|
Log-Analyse und Auswertung: Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinderWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
30.06.2015, 06:26 | #16 |
/// the machine /// TB-Ausbilder | Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Speicher die fixlist im Download Ordner, neben dem Programm FRST
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.07.2015, 15:40 | #17 |
| Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Hat nun funktioniert, erhalte aber immernoch die Fehlermeldung:
__________________Code:
ATTFilter Fix result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01 Ran by David at 2015-07-02 16:35:00 Run:1 Running from C:\Users\David\Desktop Loaded Profiles: David (Available Profiles: David) Boot Mode: Normal ============================================== fixlist content: ***************** C:\Users\David\AppData\Local\Temp\DMR\dmr_72.exe C:\Users\David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe C:\Users\David\Downloads\Open Broadcaster Software - CHIP-Installer.exe Emptytemp: ***************** "C:\Users\David\AppData\Local\Temp\DMR\dmr_72.exe" => File/Folder not found. "C:\Users\David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe" => File/Folder not found. "C:\Users\David\Downloads\Open Broadcaster Software - CHIP-Installer.exe" => File/Folder not found. EmptyTemp: => 21 MB temporary data Removed. The system needed a reboot.. ==== End of Fixlog 16:35:04 ==== |
02.07.2015, 17:08 | #18 |
/// the machine /// TB-Ausbilder | Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Welche Fehlermeldung?
__________________
__________________ |
03.07.2015, 12:14 | #19 |
| Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Nach dem Neustart, die folgende Fehlermeldung von AsusSetup: C:/users/David/Appdata/local/temp/213717Log.iniis lost |
03.07.2015, 12:45 | #20 |
/// the machine /// TB-Ausbilder | Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder FRST bitte öffnen, Haken setzen bei Addition und scannen, poste bitte beide Logs.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.07.2015, 13:32 | #21 |
| Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder [CODE]Additional FRST Logfile: Code:
ATTFilter scan result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01 Ran by David at 2015-07-03 14:29:27 Running from C:\Users\David\Desktop Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3975945495-1988407803-2975606891-500 - Administrator - Disabled) David (S-1-5-21-3975945495-1988407803-2975606891-1000 - Administrator - Enabled) => C:\Users\David Gast (S-1-5-21-3975945495-1988407803-2975606891-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3975945495-1988407803-2975606891-1003 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Computer Security (Enabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17} AS: Computer Security (Enabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.190 - Adobe Systems Incorporated) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.194 - Adobe Systems Incorporated) Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated) Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.) Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology) Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.4.000 - Asmedia Technology) Assassin's Creed Revelations (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.00 - Ubisoft) AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin) Battle vs. Chess (HKLM-x32\...\Battle vs. Chess_is1) (Version: 1.0 - Zuxxez Entertainment) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB) Bejeweled® 3 (HKLM-x32\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.) Berkeley Madonna (HKLM-x32\...\{27AB9BD6-4A3E-4BBD-8381-CD445E474936}) (Version: - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order) Computer Security 14.106.103.0 (release) (x32 Version: 14.106.103.0 - F-Secure Corporation) Hidden Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve) Crusader No Remorse (HKLM-x32\...\{2AEA735F-B393-4D89-93EF-5849CB72B4A3}) (Version: 1.0.0.2 - Electronic Arts) David. (HKLM-x32\...\Steam App 346180) (Version: - Fermenter) Dead or Alive 5 Last Round (HKLM-x32\...\Steam App 311730) (Version: - Team NINJA) Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.4.83.1010 - Electronic Arts Inc.) ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB) F-Secure CCF Reputation (x32 Version: 1.1.25.2280 - F-Secure) Hidden F-Secure CCF Scanning 1.51.111.300 (release) (x32 Version: 1.51.111.300 - F-Secure Corporation) Hidden F-Secure Network CCF 1.02.136 (x32 Version: 1.02.136 - F-Secure Corporation) Hidden F-Secure SafeSearch 1.03.146.0 (release) (x32 Version: 1.03.146.0 - F-Secure Corporation) Hidden FUSSBALL MANAGER 12 (HKLM-x32\...\FUSSBALL MANAGER 12) (Version: 1.0.0.0 - Electronic Arts) GameRanger (HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\...\GameRanger) (Version: - GameRanger Technologies) Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Goat Simulator (HKLM-x32\...\Steam App 265930) (Version: - Coffee Stain Studios) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden Grand Theft Auto: San Andreas (HKLM-x32\...\Steam App 12120) (Version: - Rockstar Games) Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.) Half-Life (HKLM-x32\...\Steam App 70) (Version: - Valve) Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve) Half-Life 2: Deathmatch (HKLM-x32\...\Steam App 320) (Version: - Valve) Half-Life 2: Episode One (HKLM-x32\...\Steam App 380) (Version: - Valve) Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version: - Valve) Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve) Half-Life Deathmatch: Source (HKLM-x32\...\Steam App 360) (Version: - Valve) Half-Life: Blue Shift (HKLM-x32\...\Steam App 130) (Version: - Gearbox Software) Half-Life: Opposing Force (HKLM-x32\...\Steam App 50) (Version: - Gearbox Software) Half-Life: Source (HKLM-x32\...\Steam App 280) (Version: - Valve) Hearts of Iron III (HKLM-x32\...\Steam App 25890) (Version: - Paradox Development Studio) Her Story (HKLM-x32\...\Steam App 368370) (Version: - Sam Barlow) Hotel Gigant 2 (HKLM-x32\...\{A142838E-E419-4D70-89AA-BBAD92D2C061}) (Version: 110 - Nobilis) HP ENVY 4500 series - Grundlegende Software für das Gerät (HKLM\...\{E7A3B455-76AD-423A-AE5E-F431C69BF2B0}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.1.1399 - Intel Corporation) Intel(R) Network Connections 16.6.126.0 (HKLM\...\PROSetDX) (Version: 16.6.126.0 - Intel) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.1.209 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{538B98C3-773F-4F20-9C66-802D104DCBE2}) (Version: 1.23.219.2 - Intel Corporation) iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Launch Pad (HKLM-x32\...\F-Secure ServiceEnabler 45119) (Version: 2.06.303.0 - F-Secure Corporation) Launch Pad (x32 Version: 2.06.303.0 - F-Secure Corporation) Hidden Logger Pro 3.6.1 (HKLM-x32\...\{43DC9D80-3EFF-4595-9BA2-D9FC6AA18A37}) (Version: 3.6.0 - Vernier Software & Technology) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Games for Windows - LIVE (HKLM-x32\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{8FB1B528-E260-451E-9B55-E9152F94B80B}) (Version: 3.2.3.0 - Microsoft Corporation) Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Rise Of Nations (HKLM-x32\...\RiseOfNations 1.0) (Version: - Microsoft) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios) NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation) NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation) Online Safety 2.107.2565.1702 (x32 Version: 2.107.2565.1702 - F-Secure Corporation) Hidden Only If (HKLM-x32\...\Steam App 298260) (Version: - Creability) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.3.11.2762 - Electronic Arts, Inc.) PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve) POSTAL 2 (HKLM-x32\...\Steam App 223470) (Version: - Running With Scissors) Prison Architect (HKLM-x32\...\Steam App 233450) (Version: - Introversion Software) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6543 - Realtek Semiconductor Corp.) Rise of Nations Thrones and Patriots (HKLM-x32\...\RiseofNationsExpansion 1.0) (Version: - ) RollerCoaster Tycoon 2: Triple Thrill Pack (HKLM-x32\...\Steam App 285330) (Version: - Chris Sawyer Productions) Saints Row IV (HKLM-x32\...\Steam App 206420) (Version: - Deep Silver Volition) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.) SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts) Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.) Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - Keen Software House) Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version: - Yager) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Stronghold Crusader 2 (HKLM-x32\...\Steam App 232890) (Version: - FireFly Studios) Stronghold HD (HKLM-x32\...\Steam App 40950) (Version: - FireFly Studios) Stronghold Kingdoms (HKLM-x32\...\Steam App 47410) (Version: - FireFly Studios) Team Fortress Classic (HKLM-x32\...\Steam App 20) (Version: - Valve) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios) The Four Kings Casino and Slots (HKLM-x32\...\Steam App 260430) (Version: - Digital Leisure Inc.) The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version: - Galactic Cafe) The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games) The Way of Life (HKLM-x32\...\Steam App 310370) (Version: - Fabio Ferrara) Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.2 - Electronic Arts) Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version: - Ubisoft Singapore) Total War: ROME II - Emperor Edition (HKLM-x32\...\Steam App 214950) (Version: - Creative Assembly) Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) Warframe (HKLM-x32\...\Steam App 230410) (Version: - Digital Extremes) Wolfenstein: The New Order (HKLM-x32\...\Steam App 201810) (Version: - Machine Games) Wolfenstein: The New Order German Edition (HKLM-x32\...\Steam App 288570) (Version: - MachineGames) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 29-06-2015 16:29:48 Ende der Bereinigung ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2015-06-25 17:51 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {326E6573-2019-49DE-B057-E7E6972F3BB2} - System32\Tasks\{C1B0EB6B-C6C9-40C7-8CE7-4F3D89BDFDFA} => pcalua.exe -a D:\HG2Setup.exe -d D:\ Task: {3C61F1B5-25BB-45D1-A3AC-E041A9068AB3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-18] (Google Inc.) Task: {47D8A8D3-10B0-46E2-8B80-887D1439CD60} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated) Task: {B72E5C13-EE2E-4E4A-A153-995AC566731E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {E1B9957F-0B33-48D5-8196-216C04EA75B7} - System32\Tasks\ASUS\i-Setup213717 => C:\Windows\Chipset\AsusSetup.exe [2010-09-08] (ASUSTeK Computer Inc.) Task: {E3033771-96B3-4166-9241-38A62A004CEF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-18] (Google Inc.) Task: {F7FD41F4-4661-4478-A444-0C76A84C5A1F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-02] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2015-02-13 05:20 - 2015-02-13 05:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-02-13 05:20 - 2015-02-13 05:20 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-05-31 22:04 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-12-24 02:13 - 2014-08-20 17:44 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2013-06-08 11:42 - 2014-10-14 17:33 - 00045608 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng 2014-02-19 13:56 - 2014-02-19 13:56 - 00220200 _____ () C:\Program Files (x86)\Internet Security\daas2.dll 2013-06-08 11:45 - 2013-06-08 11:45 - 00030888 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll 2013-06-08 11:42 - 2015-04-14 13:34 - 00175144 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Gemini\fsgem.dll 2013-06-08 11:42 - 2015-02-24 17:39 - 00949288 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\fm4av.dll 2014-10-20 16:20 - 2014-10-20 16:20 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\92a1650dbe9fad5f46633b835420e1a8\IsdiInterop.ni.dll 2013-05-31 21:53 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2013-05-31 21:48 - 2012-01-20 11:23 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2013-06-08 11:42 - 2014-10-14 17:33 - 00056360 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\FSGUI\fsavures.eng 2014-09-25 20:29 - 2014-09-25 20:29 - 00592936 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.79_none_b59ec33311fcd586\QtMultimediaKit1.dll 2013-08-21 14:18 - 2015-04-16 19:40 - 00776192 _____ () z:\Games\SDL2.dll 2015-01-22 21:41 - 2015-04-23 04:16 - 04962816 _____ () z:\Games\v8.dll 2015-01-22 21:41 - 2015-04-23 04:16 - 01556992 _____ () z:\Games\icui18n.dll 2015-01-22 21:41 - 2015-04-23 04:16 - 01187840 _____ () z:\Games\icuuc.dll 2014-06-21 11:48 - 2015-06-04 20:56 - 02407104 _____ () z:\Games\video.dll 2014-09-04 17:48 - 2014-12-01 23:31 - 02396672 _____ () z:\Games\libavcodec-56.dll 2014-09-04 17:48 - 2014-12-01 23:31 - 00442880 _____ () z:\Games\libavutil-54.dll 2014-09-04 17:48 - 2014-12-01 23:31 - 00479744 _____ () z:\Games\libavformat-56.dll 2014-09-04 17:48 - 2014-12-01 23:31 - 00332800 _____ () z:\Games\libavresample-2.dll 2014-09-04 17:48 - 2014-12-01 23:31 - 00485888 _____ () z:\Games\libswscale-3.dll 2013-09-06 12:55 - 2015-06-04 20:56 - 00703168 _____ () Z:\Games\bin\chromehtml.DLL 2013-08-07 11:31 - 2015-05-11 21:01 - 36302728 _____ () Z:\Games\bin\libcef.dll 2015-05-19 20:00 - 2015-05-11 21:01 - 08958344 _____ () Z:\Games\bin\pdf.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\David\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: EADM => "Z:\Origin\Origin.exe" -AutoStart MSCONFIG\startupreg: Steam => "z:\Games\Steam.exe" -silent ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{0C850A2C-06F2-4D0F-A521-B30A04C03FCC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{062F7EE4-A2F7-477A-AE5D-FED25FFA1D87}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [TCP Query User{40F37D65-6335-42B7-97DA-D8A91AFE004C}C:\users\david\appdata\local\temp\gw2.exe] => (Allow) C:\users\david\appdata\local\temp\gw2.exe FirewallRules: [UDP Query User{BC03000E-34C9-42A0-BE67-C5D6836B2E66}C:\users\david\appdata\local\temp\gw2.exe] => (Allow) C:\users\david\appdata\local\temp\gw2.exe FirewallRules: [TCP Query User{6E2FA417-5036-4C08-BC70-4BD1E61F52B5}C:\users\david\appdata\local\temp\gw2.exe] => (Block) C:\users\david\appdata\local\temp\gw2.exe FirewallRules: [UDP Query User{86FA611A-AF3E-4464-BE16-7C3D92B4C2BE}C:\users\david\appdata\local\temp\gw2.exe] => (Block) C:\users\david\appdata\local\temp\gw2.exe FirewallRules: [TCP Query User{4F4B7CD7-86CA-4330-9900-12DC57C0A708}Z:\guild wars 2\gw2.exe] => (Allow) Z:\guild wars 2\gw2.exe FirewallRules: [UDP Query User{0E02C055-D54E-4C06-9837-37299B7E3223}Z:\guild wars 2\gw2.exe] => (Allow) Z:\guild wars 2\gw2.exe FirewallRules: [TCP Query User{DF09ED8A-5D50-4227-96B9-6AD87DB05086}Z:\guild wars 2\gw2.exe] => (Block) Z:\guild wars 2\gw2.exe FirewallRules: [UDP Query User{FC96D556-8701-4922-ABB7-EE1AE92B0E3A}Z:\guild wars 2\gw2.exe] => (Block) Z:\guild wars 2\gw2.exe FirewallRules: [{700905C6-D28A-47EF-94EA-590E554AF416}] => (Allow) Z:\Games\Steam.exe FirewallRules: [{2B238BD3-F529-4952-AAA8-84F0A4588AF5}] => (Allow) Z:\Games\Steam.exe FirewallRules: [{E3736200-CABF-4788-A56A-98DAB62CBAA8}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3.exe FirewallRules: [{0F1A0CD7-1AE3-4BC8-BEB4-A49CAFB45C5C}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3.exe FirewallRules: [{17486E0D-DBED-4F52-9FBD-910EC8D7D2B5}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3.exe FirewallRules: [{21EF5922-3329-4A53-B5BD-61EB815EEE38}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3.exe FirewallRules: [{65E1DD2D-A670-4787-AA62-567F1CC8C8A2}] => (Allow) Z:\Games\SteamApps\common\Stronghold\Stronghold.exe FirewallRules: [{6E96FD90-EF2D-4388-9F85-4BB6A0320657}] => (Allow) Z:\Games\SteamApps\common\Stronghold\Stronghold.exe FirewallRules: [{FC15EF63-6594-49C0-A62B-36A62F2D2993}] => (Allow) Z:\Games\SteamApps\common\Portal 2\portal2.exe FirewallRules: [{8BD77877-1B2D-420B-99A6-CC4B87643FD3}] => (Allow) Z:\Games\SteamApps\common\Portal 2\portal2.exe FirewallRules: [{5F752A58-1128-4A9E-A95F-FF4B105A0BEF}] => (Allow) Z:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [{6DCB2806-881E-4F78-AD29-DE24C873E509}] => (Allow) Z:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [{35AC8BDC-DBD7-4719-8C03-7A8C48B21EB7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{9334300C-A4CE-4DCE-A738-CF4D2CC8FF35}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{A554938D-A67E-4E86-B81B-4C6621EF4F0C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{EE24EC03-8936-4451-A1FC-8026A5B88B2A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{4E723DE6-53BD-4CFF-92C7-D6FC772B18DE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{5601D601-6474-4291-9D13-DEB9D9DD84E9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{5A1DC87F-A063-4FAA-9C2C-6ACDB978DDE9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{9C9E0E91-5823-4035-996D-4D5A6400394F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{B80446DD-F66B-4450-841F-F857DF92B330}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{0F803EF3-66F0-4F38-9A43-5D41D5370717}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{4F4E4682-67C8-4EA8-B309-500178D043DF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{34DE4F50-9A29-4745-9F46-87D147023E22}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe FirewallRules: [{A449883D-1E9C-45C9-93A0-9DAFCD8A074F}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe FirewallRules: [{D79FC307-D60D-419D-84F4-2A90E3152D27}] => (Allow) Z:\Games\Steam.exe FirewallRules: [{CEDC333B-BE3B-4AF4-BAAE-1FD953590275}] => (Allow) Z:\Games\Steam.exe FirewallRules: [{86944573-AE55-4303-8D36-7A418651D713}] => (Allow) Z:\Games\SteamApps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe FirewallRules: [{3E603A69-D149-4E4D-9733-30D7D40BA17C}] => (Allow) Z:\Games\SteamApps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe FirewallRules: [{6AB93E02-6E42-4EE5-9812-59E33595708A}] => (Allow) Z:\Games\SteamApps\common\Warframe\Tools\Launcher.exe FirewallRules: [{07A1461A-854A-4EEE-85D1-4EC96741C24A}] => (Allow) Z:\Games\SteamApps\common\Warframe\Tools\Launcher.exe FirewallRules: [{58523A24-D250-469E-9FC8-82BC524E36D1}] => (Allow) Z:\Games\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{62B213A0-742E-49D7-9085-531D8EC27684}] => (Allow) Z:\Games\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{CAD2EF51-14D1-4A71-9362-52DAB301A4A5}] => (Allow) Z:\Games\SteamApps\common\Rollercoaster Tycoon 2\RCT2.EXE FirewallRules: [{6C31E55E-05EA-482B-8BD7-10597F200058}] => (Allow) Z:\Games\SteamApps\common\Rollercoaster Tycoon 2\RCT2.EXE FirewallRules: [{3AEB54B6-2FB6-4AB4-B1DE-6EEE1BB800FC}] => (Allow) Z:\Games\SteamApps\common\The Stanley Parable\stanley.exe FirewallRules: [{F4B378A9-5D33-4BF1-97A0-E55B70954A77}] => (Allow) Z:\Games\SteamApps\common\The Stanley Parable\stanley.exe FirewallRules: [{883D58D6-442B-47D9-AC16-AD1EDABBE269}] => (Allow) Z:\Games\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe FirewallRules: [{68AB02E6-918A-42B5-84E0-CE13397CDC22}] => (Allow) Z:\Games\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe FirewallRules: [{86025F3D-99D6-4028-A726-32CBA3C3B8D7}] => (Allow) Z:\Games\SteamApps\common\Skyrim\SkyrimLauncher.exe FirewallRules: [{ABBBDAF1-B8DF-4E0C-AFC7-D6D2BC73C755}] => (Allow) Z:\Games\SteamApps\common\Skyrim\SkyrimLauncher.exe FirewallRules: [{A3F1E7ED-50CE-44E4-82F7-1EF683488342}] => (Allow) Z:\Games\SteamApps\common\Counter-Strike Source\hl2.exe FirewallRules: [{54A90F5B-E73D-43B0-9EB7-68C329BF66BD}] => (Allow) Z:\Games\SteamApps\common\Counter-Strike Source\hl2.exe FirewallRules: [{C4FD8BC6-DB99-40CD-A25B-96E016A5B357}] => (Allow) Z:\Games\SteamApps\common\GarrysMod\hl2.exe FirewallRules: [{A875C5D3-705F-4039-946F-5A1D5774B8BC}] => (Allow) Z:\Games\SteamApps\common\GarrysMod\hl2.exe FirewallRules: [{FEDBE261-17E4-4F75-8B7A-EBE4524AD17B}] => (Allow) Z:\Games\SteamApps\common\Sid Meier's Civilization V\Launcher.exe FirewallRules: [{4B124CB8-01F5-44D3-B37B-803753493D4B}] => (Allow) Z:\Games\SteamApps\common\Sid Meier's Civilization V\Launcher.exe FirewallRules: [TCP Query User{CD2572A6-4046-4F60-BE6B-3B9733889073}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [UDP Query User{FE7C98ED-8756-4AFF-9171-F6A4BCB4A7FC}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [{A23F4D4F-38B0-4602-8361-D07F8C7BE0B5}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3launcher.exe FirewallRules: [{C1B6EA64-8449-4E1E-80AC-AC5BED9A95E5}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3launcher.exe FirewallRules: [{A2BEC3A8-5E6A-4897-9EE1-38337113DC3B}] => (Allow) Z:\Games\bin\steamwebhelper.exe FirewallRules: [{E4352066-C2CD-49EE-81ED-B4618699AF40}] => (Allow) Z:\Games\bin\steamwebhelper.exe FirewallRules: [{76A1B072-8C1F-4391-8B75-AB8C30C11550}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.exe FirewallRules: [{75730072-F3B5-4D4C-8B4B-C6A0678532A7}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{F909DB4B-8A5F-45BD-A34B-1E1BB8A831F3}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.exe FirewallRules: [{DEB8015A-CDB5-4AA7-9228-D78F1425C5CD}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{3C03D453-F5A5-47AC-9625-5CE5B0F310E0}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.exe FirewallRules: [{8FD6AC40-BDC2-4F94-8192-2F5ABB5EA792}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{1803DE21-33B2-4A4D-B687-82371C309371}] => (Allow) z:\Games\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{49198E37-D83D-467E-9B6C-12C463EEB66F}] => (Allow) z:\Games\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{F75B9513-2C19-49C5-8966-678858A21E59}] => (Allow) Z:\Games\SteamApps\common\Stronghold Kingdoms\StrongholdKingdoms.exe FirewallRules: [{88772D8A-E209-49FF-BF19-79F623BE9A36}] => (Allow) Z:\Games\SteamApps\common\Stronghold Kingdoms\StrongholdKingdoms.exe FirewallRules: [{328913F2-5395-4DB8-9601-931114ACA877}] => (Allow) Z:\Games\SteamApps\common\ARMA Cold War Assault\ColdWarAssault.exe FirewallRules: [{7054E4AF-E8B8-4D10-B6D6-2A8C8C3E5696}] => (Allow) Z:\Games\SteamApps\common\ARMA Cold War Assault\ColdWarAssault.exe FirewallRules: [{47549FB8-DF0C-42AD-AE07-555747C394A3}] => (Allow) Z:\Games\SteamApps\common\Only If\Only If.exe FirewallRules: [{FF959803-941F-4E92-9F9F-F40DF4ACA805}] => (Allow) Z:\Games\SteamApps\common\Only If\Only If.exe FirewallRules: [{006FA18E-C106-4BD2-AC63-DDF5C48BCBFC}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{3D651F4A-A4D6-48C4-BD61-C40968950417}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{4A37B996-84A3-406A-9E5D-728320697864}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{061D577F-0467-4E32-9A22-45B6F9A8CCED}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{1BF06112-F24A-4EF6-8924-A3C1EE1B03B5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{85CD6766-B06D-46BB-95B7-979AF591EF17}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{6E211893-FB11-49EF-A7BB-EAB614839D1E}] => (Allow) Z:\Non-Steam Games\ACRSP.exe FirewallRules: [{963E31D8-9921-46CD-BA77-4CE6CA9E2565}] => (Allow) Z:\Non-Steam Games\ACRSP.exe FirewallRules: [{79CC9C0D-6382-4703-99BB-3966FBF144B7}] => (Allow) Z:\Non-Steam Games\ACRMP.exe FirewallRules: [{FF283063-017B-427D-A7C4-C531ADE4A450}] => (Allow) Z:\Non-Steam Games\ACRMP.exe FirewallRules: [{62089326-B26E-4123-A0D5-8DDDA8684B3B}] => (Allow) Z:\Non-Steam Games\AssassinsCreedRevelations.exe FirewallRules: [{7F690C66-EFE0-4EEB-9B2A-5DBABCD341DB}] => (Allow) Z:\Non-Steam Games\AssassinsCreedRevelations.exe FirewallRules: [{0E131332-5D83-4924-9548-A2EED5553130}] => (Allow) C:\Users\David\AppData\Local\Temp\7zS481D\HPDiagnosticCoreUI.exe FirewallRules: [{06B9D15F-1A4E-483A-A39B-B51EF4A65B53}] => (Allow) C:\Users\David\AppData\Local\Temp\7zS481D\HPDiagnosticCoreUI.exe FirewallRules: [{8CAF9B43-00DA-4C77-8B16-F67FB6CB0E60}] => (Allow) C:\Users\David\AppData\Local\Temp\7zS4926\HPDiagnosticCoreUI.exe FirewallRules: [{1A457CD1-7303-43C4-A9C5-E7AAE3BBFD52}] => (Allow) C:\Users\David\AppData\Local\Temp\7zS4926\HPDiagnosticCoreUI.exe FirewallRules: [{8549C253-DB49-453D-BE5E-D469E42B55D8}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe FirewallRules: [{2C3AC473-A57C-4889-BF6C-519F73116CA2}] => (Allow) LPort=5357 FirewallRules: [{A52C1FD7-A98B-451F-BC09-D34A0C7EFEE1}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{A8512ABB-AC4F-4880-BB61-359330061EB5}] => (Allow) Z:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe FirewallRules: [{F47FCA84-D34F-4B8D-8E3F-C2EF688BC166}] => (Allow) Z:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe FirewallRules: [{60BE3BA6-E95D-4F78-8ECC-410D1A4ACC30}] => (Allow) Z:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe FirewallRules: [{5F790643-B364-4574-A25B-937DBD97F061}] => (Allow) Z:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe FirewallRules: [{83F4B6A6-4F40-41AD-B14B-4ACB03520315}] => (Allow) Z:\Program Files (x86)\Origin Games\Crusader No Remorse\data\Game\DOSBox\DOSBox.exe FirewallRules: [{4C82AFEA-ECC7-4DA3-A784-6BEC7BED53A6}] => (Allow) Z:\Program Files (x86)\Origin Games\Crusader No Remorse\data\Game\DOSBox\DOSBox.exe FirewallRules: [{8C3A27C1-A5F7-4260-ADCA-E3F9F4698289}] => (Allow) Z:\Games\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe FirewallRules: [{783D46BB-1DAB-4F11-B620-CF0647004C4D}] => (Allow) Z:\Games\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe FirewallRules: [{59891B23-7664-43F2-B237-0E96D38C355E}] => (Allow) Z:\Games\SteamApps\common\Prison Architect\Prison Architect.exe FirewallRules: [{301B374D-AB34-4371-A07D-601045A8E593}] => (Allow) Z:\Games\SteamApps\common\Prison Architect\Prison Architect.exe FirewallRules: [TCP Query User{C170D3F4-647F-454C-A5F0-A9E1DD0675E6}Z:\games\steamapps\common\total war rome ii\rome2.exe] => (Block) Z:\games\steamapps\common\total war rome ii\rome2.exe FirewallRules: [UDP Query User{91E5C09A-CAD6-4BCD-B0D6-5B59CF079205}Z:\games\steamapps\common\total war rome ii\rome2.exe] => (Block) Z:\games\steamapps\common\total war rome ii\rome2.exe FirewallRules: [{A3AF1EA8-4C48-42E5-A445-9E4B3A2BC829}] => (Allow) Z:\Games\SteamApps\common\Half-Life 1 Source Deathmatch\hl2.exe FirewallRules: [{B079859F-419F-488C-9CE1-20A5891DFB47}] => (Allow) Z:\Games\SteamApps\common\Half-Life 1 Source Deathmatch\hl2.exe FirewallRules: [{7E32429E-BD95-4A91-B40F-5F143F53C15E}] => (Allow) Z:\Games\SteamApps\common\Half-Life 2\hl2.exe FirewallRules: [{2CF467D1-B456-4CEE-AEB1-D24769B5CA41}] => (Allow) Z:\Games\SteamApps\common\Half-Life 2\hl2.exe FirewallRules: [{79FD1496-E6AA-4449-BD67-266228F60BE4}] => (Allow) Z:\Games\SteamApps\common\Half-Life\hl.exe FirewallRules: [{78A92653-2654-4CBD-9981-2A947CC98722}] => (Allow) Z:\Games\SteamApps\common\Half-Life\hl.exe FirewallRules: [{BC9916B6-0BE5-41B5-94C9-ACF10F401018}] => (Allow) Z:\Games\SteamApps\common\Wolfenstein.The.New.Order.DE\WolfNewOrder_x64.exe FirewallRules: [{5B5018BB-CC18-4335-9153-B2D4AA7BB01A}] => (Allow) Z:\Games\SteamApps\common\Wolfenstein.The.New.Order.DE\WolfNewOrder_x64.exe FirewallRules: [{316A39E5-2634-48D2-AC49-2C567003A329}] => (Allow) Z:\Games\SteamApps\common\Half-Life 2 Deathmatch\hl2.exe FirewallRules: [{3429DE28-7345-4E31-9ADE-CD700FF46007}] => (Allow) Z:\Games\SteamApps\common\Half-Life 2 Deathmatch\hl2.exe FirewallRules: [{12BEBCB6-6593-4E3B-B46D-2318DFB016B2}] => (Allow) Z:\Games\SteamApps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe FirewallRules: [{26D88824-5489-4AEF-8BB6-C71AC5AB2245}] => (Allow) Z:\Games\SteamApps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe FirewallRules: [{5525D1A4-CA70-4C4B-8C20-4F785EE9FF60}] => (Allow) Z:\Games\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe FirewallRules: [{573FE97F-D889-4BCD-89CA-7674B90767F9}] => (Allow) Z:\Games\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe FirewallRules: [{4CB21D58-F59D-427C-87E9-1529D3871C02}] => (Allow) Z:\Games\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{753567FF-9F83-45B4-8EAB-07707239EFE8}] => (Allow) Z:\Games\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{3F4E0C02-0612-459C-B6DE-CA9952AD5635}] => (Allow) Z:\Games\SteamApps\common\The Way of Life\TheWayOfLifeDemoWindows.exe FirewallRules: [{0E5AE006-90F1-4E87-8430-DBB103AFA4C1}] => (Allow) Z:\Games\SteamApps\common\The Way of Life\TheWayOfLifeDemoWindows.exe FirewallRules: [{B375CC6E-7966-4E52-B143-2DFD2202C1F3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{23529FFE-488D-4A89-8657-487B6B9AF0CD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A6242E31-AAC4-4579-9F10-EF1587B7C2EE}] => (Allow) Z:\Games\SteamApps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe FirewallRules: [{BC0D2AD8-0DC1-4200-91A6-C278D7394590}] => (Allow) Z:\Games\SteamApps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe FirewallRules: [{3BBBE607-1B34-4BC7-B0E8-CAE105D1335C}] => (Allow) Z:\Games\SteamApps\common\Hearts of Iron 3\hoi3.exe FirewallRules: [{E9FB6D9F-3963-4169-AF12-A6781FA74D03}] => (Allow) Z:\Games\SteamApps\common\Hearts of Iron 3\hoi3.exe FirewallRules: [{C736EB6B-57B2-4CF7-8808-5AD7C6A5F247}] => (Allow) Z:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{7C5CA459-DB1A-4F24-A3F5-F1228548B7DD}] => (Allow) Z:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{E9AEBA7C-CBFF-4198-B73F-F38D3DE9A4FA}] => (Allow) Z:\Games\SteamApps\common\Saints Row IV\SaintsRowIV.exe FirewallRules: [{19307BFC-A394-4989-99D9-9776C7318E76}] => (Allow) Z:\Games\SteamApps\common\Saints Row IV\SaintsRowIV.exe FirewallRules: [{F9B16204-824A-4562-87AF-EC6F4FE991A5}] => (Allow) Z:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe FirewallRules: [{BF8F9A4A-B996-4920-9F87-AA7576FF893E}] => (Allow) Z:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe FirewallRules: [{95787CC0-09CB-4EB1-BA33-7375EFD47E3A}] => (Allow) Z:\Games\SteamApps\common\Total War Rome II\launcher\launcher.exe FirewallRules: [{BAACB87D-1238-4991-B032-FD347EACD597}] => (Allow) Z:\Games\SteamApps\common\Total War Rome II\launcher\launcher.exe FirewallRules: [{F5BA0B2B-3E8F-4E77-BD4C-3A5E5CC4A183}] => (Allow) Z:\Games\SteamApps\common\David\David.exe FirewallRules: [{B19B9293-FD71-4AB0-AD8E-2E7A38EE732B}] => (Allow) Z:\Games\SteamApps\common\David\David.exe FirewallRules: [{FA663F0A-5BB8-4A78-9469-1AA0AEA91318}] => (Allow) Z:\Games\SteamApps\common\Cities_Skylines\Cities.exe FirewallRules: [{95250FFD-D847-4B99-8DE0-27D86400288E}] => (Allow) Z:\Games\SteamApps\common\Cities_Skylines\Cities.exe FirewallRules: [TCP Query User{E59DABB0-0654-4F27-9A1E-C3E5F77D51F0}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{841DA21C-21A8-459A-BFEC-6A5A487F8E42}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{4734F1EA-4B27-42F8-81EB-5B7FDC80836C}] => (Allow) Z:\Games\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe FirewallRules: [{06223D37-09F7-4C50-B333-40B77A2B9540}] => (Allow) Z:\Games\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe FirewallRules: [{6756BF04-C815-486F-A0B0-B390B5C64B9B}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{4F2CD76D-32EF-454E-833C-DC9B359990E3}] => (Allow) Z:\Games\SteamApps\common\POSTAL2Complete\System\Postal2.exe FirewallRules: [{FF841279-0E0E-4D38-97D1-65289053B29B}] => (Allow) Z:\Games\SteamApps\common\POSTAL2Complete\System\Postal2.exe FirewallRules: [{D014C531-8764-47D5-8AE5-5A7B9EAD4B6B}] => (Allow) Z:\Games\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe FirewallRules: [{E9ABEFC9-0B56-46B7-8C98-2BC2B00AB00A}] => (Allow) Z:\Games\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe FirewallRules: [{E34CA4CE-8B61-434D-8F4C-9DFE22B4C9D3}] => (Allow) Z:\Games\SteamApps\common\The Four Kings Casino and Slots\Casino.exe FirewallRules: [{49C3CCD1-E13A-4D27-A158-AB4CACC3730B}] => (Allow) Z:\Games\SteamApps\common\The Four Kings Casino and Slots\Casino.exe FirewallRules: [{F654B851-38B2-41A6-98BF-C69600D93FD5}] => (Allow) Z:\Games\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe FirewallRules: [{1E9CDDCA-13FD-4F54-92B7-C26F0F03CBE7}] => (Allow) Z:\Games\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe FirewallRules: [TCP Query User{003261C1-5B67-4229-8137-750387D105B5}Z:\games\secondlifeviewer\slvoice.exe] => (Allow) Z:\games\secondlifeviewer\slvoice.exe FirewallRules: [UDP Query User{B80C0A4C-0800-45A9-B5FF-D63435530B1B}Z:\games\secondlifeviewer\slvoice.exe] => (Allow) Z:\games\secondlifeviewer\slvoice.exe FirewallRules: [{511BFDA6-51EA-4221-834A-1A7719D0B3E4}] => (Allow) Z:\Games\SteamApps\common\Dead or Alive 5 Last Round\game.exe FirewallRules: [{9613B1A7-46FF-4EC2-B422-C02AC60ED33A}] => (Allow) Z:\Games\SteamApps\common\Dead or Alive 5 Last Round\game.exe FirewallRules: [{2E175176-80FB-4B6E-8FBD-37D55E1DAEF0}] => (Allow) Z:\Games\SteamApps\common\Dead or Alive 5 Last Round\startup_setting.exe FirewallRules: [{12E7C493-48D6-4D4A-9238-5D934D253AB9}] => (Allow) Z:\Games\SteamApps\common\Dead or Alive 5 Last Round\startup_setting.exe FirewallRules: [{2312BF7F-F248-4282-B26F-311871E78EB9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{4D8E25D4-69C2-4412-91C3-6D3523A8AD59}] => (Allow) Z:\Games\SteamApps\common\HER STORY\HerStory.exe FirewallRules: [{8F87A658-0767-4C93-AD0D-B23E457FE1C4}] => (Allow) Z:\Games\SteamApps\common\HER STORY\HerStory.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15226 Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15226 Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (06/28/2015 06:46:41 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (06/28/2015 05:24:59 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (06/28/2015 05:24:41 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (06/28/2015 05:24:41 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (06/28/2015 05:24:38 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (06/26/2015 08:08:38 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 18 5.7.3.9.4.E.F.1.4.A.8.0.3.6.8.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR David-PC-2.local. Error: (06/26/2015 08:08:38 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.1.110:5353 16 5.7.3.9.4.E.F.1.4.A.8.0.3.6.8.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR David-PC.local. System errors: ============= Error: (06/29/2015 11:56:07 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 29.06.2015 um 23:53:22 unerwartet heruntergefahren. Error: (06/28/2015 05:31:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (06/28/2015 05:31:33 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\David\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (06/28/2015 05:31:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (06/28/2015 05:31:33 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\David\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (06/28/2015 05:31:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (06/28/2015 05:31:33 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\David\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (06/28/2015 05:28:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (06/28/2015 05:28:05 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\David\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Error: (06/28/2015 05:28:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Microsoft Office: ========================= Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 15226 Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 15226 Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (06/28/2015 06:46:41 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (06/28/2015 05:24:59 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\David\Downloads\esetsmartinstaller_deu.exe Error: (06/28/2015 05:24:41 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\David\Downloads\esetsmartinstaller_deu.exe Error: (06/28/2015 05:24:41 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\David\Downloads\esetsmartinstaller_deu.exe Error: (06/28/2015 05:24:38 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\David\Downloads\esetsmartinstaller_deu.exe Error: (06/26/2015 08:08:38 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 18 5.7.3.9.4.E.F.1.4.A.8.0.3.6.8.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR David-PC-2.local. Error: (06/26/2015 08:08:38 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.1.110:5353 16 5.7.3.9.4.E.F.1.4.A.8.0.3.6.8.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR David-PC.local. CodeIntegrity Errors: =================================== Date: 2015-06-25 17:50:56.871 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2015-06-25 17:50:56.793 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz Percentage of memory in use: 17% Total physical RAM: 16339.26 MB Available physical RAM: 13417.05 MB Total Pagefile: 32676.72 MB Available Pagefile: 29655.52 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:223.57 GB) (Free:105.65 GB) NTFS Drive z: (Volume) (Fixed) (Total:1862.92 GB) (Free:1504.52 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 3885F7B1) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=1862.9 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 84A0769B) Partition 1: (Not Active) - (Size=223.6 GB) - (Type=07 NTFS) ==================== End of log ============================ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01 Ran by David (administrator) on DAVID-PC on 03-07-2015 14:29:12 Running from C:\Users\David\Desktop Loaded Profiles: David (Available Profiles: David) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (F-Secure Corporation) C:\Program Files (x86)\Internet Security\fshoster32.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\CCF_Reputation\fsorsp.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\fsgk32.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE (F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe (F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSHDLL64.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSM32.EXE (F-Secure Corporation) C:\Program Files (x86)\Internet Security\fshoster32.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Valve Corporation) Z:\Games\Steam.exe (Valve Corporation) Z:\Games\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) Z:\Games\bin\steamwebhelper.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6457960 2011-12-28] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin) HKLM-x32\...\Run: [F-Secure Manager] => C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSM32.EXE [310312 2014-10-14] (F-Secure Corporation) HKLM-x32\...\Run: [F-Secure Hoster (45119)] => C:\Program Files (x86)\Internet Security\fshoster32.exe [187432 2014-02-19] (F-Secure Corporation) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation) Startup: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2013-12-24] ShortcutTarget: GameRanger.lnk -> C:\Users\David\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://wiki-de.guildwars2.com/wiki/Hauptseite SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3975945495-1988407803-2975606891-1000 -> {146E3655-CCF2-416F-8393-25F813A3A4DB} URL = hxxp://www.google.com/search?q={searchTerms}&rlz= BHO: Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https64.dll [2015-06-15] (F-Secure Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2015-06-15] (F-Secure Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{8FEE6159-FC10-4F85-B4B4-4CE56BE64FB4}: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\8aleuple.default FF Homepage: hxxp://wiki-de.guildwars2.com/wiki/Hauptseite FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_194.dll [2015-07-02] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_194.dll [2015-07-02] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll [2013-11-21] (EA Digital Illusions CE AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-02] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [{cf8b227c-139f-4358-99ed-0f6a6d744cca}] - C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\browser\deploy\fs_firefox_https FF Extension: Browsing Protection - C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\browser\deploy\fs_firefox_https [2014-12-09] Chrome: ======= CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-18] CHR Extension: (Google Search) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-18] CHR Extension: (Browsing Protection by F-Secure) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2014-10-07] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03] CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-01] CHR Extension: (Gmail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-18] CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files (x86)/Internet Security/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2014-11-27] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.) R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed] S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-09-27] () [File not signed] R2 fshoster; C:\Program Files (x86)\Internet Security\fshoster32.exe [187432 2014-02-19] (F-Secure Corporation) R3 FSMA; C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2014-10-14] (F-Secure Corporation) R2 FSORSPClient; C:\Program Files (x86)\Internet Security\apps\CCF_Reputation\fsorsp.exe [60456 2015-03-10] (F-Secure Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation) S3 Origin Client Service; Z:\Origin\OriginClientService.exe [1910128 2015-01-31] (Electronic Arts) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-08-20] () S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin) R3 F-Secure Gatekeeper; C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [208424 2015-06-08] (F-Secure Corporation) R1 F-Secure HIPS; C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys [71080 2015-06-08] (F-Secure Corporation) R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [55336 2015-05-28] () R0 fsbts; C:\Windows\SysWOW64\Drivers\fsbts.sys [42672 2013-06-08] () R3 fsni; C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\fsni64.sys [95784 2015-06-15] (F-Secure Corporation) R1 fsvista; C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-06-24] () R3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation) U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-03 14:29 - 2015-07-03 14:29 - 00017301 _____ C:\Users\David\Desktop\FRST.txt 2015-07-03 14:28 - 2015-07-03 14:28 - 02112512 _____ (Farbar) C:\Users\David\Desktop\FRST64.exe 2015-07-02 16:26 - 2015-07-03 14:29 - 00000000 ____D C:\FRST 2015-06-29 16:29 - 2015-06-29 16:29 - 00001379 _____ C:\DelFix.txt 2015-06-29 16:29 - 2015-06-29 16:29 - 00000000 ____D C:\Windows\ERUNT 2015-06-26 10:30 - 2015-06-26 10:30 - 00000207 _____ C:\Windows\tweaking.com-regbackup-DAVID-PC-Windows-7-Ultimate-(64-bit).dat 2015-06-25 17:57 - 2015-06-25 17:57 - 00002032 _____ C:\Users\David\Desktop\Internet Security.lnk 2015-06-25 17:42 - 2015-06-29 16:27 - 00000000 ____D C:\Windows\erdnt 2015-06-20 11:10 - 2015-06-26 10:02 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-06-20 11:10 - 2015-06-20 11:26 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-06-20 11:06 - 2015-06-20 11:06 - 16502728 _____ (Malwarebytes Corp.) C:\Users\David\Downloads\mbar-1.09.1.1004.exe 2015-06-17 23:26 - 2015-06-17 23:26 - 00000000 ____D C:\Windows\pss 2015-06-15 22:32 - 2015-06-15 22:32 - 00000000 ____D C:\Users\David\Documents\KoeiTecmo 2015-06-12 18:46 - 2015-06-17 23:14 - 00000000 ____D C:\Users\David\AppData\Roaming\SecondLife 2015-06-12 18:45 - 2015-06-12 18:45 - 32384792 _____ C:\Users\David\Downloads\Second_Life_3_7_29_301305_i686_Setup.exe 2015-06-11 20:24 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-06-11 20:24 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-06-11 20:24 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-06-11 20:24 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-06-11 20:24 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-06-11 20:24 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-06-11 20:24 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-06-11 20:24 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-06-11 20:24 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-06-11 20:24 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-06-11 20:24 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-06-11 20:24 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-06-11 20:24 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-06-11 20:24 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2015-06-11 20:24 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-06-11 20:24 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-06-11 20:24 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-06-11 20:24 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-06-11 20:24 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-06-11 20:24 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2015-06-11 20:24 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2015-06-11 20:24 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-06-11 20:24 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2015-06-11 20:24 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2015-06-11 20:24 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-06-11 20:24 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2015-06-11 20:24 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-06-11 20:24 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-06-11 20:24 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-06-11 20:24 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-06-11 20:24 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-06-11 20:24 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-06-11 20:24 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-06-11 20:24 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-06-11 20:24 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-06-11 20:24 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-06-11 20:24 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-06-11 20:24 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-06-11 20:24 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-06-11 20:24 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-06-11 20:24 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-06-11 20:24 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-06-11 20:24 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-06-11 20:24 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-06-11 20:24 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-06-11 20:24 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-06-11 20:24 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-06-11 20:24 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-06-11 20:24 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-06-11 20:24 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-06-11 20:24 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-06-11 20:24 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-06-11 20:24 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-06-11 20:24 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-06-11 20:24 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-06-11 20:24 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-06-11 20:24 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-06-11 20:24 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-06-11 20:24 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-06-11 20:24 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-06-11 20:24 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-06-11 20:24 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-06-11 20:24 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-06-11 20:24 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-06-11 20:24 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-06-11 20:24 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-06-11 20:24 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-06-11 20:24 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-06-11 20:24 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-06-11 20:24 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-06-11 20:24 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-06-11 20:24 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-06-11 20:24 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-06-11 20:24 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-06-11 20:24 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-06-11 20:24 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-06-11 20:24 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-06-11 20:24 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-06-11 20:24 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-06-11 20:24 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-06-11 20:24 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-06-11 20:24 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-06-11 20:24 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-06-11 20:24 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-06-11 20:24 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-06-11 20:24 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-06-11 20:24 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-06-11 20:24 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-06-11 20:24 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-06-11 20:24 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-06-11 20:24 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-06-11 20:24 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-06-11 20:24 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-06-11 20:24 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-06-11 20:24 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-06-11 20:24 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-06-11 20:24 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-06-11 20:24 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-06-11 20:24 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-06-11 20:24 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-06-11 20:24 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-06-11 20:24 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-06-11 20:24 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-06-11 20:24 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-06-11 20:24 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-06-11 20:24 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-06-11 20:24 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2015-06-11 20:24 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2015-06-11 20:24 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2015-06-11 20:24 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2015-06-11 20:24 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2015-06-11 20:24 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2015-06-11 20:24 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2015-06-11 20:24 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2015-06-04 11:17 - 2015-06-07 19:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-03 14:23 - 2013-05-31 21:35 - 01358840 _____ C:\Windows\WindowsUpdate.log 2015-07-03 14:02 - 2013-07-24 20:59 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-07-03 13:55 - 2013-07-18 16:45 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-07-03 13:10 - 2013-07-18 16:45 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-07-03 13:05 - 2009-07-14 06:45 - 00021472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-07-03 13:05 - 2009-07-14 06:45 - 00021472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-07-03 13:01 - 2010-09-15 15:02 - 00648600 _____ C:\Windows\system32\perfh01F.dat 2015-07-03 13:01 - 2010-09-15 15:02 - 00139982 _____ C:\Windows\system32\perfc01F.dat 2015-07-03 13:01 - 2010-09-15 14:50 - 00720936 _____ C:\Windows\system32\prfh0816.dat 2015-07-03 13:01 - 2010-09-15 14:50 - 00152888 _____ C:\Windows\system32\prfc0816.dat 2015-07-03 13:01 - 2010-09-15 14:43 - 00737374 _____ C:\Windows\system32\perfh00A.dat 2015-07-03 13:01 - 2010-09-15 14:43 - 00158456 _____ C:\Windows\system32\perfc00A.dat 2015-07-03 13:01 - 2010-02-01 14:36 - 00699416 _____ C:\Windows\system32\perfh007.dat 2015-07-03 13:01 - 2010-02-01 14:36 - 00149556 _____ C:\Windows\system32\perfc007.dat 2015-07-03 13:01 - 2010-02-01 14:27 - 00737634 _____ C:\Windows\system32\perfh00C.dat 2015-07-03 13:01 - 2010-02-01 14:27 - 00149562 _____ C:\Windows\system32\perfc00C.dat 2015-07-03 13:01 - 2010-02-01 14:18 - 00731964 _____ C:\Windows\system32\perfh010.dat 2015-07-03 13:01 - 2010-02-01 14:18 - 00146828 _____ C:\Windows\system32\perfc010.dat 2015-07-03 13:01 - 2009-07-14 07:13 - 05944428 _____ C:\Windows\system32\PerfStringBackup.INI 2015-07-03 12:57 - 2013-05-31 22:05 - 00000000 ____D C:\ProgramData\NVIDIA 2015-07-03 12:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-07-03 12:57 - 2009-07-14 06:51 - 00191215 _____ C:\Windows\setupact.log 2015-07-02 17:05 - 2013-08-24 16:23 - 00000000 ____D C:\Users\David\AppData\Roaming\TS3Client 2015-07-02 16:52 - 2014-06-04 17:58 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-07-02 16:52 - 2014-06-04 17:58 - 00000000 ____D C:\Program Files (x86)\Java 2015-07-02 16:42 - 2014-06-24 12:13 - 00000000 ____D C:\Users\David\AppData\Local\Adobe 2015-07-02 16:42 - 2013-07-24 20:59 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-02 16:42 - 2013-07-24 20:59 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-02 16:42 - 2013-07-24 20:59 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-01 21:37 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-06-28 22:00 - 2013-07-18 16:42 - 00239740 _____ C:\Windows\PFRO.log 2015-06-26 10:51 - 2013-06-08 11:35 - 00016716 _____ C:\Windows\AVMInstall.Log 2015-06-26 10:51 - 2013-06-08 11:35 - 00000000 ____D C:\Program Files (x86)\avmwlanstick 2015-06-25 21:17 - 2014-06-30 18:20 - 00000000 ____D C:\Users\David\Desktop\Steam Games 2015-06-25 17:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2015-06-25 17:51 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2015-06-25 17:35 - 2014-12-27 21:05 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-06-23 19:56 - 2013-07-18 16:45 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-06-22 21:31 - 2015-01-12 15:43 - 00007605 _____ C:\Users\David\AppData\Local\Resmon.ResmonCfg 2015-06-22 21:30 - 2014-11-18 15:33 - 00000000 __SHD C:\Users\David\AppData\Local\EmieBrowserModeList 2015-06-22 21:30 - 2014-05-07 16:50 - 00000000 __SHD C:\Users\David\AppData\Local\EmieUserList 2015-06-22 21:30 - 2014-05-07 16:50 - 00000000 __SHD C:\Users\David\AppData\Local\EmieSiteList 2015-06-19 13:39 - 2014-11-16 15:29 - 00000000 ____D C:\ProgramData\Package Cache 2015-06-19 13:39 - 2013-12-24 00:56 - 00000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2015-06-12 12:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-06-12 12:19 - 2009-07-14 06:45 - 00342624 _____ C:\Windows\system32\FNTCACHE.DAT 2015-06-12 12:18 - 2014-12-12 18:44 - 00000000 ____D C:\Windows\system32\appraiser 2015-06-12 12:18 - 2014-05-06 21:12 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sr-Latn-CS 2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR 2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sr-Latn-CS 2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-06-11 23:04 - 2014-02-18 17:44 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-06-11 23:03 - 2013-08-15 21:28 - 00000000 ____D C:\Windows\system32\MRT 2015-06-11 23:01 - 2013-06-08 12:05 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-06-11 20:53 - 2014-07-06 13:22 - 00000000 ____D C:\Users\David\Documents\My Games 2015-06-07 22:33 - 2014-03-08 19:09 - 00000000 ____D C:\Users\David\AppData\Roaming\Skype 2015-06-07 19:59 - 2014-06-04 17:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service ==================== Files in the root of some directories ======= 2015-01-12 15:43 - 2015-06-22 21:31 - 0007605 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg 2008-02-05 14:28 - 2008-02-05 14:28 - 0000051 _____ () C:\Users\David\AppData\Local\setup.txt 2014-11-24 22:03 - 2014-11-24 22:03 - 0000057 _____ () C:\ProgramData\Ament.ini Some files in TEMP: ==================== C:\Users\David\AppData\Local\Temp\jre-8u45-windows-au.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-06-24 16:24 ==================== End of log ============================ |
04.07.2015, 14:52 | #22 |
/// the machine /// TB-Ausbilder | Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Task: {E1B9957F-0B33-48D5-8196-216C04EA75B7} - System32\Tasks\ASUS\i-Setup213717 => C:\Windows\Chipset\AsusSetup.exe [2010-09-08] (ASUSTeK Computer Inc.) Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
05.07.2015, 18:48 | #23 |
| Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinderCode:
ATTFilter Fix result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01 Ran by David at 2015-07-05 19:45:39 Run:2 Running from C:\Users\David\Desktop Loaded Profiles: David (Available Profiles: David) Boot Mode: Normal ============================================== fixlist content: ***************** Task: {E1B9957F-0B33-48D5-8196-216C04EA75B7} - System32\Tasks\ASUS\i-Setup213717 => C:\Windows\Chipset\AsusSetup.exe [2010-09-08] (ASUSTeK Computer Inc.) ***************** "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E1B9957F-0B33-48D5-8196-216C04EA75B7}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E1B9957F-0B33-48D5-8196-216C04EA75B7}" => key removed successfully C:\Windows\System32\Tasks\ASUS\i-Setup213717 => moved successfully. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS\i-Setup213717" => key removed successfully ==== End of Fixlog 19:45:39 ==== |
06.07.2015, 05:46 | #24 |
/// the machine /// TB-Ausbilder | Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Kommt die Meldung noch beim Start?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.07.2015, 21:13 | #25 |
| Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Nein, ich erhalte keine Fehlermeldung mehr. |
07.07.2015, 06:26 | #26 |
/// the machine /// TB-Ausbilder | Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde: Combofix deinstallieren .
Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen. Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung: Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional: NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen. Lade Software von einem sauberen Portal wie . Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.07.2015, 15:14 | #27 |
| Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Ich habe nun ein weiteres Problem! All meine Browser(Chrome, Firefox) sind extrem langsam, Seiten laden langsam und Browserspiele stocken (z.b Agar.io). Allerdings kann ich Onlinespiele wie Counter Strike Problemlos spielen... Ich habe ein Scan laufenlassen. Keine Malwares entdeckt nur die folgenden Dateien konnten nicht geöffnet werden: Code:
ATTFilter Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\HIBERFIL.SYS Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\PAGEFILE.SYS Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\TASKS\GOOGLEUPDATETASKMACHINECORE.JOB Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\TASKS\GOOGLEUPDATETASKMACHINEUA.JOB Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\TASKS\ADOBE FLASH PLAYER UPDATER.JOB Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\SYSTEM32\SYSPREP\PANTHER\IE\DIAGERR.XML Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\SYSTEM32\SYSPREP\PANTHER\IE\DIAGWRN.XML Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\PLA\SYSTEM\SYSTEM DIAGNOSTICS.XML Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\PLA\SYSTEM\SYSTEM PERFORMANCE.XML Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\PANTHER\UNATTENDGC\DIAGERR.XML Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\PANTHER\UNATTENDGC\DIAGWRN.XML Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\USERS\DAVID\APPDATA\LOCAL\TEMP\NVIDIA CORPORATION\NV_CACHE\9E53CAC1F699E676CCC302D9CB5A5F_FCE8395F8FD8A84B_6229CCD76215AEA1_0_0.BIN Datei im Archiv Z:\Games\BWA3.rar\@ModpackBWA3\@R3F_ARMES\Addons\r3f_armes.pbo kann nicht geöffnet werden |
10.07.2015, 07:50 | #28 |
/// the machine /// TB-Ausbilder | Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder Setz einen Browser mal komplett zurück, als Test, und überprüfe den Speed nochmal.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder |
antivirus, anzahl, blockiert, dateien, folge, gelöscht, gen, google, hallo zusammen, internet, klicke, links, löschen, myfilestore, myfilestore.com, netzwerk, ordner, probleme, registry, scan, scanner, seite, startseite, virenscanner, virus, weitergeleitet, weiterleitung |