network_Meter_Data.csv 2010-08-25 14:35 - 2010-08-25 14:35 - 0000000 _____ () C:\ProgramData\xml6380.tmp 2010-11-19 19:25 - 2010-11-19 19:25 - 0013869 _____ () C:\ProgramData\xmlC2E1.tmp 2010-06-19 15:09 - 2010-11-19 19:25 - 0005975 _____ () C:\ProgramData\xmlD137.tmp 2010-06-19 15:09 - 2010-08-25 14:35 - 0000000 _____ () C:\ProgramData\xmlD927.tmp 2010-06-19 15:09 - 2010-11-19 19:25 - 0001629 _____ () C:\ProgramData\xmlDA32.tmp Files to move or delete: ==================== C:\Users\Holger\IP_Log_Data.js C:\Users\Holger\Network_Meter_Data.js Some content of TEMP: ==================== C:\Users\Holger\AppData\Local\Temp\Hola-Setup-Plugin-x64-1.6.732.exe C:\Users\Holger\AppData\Local\Temp\nitro_reader3_64.exe C:\Users\Holger\AppData\Local\Temp\SandboxieInstall.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-26 18:46 ==================== End Of Log ============================ Addition im nächsten post... Sorry, sehe grade, dass man auf den Fotos nix erkennen kann. Wenn die wichtig sind poste ich sie nochmal mit höherer Auflösung?! |
Themen zu Windows 7x64: Norton Security Fehler 8504,101 |
bonjour, browser, ccsetup, defender, driver booster, ebay, fehler, fehlermeldung, flash player, format, ftp, homepage, mozilla, norton power eraser, popup, problem, realtek, registry, rundll, scan, security, services.exe, software, spam, starmoney, svchost.exe, synology, usb, virus, windows |