Windwos 7 : Webseiten nur noch mit werbung

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:05 on 28/05/2015 (termis)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-05-2015 01
Ran by termis (administrator) on TERMIS-PC on 28-05-2015 20:06:13
Running from C:\Users\termis\Desktop\Neuer Ordner (2)
Loaded Profiles: termis (Available Profiles: termis)
Platform: Windows 7 Ultimate (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Sandboxie Holdings, LLC) G:\programme\sandbox\SbieSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe
() C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Overwolf LTD) G:\programme\Overwolf\Overwolf.exe
(Sandboxie Holdings, LLC) G:\programme\sandbox\SbieCtrl.exe
() C:\ProgramData\{84988492-6cb0-1f20-8498-884926cb1249}\KMSPico 11.0.1 Update.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(TeamSpeak Systems GmbH) G:\programme\teamspeak2\ts3client_win64.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Overwolf LTD) G:\programme\Overwolf\0.85.190.0\OverwolfTSHelper.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.85.190.0\OverwolfHelper.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.85.190.0\OverwolfHelper64.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Razer, Inc.) C:\Users\termis\AppData\Local\Razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe
(Valve Corporation) C:\Users\termis\Desktop\steam\Steam.exe
(Valve Corporation) C:\Users\termis\Desktop\steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11057768 2010-07-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-05-15] (Raptr, Inc)
HKLM-x32\...\Run: [DelReg] => G:\programme\MSI\OverclockingCenter\DelReg.exe [196608 2008-12-04] ()
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-04-22] (Razer Inc.)
HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\Windows\SysWOW64\Codecs\CodecUACManager.exe [60416 2015-04-15] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-3622345197-898242485-877740896-1000\...\Run: [Overwolf] => G:\programme\Overwolf\Overwolf.exe [41200 2015-05-04] (Overwolf LTD)
HKU\S-1-5-21-3622345197-898242485-877740896-1000\...\Run: [SandboxieControl] => G:\programme\sandbox\SbieCtrl.exe [785416 2015-02-18] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-3622345197-898242485-877740896-1000\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-3622345197-898242485-877740896-1000\...\Command Processor: C:\Users\termis\init.cmd [1243 2015-03-30] () <===== ATTENTION!
Startup: C:\Users\termis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\KMSPico 11.0.1 Update.lnk [2015-04-07]
ShortcutTarget: KMSPico 11.0.1 Update.lnk -> C:\ProgramData\{84988492-6cb0-1f20-8498-884926cb1249}\KMSPico 11.0.1 Update.exe ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hp&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mystartsearch.com/?type=hp&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
HKU\S-1-5-21-3622345197-898242485-877740896-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://at.search.yahoo.com/?type=888596&fr=spigot-yhp-ie
HKU\S-1-5-21-3622345197-898242485-877740896-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-at/?ocid=iehp
HKU\S-1-5-21-3622345197-898242485-877740896-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mystartsearch.com/?type=hp&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W
HKU\S-1-5-21-3622345197-898242485-877740896-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.mystartsearch.com/?type=hp&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3622345197-898242485-877740896-1000 -> DefaultScope {CBDD7C56-EFAF-40AD-941F-D8E6A3D00D37} URL = https://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3622345197-898242485-877740896-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1428425076&from=wpc&uid=SamsungXSSDX840XEVOX250GB_S1DBNSBFB71997W&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3622345197-898242485-877740896-1000 -> {CBDD7C56-EFAF-40AD-941F-D8E6A3D00D37} URL = https://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms}
BHO: BBesstSaaveFOrYeOU -> {3E869B3E-41ED-4C02-A40D-38488D09F6C0} -> C:\Program Files (x86)\BBesstSaaveFOrYeOU\TmIP1H7xjgOwnD.x64.dll [2015-05-24] ()
BHO: CouupuExtension -> {A247CC3D-1148-4937-AF3B-19765C429FC8} -> C:\Program Files (x86)\CouupuExtension\szEZGRSwdz3cXg.x64.dll [2015-05-24] ()
BHO-x32: BBesstSaaveFOrYeOU -> {3E869B3E-41ED-4C02-A40D-38488D09F6C0} -> C:\Program Files (x86)\BBesstSaaveFOrYeOU\TmIP1H7xjgOwnD.dll [2015-05-24] ()
BHO-x32: CouupuExtension -> {A247CC3D-1148-4937-AF3B-19765C429FC8} -> C:\Program Files (x86)\CouupuExtension\szEZGRSwdz3cXg.dll [2015-05-24] ()
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{E513592B-5643-4A03-B025-23D793277E58}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-04] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\PROGRA~3\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-04] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-04] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-20] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> G:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-30]
CHR Extension: (Google Drive) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-30]
CHR Extension: (YouTube) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-30]
CHR Extension: (Google Search) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-30]
CHR Extension: (Facebook Customizer (by Adblock Plus)) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\deoeenbkoccjaefmmhpmlegngdjohdcm [2015-04-01]
CHR Extension: (Bookmark Manager DEV) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-19]
CHR Extension: (Avast Online Security) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-30]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-26]
CHR Extension: (Google Wallet) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-30]
CHR Extension: (Gmail) - C:\Users\termis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 165c96fd; c:\Program Files (x86)\TurboSys\TurboSys.dll [1609728 2015-04-07] () [File not signed]
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
S4 AODService; G:\programme\AMD\OverDrive\AODAssist.exe [136616 2010-04-23] ()
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3341384 2015-03-03] (INCA Internet Co., Ltd.)
S4 OverwolfUpdater; G:\programme\Overwolf\OverwolfUpdater.exe [999152 2015-05-04] (Overwolf LTD)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
R2 RzSurroundVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzSurroundVADStreamingService.exe [4250624 2015-02-03] (A-Volute) [File not signed]
R2 SbieSvc; G:\programme\sandbox\SbieSvc.exe [175112 2015-02-18] (Sandboxie Holdings, LLC)
S2 Service KMSELDI; G:\Program Files\KMSpico\Service_KMS.exe [527360 2013-09-07] () [File not signed]
S4 SkypeUpdate; G:\programme\skype\Updater\Updater.exe [315488 2015-02-18] (Skype Technologies)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 WSWNA1100; C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe [297440 2011-07-28] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AODDriver2; G:\programme\AMD\OverDrive\amd64\AODDriver2.sys [52352 2010-04-23] (Advanced Micro Devices)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)
R3 RZSURROUNDVADService; C:\Windows\System32\drivers\RzSurroundVAD.sys [40640 2015-02-09] (Windows (R) Win 7 DDK provider)
R3 SbieDrv; G:\programme\sandbox\SbieDrv.sys [237064 2015-02-18] (Sandboxie Holdings, LLC)
S3 MSICDSetup; \??\I:\CDriver64.sys [X]
S3 PCAlertDriver; \??\G:\programme\MSI\PC Alert 4\NTGLM7X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-28 20:06 - 2015-05-28 20:06 - 00000000 ____D () C:\FRST
2015-05-28 20:05 - 2015-05-28 20:06 - 00000000 ____D () C:\Users\termis\Desktop\Neuer Ordner (2)
2015-05-28 20:05 - 2015-05-28 20:05 - 00000000 _____ () C:\Users\termis\defogger_reenable
2015-05-24 19:14 - 2015-05-24 19:14 - 00000000 ____D () C:\Users\termis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-24 17:59 - 2015-05-24 17:59 - 00000000 ____D () C:\Program Files (x86)\HostCabinet  Who is hosting that website
2015-05-24 17:59 - 2015-05-24 17:59 - 00000000 ____D () C:\Program Files (x86)\BesttSaveForYoou
2015-05-24 17:59 - 2015-05-24 17:59 - 00000000 ____D () C:\Program Files (x86)\BBesstSaaveFOrYeOU
2015-05-24 17:58 - 2015-05-24 17:58 - 00000000 ____D () C:\Program Files (x86)\CouupuExtension
2015-05-14 21:21 - 2015-05-14 21:21 - 00001459 _____ () C:\Users\termis\Desktop\4Story.lnk
2015-05-12 21:15 - 2015-05-28 20:02 - 00000024 _____ () C:\Users\termis\AppData\Roaming\appdataFr25.bin
2015-05-11 22:24 - 2015-05-17 18:00 - 00000000 ____D () C:\Users\termis\AppData\Local\CrashDumps
2015-05-11 22:22 - 2015-05-15 12:50 - 65751896 _____ () C:\Users\termis\Desktop\SmiteInstaller.exe
2015-05-09 17:57 - 2015-05-09 17:57 - 493933591 _____ () C:\Windows\MEMORY.DMP
2015-05-09 17:57 - 2015-05-09 17:57 - 00275352 _____ () C:\Windows\Minidump\050915-11029-01.dmp
2015-05-09 17:57 - 2015-05-09 17:57 - 00000000 ____D () C:\Windows\Minidump
2015-05-07 22:48 - 2015-05-07 22:51 - 00000178 _____ () C:\Users\termis\Desktop\index.html
2015-05-07 22:23 - 2015-05-14 14:46 - 00000000 ____D () C:\Users\termis\AppData\Roaming\FileZilla
2015-05-07 22:23 - 2015-05-07 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-05-06 15:40 - 2015-05-06 15:44 - 00010716 _____ () C:\Users\termis\Desktop\ip verteilung HOME.xlsx
2015-05-06 12:37 - 2015-03-03 14:52 - 03341384 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\GameMon.des
2015-05-06 12:36 - 2015-05-06 12:36 - 00000000 ____D () C:\Program Files\Common Files\INCA Shared
2015-05-06 10:04 - 2015-05-06 10:04 - 00000976 _____ () C:\Users\Public\Desktop\4Story.lnk
2015-05-06 08:03 - 2015-05-14 21:16 - 00000000 ____D () C:\Users\termis\Downloads\Gameforge Live
2015-05-06 08:03 - 2015-05-06 10:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-05-06 08:03 - 2015-05-06 08:03 - 00000702 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2015-05-06 08:03 - 2015-05-06 08:03 - 00000000 ____D () C:\Users\termis\AppData\Local\Gameforge4d
2015-05-05 15:24 - 2015-05-05 15:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Kombustor 3
2015-05-05 15:24 - 2015-05-05 15:24 - 00000000 ____D () C:\Program Files\MSI Kombustor 3
2015-05-05 15:15 - 2015-05-05 15:21 - 00000000 ____D () C:\Program Files (x86)\RivaTuner Statistics Server
2015-05-05 15:15 - 2015-05-05 15:15 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-05-05 15:15 - 2015-05-05 15:15 - 00000000 ____D () C:\Users\termis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2015-05-05 15:14 - 2015-05-05 15:21 - 00001086 _____ () C:\Users\termis\Desktop\MSI Afterburner.lnk
2015-05-05 15:14 - 2015-05-05 15:14 - 00000000 ____D () C:\Users\termis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2015-05-05 15:14 - 2015-05-05 15:14 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2015-05-05 13:15 - 2015-05-05 13:15 - 00000000 ____D () C:\ProgramData\ATI
2015-05-05 13:14 - 2015-05-05 13:14 - 00058610 _____ () C:\Windows\SysWOW64\CCCInstall_201505051314138288.log
2015-05-05 13:14 - 2015-05-05 13:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-05-05 13:14 - 2015-05-05 13:14 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-05-04 09:27 - 2015-05-04 09:27 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-05-04 09:27 - 2015-05-04 09:27 - 00000000 ____D () C:\Program Files\Java
2015-05-04 09:10 - 2015-05-03 11:18 - 04697768 _____ () C:\Users\termis\Desktop\TechnicLauncher.exe
2015-05-04 09:08 - 2015-05-04 14:48 - 00000000 ____D () C:\Program Files (x86)\DigiCooUpOn
2015-05-04 09:08 - 2015-05-04 09:08 - 00000000 ____D () C:\Program Files (x86)\Share link via email
2015-05-04 09:05 - 2015-05-04 09:05 - 00000000 ____D () C:\Users\termis\AppData\Roaming\.technic
2015-05-04 09:04 - 2015-05-04 09:04 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-05-04 09:04 - 2015-05-04 09:04 - 00000000 ____D () C:\ProgramData\Sun
2015-05-04 09:04 - 2015-05-04 09:04 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-04 09:04 - 2015-05-04 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-05-04 09:04 - 2015-05-04 09:04 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-28 20:51 - 2008-08-15 16:30 - 01013622 _____ () C:\Users\termis\Desktop\DWLG700AP_FW231b01.bin
2015-04-28 18:58 - 2015-04-28 18:58 - 00000000 ____D () C:\Users\termis\Desktop\Neuer Ordner
2015-04-28 18:52 - 2015-04-28 18:52 - 00001241 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-04-28 18:52 - 2015-04-28 18:52 - 00001135 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-04-28 18:52 - 2015-04-28 18:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-04-28 18:52 - 2015-04-28 18:52 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-04-28 18:43 - 2015-04-28 18:52 - 00000000 ____D () C:\Users\termis\AppData\Roaming\DVDVideoSoft
2015-04-28 18:42 - 2015-04-28 18:42 - 00000000 ____D () C:\Users\termis\Documents\DVDVideoSoft

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-28 20:05 - 2015-03-30 12:20 - 00000000 ____D () C:\Users\termis
2015-05-28 19:48 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-28 19:48 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-28 19:09 - 2015-03-30 12:58 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-28 19:09 - 2015-03-30 12:58 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-28 19:03 - 2015-03-30 12:16 - 00301837 _____ () C:\Windows\WindowsUpdate.log
2015-05-28 17:54 - 2009-07-14 19:58 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2015-05-28 17:54 - 2009-07-14 19:58 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2015-05-28 17:54 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-28 17:50 - 2015-04-26 14:15 - 00000000 ____D () C:\Users\termis\Desktop\steam
2015-05-28 17:48 - 2015-04-12 13:17 - 00006023 _____ () C:\Windows\system32\Service_KMS.log
2015-05-28 17:48 - 2015-03-30 13:01 - 00000000 ____D () C:\Users\termis\AppData\Local\Overwolf
2015-05-28 17:48 - 2015-03-30 12:46 - 00000000 ____D () C:\Users\termis\AppData\Roaming\Raptr
2015-05-28 17:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-28 17:48 - 2009-07-14 06:51 - 00032212 _____ () C:\Windows\setupact.log
2015-05-27 17:29 - 2015-04-12 17:29 - 00005568 _____ () C:\Windows\system32\AutoPico.log
2015-05-26 19:11 - 2015-03-30 13:11 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-24 17:59 - 2015-04-07 18:39 - 00000000 ____D () C:\ProgramData\9499063393622493631
2015-05-24 17:18 - 2015-03-31 21:41 - 00001462 _____ () C:\Windows\Sandboxie.ini
2015-05-23 18:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-23 18:02 - 2015-04-01 22:10 - 00007604 _____ () C:\Users\termis\AppData\Local\Resmon.ResmonCfg
2015-05-20 19:04 - 2015-03-30 12:58 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-20 19:04 - 2015-03-30 12:58 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-20 19:03 - 2015-03-30 12:46 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-05-11 22:26 - 2015-04-12 14:28 - 00000020 _____ () C:\Users\termis\AppData\Roaming\appdataFr3.bin
2015-05-05 13:14 - 2015-03-30 12:46 - 00000000 ____D () C:\ProgramData\AMD
2015-05-05 13:14 - 2015-03-30 12:39 - 00000000 ____D () C:\Program Files\AMD
2015-05-05 13:13 - 2015-03-30 12:25 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-05-05 13:12 - 2015-03-30 12:36 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-05-05 13:10 - 2015-03-30 12:38 - 00000000 ____D () C:\AMD
2015-05-04 18:47 - 2015-03-30 14:56 - 00007060 _____ () C:\Windows\PFRO.log
2015-05-04 18:47 - 2009-07-14 06:45 - 00457104 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-04 14:45 - 2015-03-30 12:37 - 00111968 _____ () C:\Users\termis\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-30 16:59 - 2015-04-27 20:57 - 00000000 ____D () C:\Windows\SysWOW64\Codecs
2015-04-29 20:01 - 2015-04-12 17:27 - 00000000 ____D () C:\Users\termis\AppData\Roaming\Notepad++
2015-04-28 20:54 - 2015-04-17 19:22 - 00000000 ____D () C:\Program Files (x86)\SaaVVeLootss

==================== Files in the root of some directories =======

2015-05-12 21:15 - 2015-05-28 20:02 - 0000024 _____ () C:\Users\termis\AppData\Roaming\appdataFr25.bin
2015-04-12 14:28 - 2015-05-11 22:26 - 0000020 _____ () C:\Users\termis\AppData\Roaming\appdataFr3.bin
2015-04-01 22:10 - 2015-05-23 18:02 - 0007604 _____ () C:\Users\termis\AppData\Local\Resmon.ResmonCfg
2015-04-28 20:54 - 2015-05-04 14:48 - 0011886 _____ () C:\Users\termis\AppData\Local\Temp-log.txt

Files to move or delete:
====================
C:\Users\termis\init.cmd


Some files in TEMP:
====================
C:\Users\termis\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe
C:\Users\termis\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\termis\AppData\Local\Temp\F840.exe
C:\Users\termis\AppData\Local\Temp\OnlineBackup.exe
C:\Users\termis\AppData\Local\Temp\raptrpatch.exe
C:\Users\termis\AppData\Local\Temp\raptr_stub.exe
C:\Users\termis\AppData\Local\Temp\vcredist_x64.exe
C:\Users\termis\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-24 00:07

==================== End of log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-05-2015 01
Ran by termis at 2015-05-28 20:06:42
Running from C:\Users\termis\Desktop\Neuer Ordner (2)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3622345197-898242485-877740896-500 - Administrator - Disabled)
Gast (S-1-5-21-3622345197-898242485-877740896-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3622345197-898242485-877740896-1002 - Limited - Enabled)
termis (S-1-5-21-3622345197-898242485-877740896-1000 - Administrator - Enabled) => C:\Users\termis

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

4Story DE 5.1.271 (HKLM-x32\...\4Story_DE_is1) (Version: 5.1.271 - Gameforge4D GmbH)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD OverDrive (HKLM-x32\...\{69FB248E-690D-434F-94A7-248D5F1ECD70}) (Version: 3.2.1.0439 - Advanced Micro Devices, Inc.)
BesttSaveForYoou (HKLM-x32\...\{F6A71DC7-28F4-C6C7-8FA9-8A56C80FC96A}) (Version:  - "") <==== ATTENTION
Browser AdBlocker (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version:  - Browser AdBlocker) <==== ATTENTION
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
CouupuExtension (HKLM-x32\...\{6933C2BA-C67D-42C7-8C77-1FF4B364AF54}) (Version:  - "") <==== ATTENTION
DriverTuner 3.1.0.0 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.0 - LionSea SoftWare)
FileZilla Client 3.10.3 (HKLM-x32\...\FileZilla Client) (Version: 3.10.3 - Tim Kosse)
Free YouTube to MP3 Converter version 3.12.59.415 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.415 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.6 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.6 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
HostCabinet  Who is hosting that website (HKLM-x32\...\{8E8C2E2D-7F21-2CF5-0ADB-64935121ECF0}) (Version:  - "") <==== ATTENTION
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
KMSpico 8.7 (HKLM\...\KMSpico v8.7_is1) (Version: 8.7 - )
Liveupdate4 (HKLM-x32\...\Liveupdate4_is1) (Version:  - MSI, Inc.)
Media Player Codec Pack 4.3.7 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.3.7 - Media Player Codec Pack)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
MSI Afterburner 4.0.0 (HKLM-x32\...\Afterburner) (Version: 4.0.0 - MSI Co., LTD)
MSI Kombustor 3.5.1 (HKLM\...\{9598DA62-2AE8-426D-9C86-BEA96AC6721E}_is1) (Version:  - MSI Co., LTD)
NETGEAR WNA1100 N150 Wireless USB Adapter (HKLM-x32\...\{A2AE9709-283B-4B48-AA34-729C070A62FB}) (Version: 1.0.0.133 - NETGEAR)
NewSAvuer (HKLM-x32\...\{6A08B379-76FB-B4CF-0C70-CAFCD3635A77}) (Version:  - "") <==== ATTENTION
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
OverclockingCenter (HKLM-x32\...\OverclockingCenter_is1) (Version:  - MSI, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.85.190.0 - Overwolf Ltd.)
PC Alert 4 (HKLM-x32\...\PC Alert 4) (Version:  - )
Pinner for Pinterest (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version:  - ) <==== ATTENTION
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Razer Surround (HKLM-x32\...\Razer Surround) (Version: 1.05.14 - Razer Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.19.25502 - Razer Inc.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6151 - Realtek Semiconductor Corp.)
RivaTuner Statistics Server 6.2.0 (HKLM-x32\...\RTSS) (Version: 6.2.0 - Unwinder)
Sandboxie 4.16 (64-bit) (HKLM\...\Sandboxie) (Version: 4.16 - Sandboxie Holdings, LLC)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SoftwareMaster (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{165c96fd}) (Version:  - SoftwareMaster) <==== ATTENTION
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-3622345197-898242485-877740896-1000\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows-Treiberpaket - Alcor Micro, Corp. (AmUStor) USB  (06/06/2013 1.0.38.135) (HKLM\...\3963100BDA54D827C7E34F50100200C40CF1DBF4) (Version: 06/06/2013 1.0.38.135 - Alcor Micro, Corp.)
Windows-Treiberpaket - AMD USB  (03/30/2010 1.0.0.5) (HKLM\...\D38587A239DFF85877AA1BCAA58B37B5CF7A6AF5) (Version: 03/30/2010 1.0.0.5 - AMD)
WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

18-05-2015 18:00:43 Geplanter Prüfpunkt
27-05-2015 21:10:53 Geplanter Prüfpunkt

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01518F73-CD2A-426E-9A9D-A96C16951B38} - System32\Tasks\AutoPico Daily Restart => G:\Program Files\KMSpico\AutoPico.exe [2013-09-07] ()
Task: {1170C4F8-F580-48E5-8064-59CE4F791AB6} - System32\Tasks\Overwolf Updater Task => G:\programme\Overwolf\OverwolfUpdater.exe [2015-05-04] (Overwolf LTD)
Task: {1FF6F32A-026C-49AF-8BE2-4A2CFA7F87E1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => D:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {3A3639E6-8FCF-4CD5-B473-C93E05EEA6E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-30] (Google Inc.)
Task: {4F188372-417A-47F2-8B64-C7B89CCC3D25} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => D:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {52967D8F-5CC5-45BF-854A-E2E3D6FBE84E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {BB131BAF-7896-4695-B349-B61205D6DEC4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-30] (Google Inc.)
Task: {FDF69C10-5773-43A6-8F42-EED6C3B425D1} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-11-20 21:23 - 2014-11-20 21:23 - 00127488 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2015-02-05 01:24 - 2015-02-05 01:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-03-30 12:23 - 2011-07-28 17:06 - 00297440 _____ () C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe
2015-03-29 12:25 - 2015-03-29 12:25 - 00043480 _____ () G:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () G:\programme\Notepad++\NppShell_06.dll
2014-04-07 18:38 - 2014-04-07 18:38 - 00464896 _____ () C:\ProgramData\{84988492-6cb0-1f20-8498-884926cb1249}\KMSPico 11.0.1 Update.exe
2014-11-20 21:23 - 2014-11-20 21:23 - 00102400 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-02-28 11:14 - 2014-02-28 11:14 - 00173568 _____ () G:\programme\teamspeak2\quazip.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 01080832 _____ () G:\programme\teamspeak2\platforms\qwindows.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00833024 _____ () G:\programme\teamspeak2\sqldrivers\qsqlite.dll
2014-02-28 15:07 - 2014-02-28 15:07 - 00102344 _____ () G:\programme\teamspeak2\soundbackends\directsound_win64.dll
2014-02-28 15:07 - 2014-02-28 15:07 - 00108488 _____ () G:\programme\teamspeak2\soundbackends\windowsaudiosession_win64.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00030208 _____ () G:\programme\teamspeak2\imageformats\qgif.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00233984 _____ () G:\programme\teamspeak2\imageformats\qjpeg.dll
2014-02-28 15:10 - 2014-02-28 15:10 - 00563656 _____ () G:\programme\teamspeak2\plugins\clientquery_plugin.dll
2014-02-28 15:10 - 2014-02-28 15:10 - 00577480 _____ () G:\programme\teamspeak2\plugins\teamspeak_control_plugin.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00159232 _____ () G:\programme\teamspeak2\accessible\qtaccessiblewidgets.dll
2015-03-14 07:49 - 2015-03-14 07:49 - 00291840 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2015-04-07 18:42 - 2015-04-07 18:42 - 01609728 _____ () c:\Program Files (x86)\TurboSys\TurboSys.dll
2015-03-30 12:23 - 2011-07-27 11:53 - 00360448 _____ () C:\Program Files (x86)\NETGEAR\WNA1100\WifiLib.dll
2015-05-04 13:08 - 2015-05-04 13:08 - 00025600 _____ () G:\programme\Overwolf\0.85.190.0\CoreAudioApi.dll
2015-05-04 13:08 - 2015-05-04 13:08 - 40555008 _____ () G:\programme\Overwolf\0.85.190.0\libcef.DLL
2015-02-02 09:52 - 2015-02-02 09:52 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2015-05-15 04:21 - 2015-05-15 04:21 - 02540288 _____ () C:\Program Files (x86)\Raptr\ltc_host_ex.DLL
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2015-05-04 13:08 - 2015-05-04 13:08 - 01565128 _____ () G:\programme\Overwolf\0.85.190.0\teamspeak_control_win32.dll
2015-03-30 15:03 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\termis\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2015-03-30 15:03 - 2014-11-26 03:12 - 00911360 _____ () C:\Users\termis\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
2015-03-30 15:03 - 2014-11-26 03:12 - 00134144 _____ () C:\Users\termis\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll
2015-04-26 14:15 - 2015-04-16 19:40 - 00776192 _____ () C:\Users\termis\Desktop\steam\SDL2.dll
2015-04-26 14:15 - 2015-04-23 04:16 - 04962816 _____ () C:\Users\termis\Desktop\steam\v8.dll
2015-04-26 14:15 - 2015-04-23 04:16 - 01556992 _____ () C:\Users\termis\Desktop\steam\icui18n.dll
2015-04-26 14:15 - 2015-04-23 04:16 - 01187840 _____ () C:\Users\termis\Desktop\steam\icuuc.dll
2015-04-26 14:15 - 2015-05-15 03:58 - 02396352 _____ () C:\Users\termis\Desktop\steam\video.dll
2015-04-26 14:15 - 2014-12-01 23:31 - 02396672 _____ () C:\Users\termis\Desktop\steam\libavcodec-56.dll
2015-04-26 14:15 - 2014-12-01 23:31 - 00442880 _____ () C:\Users\termis\Desktop\steam\libavutil-54.dll
2015-04-26 14:15 - 2014-12-01 23:31 - 00479744 _____ () C:\Users\termis\Desktop\steam\libavformat-56.dll
2015-04-26 14:15 - 2014-12-01 23:31 - 00332800 _____ () C:\Users\termis\Desktop\steam\libavresample-2.dll
2015-04-26 14:15 - 2014-12-01 23:31 - 00485888 _____ () C:\Users\termis\Desktop\steam\libswscale-3.dll
2015-04-26 14:15 - 2015-05-15 03:57 - 00703168 _____ () C:\Users\termis\Desktop\steam\bin\chromehtml.DLL
2015-04-26 14:15 - 2015-05-11 21:01 - 36302728 _____ () C:\Users\termis\Desktop\steam\bin\libcef.dll
2015-05-26 19:11 - 2015-05-22 22:22 - 14982472 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\PepperFlash\pepflashplayer.dll
2015-04-07 19:22 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\termis\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2015-04-07 19:22 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\termis\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3622345197-898242485-877740896-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 8.8.8.8 - 8.8.4.4

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AODService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: jswpsapi => 3
MSCONFIG\Services: OverwolfUpdater => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NETGEAR WNA1100 Genie.lnk => C:\Windows\pss\NETGEAR WNA1100 Genie.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PC Alert 4.lnk => C:\Windows\pss\PC Alert 4.lnk.CommonStartup
MSCONFIG\startupreg: GoogleChromeAutoLaunch_3AD4D06F31913034FC06DB4BF8525CE7 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: jswtrayutil => "C:\Program Files (x86)\NETGEAR\WNA1100\jswtrayutil.exe"
MSCONFIG\startupreg: Skype => "G:\programme\skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Steam => "D:\steam\steam.exe" -silent

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{678329D2-588D-430D-94CE-4C8F6BC20D52}] => (Allow) D:\steam\Steam.exe
FirewallRules: [{8B106F2B-98C4-413A-B853-DADDC5FD9846}] => (Allow) D:\steam\Steam.exe
FirewallRules: [{6C86DD66-B808-4928-96F2-8FEEAF1019CD}] => (Allow) D:\steam\bin\steamwebhelper.exe
FirewallRules: [{99A75BE3-5159-47EA-BCBB-14CEFBF3E336}] => (Allow) D:\steam\bin\steamwebhelper.exe
FirewallRules: [{A34C02E4-7EB1-43BE-B79C-D65193635E38}] => (Allow) D:\steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{613521D0-2442-4F30-95EB-9D4C38CB9FCB}] => (Allow) D:\steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{0A17AFCB-74F0-4A13-83D2-6871161489A9}] => (Allow) D:\steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{8B8540C3-02E8-42C5-8438-E2828C2776A1}] => (Allow) D:\steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{A0014EFD-6E25-441D-8375-5D1456CC7498}] => (Allow) D:\steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{7DCCDB4B-CD86-494D-AE4B-6C68DD43C144}] => (Allow) D:\steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{E1941E0A-C63C-444C-8F56-F51C4B7B8117}] => (Allow) D:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{F098F051-6E41-4456-BADA-F7F87B973713}] => (Allow) D:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{B7C39207-95ED-4471-9976-A39F2F211F87}] => (Allow) D:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{9BB82424-89D0-40C2-A418-E6195F546989}] => (Allow) D:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{1EFD6139-4E53-41F5-A6DF-47C440E002B1}] => (Allow) D:\Programme\KMSpico\KMSELDI.exe
FirewallRules: [{D437A52E-7072-4125-8DDF-FC4F9B142381}] => (Allow) D:\Programme\KMSpico\KMSELDI.exe
FirewallRules: [{39F838C0-1825-4FB2-A5A6-BFE778FB4D6B}] => (Allow) G:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{03677273-2A19-4D22-9B8F-F7401B884771}] => (Allow) G:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{D6DB17EF-00E5-4135-9561-56DA9A9BACCD}] => (Allow) G:\programme\skype\Phone\Skype.exe
FirewallRules: [{A48A9E52-7EAE-49FF-A7BB-9057E8213E47}] => (Allow) C:\Users\termis\Desktop\steam\Steam.exe
FirewallRules: [{DD5ED33B-51FD-4CC8-B8A3-4EFEE61968E2}] => (Allow) C:\Users\termis\Desktop\steam\Steam.exe
FirewallRules: [{2713E614-3CFC-418A-85DB-DE63350C35F5}] => (Allow) G:\programme\GameforgeLive\gfl_client.exe
FirewallRules: [{A2BA90B6-DBBD-4F6F-A72F-551402A6AB2D}] => (Allow) C:\Users\termis\Desktop\steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{755A3C22-B6BA-4ED0-9AD8-3C277C1FA9F3}] => (Allow) C:\Users\termis\Desktop\steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{B12E9897-93AB-47AD-B60D-D92D39C110CB}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{9B62C733-7647-4A29-A319-64407BE45398}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{8E3641EC-0545-4309-8B5E-74B82DBC9DC0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{83084D48-A9C6-47A6-98FB-1D0A2AD3030D}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{B92B525F-16C3-42C7-B281-A7D1F5896F8C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Realtek RTL8168D/8111D-Familie-PCI-E-Gigabit-Ethernet-NIC (NDIS 6.20)
Description: Realtek RTL8168D/8111D-Familie-PCI-E-Gigabit-Ethernet-NIC (NDIS 6.20)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8167
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/27/2015 09:04:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/25/2015 01:11:00 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/23/2015 07:24:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/22/2015 00:49:51 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/18/2015 05:54:27 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "42.0.2311.152,language="&#x2a;",type="win32",version="42.0.2311.152"1".
Die abhängige Assemblierung "42.0.2311.152,language="&#x2a;",type="win32",version="42.0.2311.152"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/18/2015 05:54:05 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/17/2015 06:00:46 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm WinRAR archiver wurde wegen dieses Fehlers geschlossen.

Programm: WinRAR archiver
Datei: 

Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
	- diese sich im Netzwerk befindet, 
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
	- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. 
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.

Zusätzliche Daten
Fehlerwert: C000026E
Datenträgertyp: 0

Error: (05/17/2015 06:00:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WinRAR.exe, Version: 5.10.4.0, Zeitstempel: 0x53786a0a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5be02b
Ausnahmecode: 0xc0000006
Fehleroffset: 0x000000000003548f
ID des fehlerhaften Prozesses: 0x18dc
Startzeit der fehlerhaften Anwendung: 0xWinRAR.exe0
Pfad der fehlerhaften Anwendung: WinRAR.exe1
Pfad des fehlerhaften Moduls: WinRAR.exe2
Berichtskennung: WinRAR.exe3

Error: (05/17/2015 06:00:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WinRAR.exe, Version: 5.10.4.0, Zeitstempel: 0x53786a0a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5be02b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000159ad
ID des fehlerhaften Prozesses: 0x1dd4
Startzeit der fehlerhaften Anwendung: 0xWinRAR.exe0
Pfad der fehlerhaften Anwendung: WinRAR.exe1
Pfad des fehlerhaften Moduls: WinRAR.exe2
Berichtskennung: WinRAR.exe3

Error: (05/17/2015 06:00:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: javaw.exe, Version: 0.0.0.0, Zeitstempel: 0x54345ca0
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5be02b
Ausnahmecode: 0xc00000fd
Fehleroffset: 0x000000000003548f
ID des fehlerhaften Prozesses: 0x598
Startzeit der fehlerhaften Anwendung: 0xjavaw.exe0
Pfad der fehlerhaften Anwendung: javaw.exe1
Pfad des fehlerhaften Moduls: javaw.exe2
Berichtskennung: javaw.exe3


System errors:
=============
Error: (05/28/2015 05:48:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Service KMSELDI" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/27/2015 08:57:41 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}

Error: (05/27/2015 08:46:52 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {B0957D9C-810B-4DE0-9C5E-48DB09C5B413}

Error: (05/27/2015 05:12:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Service KMSELDI" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/26/2015 07:03:03 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (05/26/2015 07:01:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Service KMSELDI" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2015 00:13:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Service KMSELDI" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/25/2015 01:42:09 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Service KMSELDI" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/24/2015 07:39:51 PM) (Source: atapi) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort1 gefunden.

Error: (05/24/2015 05:18:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Service KMSELDI" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office:
=========================
Error: (05/27/2015 09:04:07 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"g:\programme\MSI\live update 4\MsiUsbBootTool.exe

Error: (05/25/2015 01:11:00 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"g:\programme\MSI\live update 4\MsiUsbBootTool.exe

Error: (05/23/2015 07:24:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"g:\programme\MSI\live update 4\MsiUsbBootTool.exe

Error: (05/22/2015 00:49:51 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"g:\programme\MSI\live update 4\MsiUsbBootTool.exe

Error: (05/18/2015 05:54:27 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: 42.0.2311.152,language="&#x2a;",type="win32",version="42.0.2311.152"c:\Sandbox\termis\defaultbox\drive\C\program files (x86)\Google\Chrome\application\chrome.exe

Error: (05/18/2015 05:54:05 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"g:\programme\MSI\live update 4\MsiUsbBootTool.exe

Error: (05/17/2015 06:00:46 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: WinRAR archiverC000026E0

Error: (05/17/2015 06:00:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WinRAR.exe5.10.4.053786a0antdll.dll6.1.7600.163854a5be02bc0000006000000000003548f18dc01d090b5a53be8fcC:\Program Files\WinRAR\WinRAR.exeC:\Windows\SYSTEM32\ntdll.dlle0d0ed60-fcad-11e4-9bcf-c3531c579a9a

Error: (05/17/2015 06:00:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WinRAR.exe5.10.4.053786a0antdll.dll6.1.7600.163854a5be02bc000000500000000000159ad1dd401d090b882657a74C:\Program Files\WinRAR\WinRAR.exeC:\Windows\SYSTEM32\ntdll.dlle0d0511e-fcad-11e4-9bcf-c3531c579a9a

Error: (05/17/2015 06:00:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: javaw.exe0.0.0.054345ca0ntdll.dll6.1.7600.163854a5be02bc00000fd000000000003548f59801d090b5a1f6c3dbD:\Program Files (x86)\Minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exeC:\Windows\SYSTEM32\ntdll.dlldca0ef9e-fcad-11e4-9bcf-c3531c579a9a


==================== Memory info =========================== 

Processor: AMD Athlon(tm) II X4 640 Processor
Percentage of memory in use: 41%
Total physical RAM: 6143.18 MB
Available physical RAM: 3620.18 MB
Total Pagefile: 12284.51 MB
Available Pagefile: 9333.59 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.79 GB) (Free:40.97 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Volume) (Fixed) (Total:232.88 GB) (Free:52.08 GB) NTFS
Drive e: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (Volume) (Fixed) (Total:342.48 GB) (Free:284.93 GB) NTFS
Drive g: () (Fixed) (Total:588.93 GB) (Free:552.5 GB) NTFS
Drive k: () (Removable) (Total:3.69 GB) (Free:3.69 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 39DA49CF)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 3D0602AC)
Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 6CDE00F5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=588.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=342.5 GB) - (Type=OF Extended)

========================================================
Disk: 3 (Size: 3.7 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End of log ============================