| coachman | 24.06.2013 19:12 |
Hallo Schrauber, Hi Aneri,
erstmal Danke für die Hilfe!
Hier die Logs, FRST:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2013
Ran by Coach (ATTENTION: The logged in user is not administrator) on 24-06-2013 20:08:02
Running from C:\Users\Coach\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ASUS) C:\Windows\AsScrPro.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Genie9) C:\Program Files\Genie9\Genie Timeline\GenieTimelineAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe [2661672 2012-02-19] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BTMTrayAgent] rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [11407120 2012-03-27] (Intel Corporation)
MountPoints2: {3657a0ba-2b26-11e2-9494-c48508111b14} - "E:\WD SmartWare.exe" autoplay=true
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-03-26] (Intel Corporation)
HKLM-x32\...\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" [3331312 2012-02-24] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe [3058304 2012-05-30] (ASUS)
HKLM-x32\...\Run: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [102568 2012-02-21] (ASUS)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-06-25] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-06-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKCU SearchScopes: DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default
FF Homepage: hxxp://www.google.de
FF NetworkProxy: "ftp", "188.165.204.152"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "188.165.204.152"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "188.165.204.152"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "188.165.204.152"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.9.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll ( )
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: EPUBReader - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F}
FF Extension: WOT - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: exif_viewer - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\exif_viewer@mozilla.doslash.org.xpi
FF Extension: No Name - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\Extensions.rdf
FF Extension: No Name - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\installed-extensions.txt
FF Extension: stealthyextension - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\stealthyextension@gmail.com.xpi
FF Extension: No Name - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: No Name - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi
FF Extension: No Name - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Coach\AppData\Roaming\Mozilla\Firefox\Profiles\us9gq3in.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
==================== Services (Whitelisted) =================
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 DptfParticipantProcessorService; C:\Windows\SysWOW64\DptfParticipantProcessorService.exe [18944 2012-02-20] ()
R2 DptfPolicyConfigTDPService; C:\Windows\SysWOW64\DptfPolicyConfigTDPService.exe [19968 2012-02-20] ()
R2 GenieTimelineService; C:\Program Files\Genie9\Genie Timeline\GenieTimelineService.exe [660056 2012-07-24] (Genie9)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193536 2012-04-10] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] ()
S4 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [229392 2012-09-13] (Nitro PDF Software)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
R3 AiCharger; C:\Windows\SysWow64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.)
R0 assd; C:\Windows\System32\Drivers\assd.sys [27056 2011-10-29] (ASUS Corporation)
R3 AsusVBus; C:\Windows\System32\DRIVERS\AsusVBus.sys [35968 2011-12-21] (Windows (R) Win 7 DDK provider)
R3 AsusVTouch; C:\Windows\System32\DRIVERS\AsusVTouch.sys [16512 2011-11-08] (Windows (R) Win 7 DDK provider)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
S3 AX88772B; C:\Windows\System32\DRIVERS\ax88772b.sys [110592 2012-04-05] (ASIX Electronics Corp.)
S3 CH341SER_A64; C:\Windows\System32\Drivers\CH341S64.SYS [58368 2011-11-04] (www.winchiphead.com)
R3 DptfDevDram; C:\Windows\System32\DRIVERS\DptfDevDram.sys [107288 2012-02-20] (Intel Corporation)
R3 DptfDevFan; C:\Windows\System32\DRIVERS\DptfDevFan.sys [42776 2012-02-20] (Intel Corporation)
R3 DptfDevGen; C:\Windows\System32\DRIVERS\DptfDevGen.sys [64792 2012-02-20] (Intel Corporation)
R3 DptfDevPch; C:\Windows\System32\DRIVERS\DptfDevPch.sys [96024 2012-02-20] (Intel Corporation)
R3 DptfDevProc; C:\Windows\System32\DRIVERS\DptfDevProc.sys [220952 2012-02-20] (Intel Corporation)
R3 DptfManager; C:\Windows\System32\DRIVERS\DptfManager.sys [357656 2012-02-20] (Intel Corporation)
R3 irstrtdv; C:\Windows\System32\DRIVERS\irstrtdv.sys [26504 2012-04-10] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11471872 2012-03-12] (Intel Corporation)
S3 ALSysIO; \??\C:\Users\Admin\AppData\Local\Temp\ALSysIO64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-24 20:08 - 2013-06-24 20:08 - 00000000 ____D C:\FRST
2013-06-24 20:06 - 2013-06-24 20:06 - 01931364 ____A (Farbar) C:\Users\Coach\Desktop\FRST64.exe
2013-06-24 19:11 - 2013-06-24 19:11 - 00043390 ____A C:\Users\Coach\Desktop\logfiles.zip
2013-06-24 18:54 - 2013-06-24 18:54 - 00241266 ____A C:\Users\Coach\Desktop\gmer.txt
2013-06-24 18:19 - 2013-06-24 18:19 - 00090674 ____A C:\Users\Coach\Desktop\Extras.Txt
2013-06-24 18:18 - 2013-06-24 18:18 - 00095686 ____A C:\Users\Coach\Desktop\OTL.Txt
2013-06-24 18:01 - 2013-06-24 18:01 - 00000472 ____A C:\Users\Coach\Desktop\defogger_disable.log
2013-06-24 18:01 - 2013-06-24 18:01 - 00000000 ____A C:\Users\Admin\defogger_reenable
2013-06-24 17:11 - 2013-06-24 17:11 - 00602112 ____A (OldTimer Tools) C:\Users\Coach\Desktop\OTL.exe
2013-06-24 17:11 - 2013-06-24 17:11 - 00377856 ____A C:\Users\Coach\Desktop\gmer_2.1.19163.exe
2013-06-24 17:10 - 2013-06-24 17:10 - 00050477 ____A C:\Users\Coach\Desktop\Defogger.exe
2013-06-17 01:35 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-17 01:35 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-17 01:35 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-17 01:35 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-17 01:35 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-17 01:35 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-17 01:35 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-17 01:35 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-17 01:35 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-17 01:35 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-17 01:35 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-17 01:35 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-13 03:01 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-13 03:01 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-13 03:01 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-13 03:01 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-13 03:01 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-13 03:01 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-13 03:01 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-13 03:01 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-13 03:01 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-13 03:01 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-13 03:01 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-13 03:01 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-13 03:01 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-13 03:01 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-13 03:01 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-13 03:01 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-13 03:01 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-13 03:01 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-13 03:00 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 09:33 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 09:33 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 09:33 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 09:33 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 09:33 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 09:33 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 09:33 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 09:33 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 09:33 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 09:33 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 09:33 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 09:33 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 09:33 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 09:33 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 09:33 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 09:33 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 09:33 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 09:33 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 09:33 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-07 20:39 - 2013-06-07 20:39 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ggsemc_01009.Wdf
2013-06-07 20:39 - 2013-06-07 20:39 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ggflt_01009.Wdf
2013-06-07 20:32 - 2013-06-07 20:32 - 00027760 ____A (Sony Ericsson Mobile Communications) C:\Windows\System32\Drivers\ggsemc.sys
2013-06-07 20:32 - 2013-06-07 20:32 - 00014448 ____A (Sony Ericsson Mobile Communications) C:\Windows\System32\Drivers\ggflt.sys
2013-06-07 20:31 - 2013-06-07 20:31 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-06-07 20:31 - 2013-06-07 20:31 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson
2013-06-07 20:28 - 2013-06-07 20:28 - 00000000 ____D C:\ProgramData\Sony
2013-06-07 20:28 - 2013-06-07 20:28 - 00000000 ____D C:\Program Files (x86)\Sony
2013-06-06 14:33 - 2013-06-06 14:33 - 00000000 ____D C:\Users\Coach\Desktop\Sounds
2013-06-04 17:13 - 2013-06-04 17:13 - 00000365 ____A C:\Users\Coach\Desktop\mac.txt
2013-06-02 20:05 - 2013-06-02 20:17 - 51318230 ____A C:\Users\Coach\Desktop\videotraining-videofile-2362.mp4
2013-05-31 20:26 - 2013-05-31 20:26 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-31 20:26 - 2013-05-31 20:26 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-05-31 20:26 - 2013-05-31 20:26 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-05-31 20:26 - 2013-05-31 20:26 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-31 20:26 - 2013-05-31 20:26 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-31 20:26 - 2013-05-31 20:26 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-05-31 20:26 - 2013-05-31 20:26 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-31 20:26 - 2013-05-31 20:26 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-05-31 20:26 - 2013-05-31 20:26 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-05-31 20:25 - 2013-05-31 20:30 - 00009228 ____A C:\Windows\IE10_main.log
==================== One Month Modified Files and Folders =======
2013-06-24 20:08 - 2013-06-24 20:08 - 00000000 ____D C:\FRST
2013-06-24 20:06 - 2013-06-24 20:06 - 01931364 ____A (Farbar) C:\Users\Coach\Desktop\FRST64.exe
2013-06-24 19:49 - 2012-05-30 23:26 - 00000830 ____A C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-06-24 19:47 - 2011-02-19 06:24 - 00704940 ____A C:\Windows\System32\perfh007.dat
2013-06-24 19:47 - 2011-02-19 06:24 - 00151464 ____A C:\Windows\System32\perfc007.dat
2013-06-24 19:47 - 2009-07-14 07:13 - 01614036 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-24 19:43 - 2012-11-10 13:05 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-24 19:11 - 2013-06-24 19:11 - 00043390 ____A C:\Users\Coach\Desktop\logfiles.zip
2013-06-24 19:11 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-24 19:11 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-24 19:05 - 2012-05-30 23:26 - 00000828 ____A C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-06-24 19:04 - 2012-06-29 15:36 - 00000380 ____A C:\Users\Coach\AppData\Roaming\sp_data.sys
2013-06-24 19:04 - 2012-05-30 23:20 - 01920243 ____A C:\Windows\WindowsUpdate.log
2013-06-24 19:04 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-24 19:04 - 2009-07-14 06:51 - 00082061 ____A C:\Windows\setupact.log
2013-06-24 18:56 - 2012-07-07 16:41 - 00000380 ____A C:\Users\Admin\AppData\Roaming\sp_data.sys
2013-06-24 18:54 - 2013-06-24 18:54 - 00241266 ____A C:\Users\Coach\Desktop\gmer.txt
2013-06-24 18:19 - 2013-06-24 18:19 - 00090674 ____A C:\Users\Coach\Desktop\Extras.Txt
2013-06-24 18:18 - 2013-06-24 18:18 - 00095686 ____A C:\Users\Coach\Desktop\OTL.Txt
2013-06-24 18:01 - 2013-06-24 18:01 - 00000472 ____A C:\Users\Coach\Desktop\defogger_disable.log
2013-06-24 18:01 - 2013-06-24 18:01 - 00000000 ____A C:\Users\Admin\defogger_reenable
2013-06-24 18:01 - 2012-07-07 16:40 - 00000000 ____D C:\users\Admin
2013-06-24 17:11 - 2013-06-24 17:11 - 00602112 ____A (OldTimer Tools) C:\Users\Coach\Desktop\OTL.exe
2013-06-24 17:11 - 2013-06-24 17:11 - 00377856 ____A C:\Users\Coach\Desktop\gmer_2.1.19163.exe
2013-06-24 17:10 - 2013-06-24 17:10 - 00050477 ____A C:\Users\Coach\Desktop\Defogger.exe
2013-06-24 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-24 11:36 - 2012-06-30 17:47 - 00000000 ____D C:\Users\Coach\AppData\Roaming\vlc
2013-06-23 12:02 - 2012-07-15 19:59 - 00000000 ____D C:\Users\Coach\Desktop\Videos zum Gucken
2013-06-20 21:00 - 2012-07-17 15:16 - 00000000 ____D C:\Users\Coach\AppData\Roaming\FileZilla
2013-06-20 20:58 - 2012-07-24 12:33 - 00001456 ____A C:\Users\Coach\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-06-17 23:07 - 2013-04-27 13:48 - 00000512 ____A C:\Windows\SysWOW64\WTCY9853.dat
2013-06-17 23:07 - 2013-04-27 13:48 - 00000023 ____A C:\Windows\Artcut6.INI
2013-06-17 01:00 - 2012-09-09 21:38 - 00000000 ____D C:\Users\Coach\AppData\Roaming\dvdcss
2013-06-13 03:01 - 2012-06-30 14:16 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 02:43 - 2012-07-02 22:21 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 02:43 - 2012-07-02 22:21 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-11 13:10 - 2011-03-10 18:54 - 00000000 __AHD C:\Users\Coach\AppData\Local\7WTdhgAAOqXwrw
2013-06-08 19:16 - 2012-02-24 03:34 - 00014034 ____A C:\Windows\PFRO.log
2013-06-08 19:16 - 2009-07-14 06:45 - 04892920 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-08 16:08 - 2013-06-17 01:35 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-17 01:35 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-17 01:35 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-17 01:35 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-17 01:35 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-17 01:35 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-17 01:35 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-17 01:35 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-17 01:35 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-17 01:35 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-17 01:35 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-17 01:35 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-07 20:39 - 2013-06-07 20:39 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ggsemc_01009.Wdf
2013-06-07 20:39 - 2013-06-07 20:39 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ggflt_01009.Wdf
2013-06-07 20:32 - 2013-06-07 20:32 - 00027760 ____A (Sony Ericsson Mobile Communications) C:\Windows\System32\Drivers\ggsemc.sys
2013-06-07 20:32 - 2013-06-07 20:32 - 00014448 ____A (Sony Ericsson Mobile Communications) C:\Windows\System32\Drivers\ggflt.sys
2013-06-07 20:31 - 2013-06-07 20:31 - 00000000 ____D C:\ProgramData\Sony Ericsson
2013-06-07 20:31 - 2013-06-07 20:31 - 00000000 ____D C:\Program Files (x86)\Sony Ericsson
2013-06-07 20:30 - 2012-05-30 23:27 - 00207878 ____A C:\Windows\DPINST.LOG
2013-06-07 20:28 - 2013-06-07 20:28 - 00000000 ____D C:\ProgramData\Sony
2013-06-07 20:28 - 2013-06-07 20:28 - 00000000 ____D C:\Program Files (x86)\Sony
2013-06-07 20:28 - 2012-05-30 23:25 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-06 14:33 - 2013-06-06 14:33 - 00000000 ____D C:\Users\Coach\Desktop\Sounds
2013-06-04 19:19 - 2012-07-05 00:38 - 00000000 ____A C:\Windows\SysWOW64\config.nt
2013-06-04 17:44 - 2012-12-21 18:31 - 00000000 ____D C:\Users\Coach\Documents\Calibre Bibliothek
2013-06-04 17:13 - 2013-06-04 17:13 - 00000365 ____A C:\Users\Coach\Desktop\mac.txt
2013-06-04 00:24 - 2012-06-29 15:34 - 00078680 ____A C:\Users\Coach\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-02 23:02 - 2012-10-09 12:05 - 00000132 ____A C:\Users\Coach\AppData\Roaming\Adobe PNG Format CS5 Prefs
2013-06-02 20:17 - 2013-06-02 20:05 - 51318230 ____A C:\Users\Coach\Desktop\videotraining-videofile-2362.mp4
2013-05-31 21:49 - 2012-06-29 16:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-05-31 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\he-IL
2013-05-31 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA
2013-05-31 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\he-IL
2013-05-31 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\ar-SA
2013-05-31 21:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-05-31 20:30 - 2013-05-31 20:25 - 00009228 ____A C:\Windows\IE10_main.log
2013-05-31 20:26 - 2013-05-31 20:26 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-31 20:26 - 2013-05-31 20:26 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-05-31 20:26 - 2013-05-31 20:26 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-05-31 20:26 - 2013-05-31 20:26 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-31 20:26 - 2013-05-31 20:26 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-31 20:26 - 2013-05-31 20:26 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-05-31 20:26 - 2013-05-31 20:26 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-31 20:26 - 2013-05-31 20:26 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-05-31 20:26 - 2013-05-31 20:26 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-05-31 20:26 - 2013-05-31 20:26 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-31 20:26 - 2013-05-31 20:26 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
Files to move or delete:
====================
C:\ProgramData\FullRemove.exe
C:\ProgramData\NTUSER.dat
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== End Of Log ============================
--- --- ---
--- --- ---
Addition: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-06-2013
Ran by Coach at 2013-06-24 20:08:19
Running from C:\Users\Coach\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
??? ActiveX ?? Windows Live Mesh ???? ??????? ??????? (x32 Version: 15.4.5722.2)
???? ??? Windows Live (x32 Version: 15.4.3502.0922)
???? ???? ActiveX ????? ?? Windows Live Mesh ????????? ??????? (x32 Version: 15.4.5722.2)
???? Windows Live (x32 Version: 15.4.3502.0922)
?????? ??????? ?? Windows Live (x32 Version: 15.4.3502.0922)
??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ??????????? (x32 Version: 15.4.5722.2)
??????? Windows Live Mesh ActiveX ??? (x32 Version: 15.4.5722.2)
???????? ?????????? Windows Live (x32 Version: 15.4.3502.0922)
?????????? Windows Live (x32 Version: 15.4.3502.0922)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe AIR (x32 Version: 3.6.0.6090)
Adobe Community Help (x32 Version: 3.0.0)
Adobe Community Help (x32 Version: 3.0.0.400)
Adobe Creative Suite 5 Master Collection (x32 Version: 5.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Media Player (x32 Version: 1.8)
Adobe Photoshop Lightroom 3.2 64-bit (Version: 3.2.1)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Apple Application Support (x32 Version: 2.1.7)
Apple Software Update (x32 Version: 2.1.3.127)
ArcSoft TotalMedia 3 (x32)
Artcut GermanyVersion (x32)
Artcut Software (x32)
ASUS AI Recovery (x32 Version: 1.0.24)
ASUS FaceLogon (x32 Version: 1.0.0014)
ASUS LifeFrame3 (x32 Version: 3.1.1)
ASUS Live Update (x32 Version: 3.1.7)
ASUS Power4Gear Hybrid (Version: 1.2.1)
ASUS PWR Option (x32 Version: 1.1.0)
ASUS Secure Delete (Version: 1.00.0009)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0041)
ASUS Tutor (x32 Version: 1.0.3)
ASUS USB Charger Plus (x32 Version: 2.0.9)
ASUS Virtual Touch (x32 Version: 1.0.9)
ASUS_Scr_ZenbookPrime (x32 Version: 1.0.0001)
AsusVibe2.0 (x32 Version: 2.0.9.157)
ATK Package (x32 Version: 1.0.0020)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
AX88772B Windows 7 Drivers (x32 Version: 1.0.2.0)
Brother MFL-Pro Suite MFC-250C (x32 Version: 1.0.1.0)
calibre (x32 Version: 0.9.11)
CDBurnerXP (x32 Version: 4.5.1.3868)
CINEMA 4D 12.016 (Version: 12.016)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
D3DX10 (x32 Version: 15.4.2368.0902)
DivX-Setup (x32 Version: 2.6.1.9)
ElsterFormular (x32 Version: 14.1.20130301)
ETDWare PS/2-X64 10.5.9.0 (Version: 10.5.9.0)
FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Genie Timeline (x32 Version: 3.0)
InstantOn for NB (x32 Version: 2.3.2)
Intel PROSet Wireless
Intel(R) Dynamic Platform & Thermal Framework (x32 Version: 6.0.1.1067)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342)
Intel(R) Management Engine Components (x32 Version: 8.0.3.1427)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2696)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.1.0.0096)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.1.1.0153)
Intel(R) Rapid Start Technology (x32 Version: 1.0.0.1024)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.225)
Intel(R) WiDi (x32 Version: 3.0.13.0)
Intel(R) Wireless Display
Intel® AT Service signup (x32 Version: 2.0.0.3)
Intel® PROSet/Wireless WiFi Software (Version: 15.01.1000.0927)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
Java 7 Update 17 (x32 Version: 7.0.170)
Java 7 Update 9 (64-bit) (Version: 7.0.90)
Java Auto Updater (x32 Version: 2.1.9.0)
JavaFX 2.1.1 (x32 Version: 2.1.1)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053)
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000)
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000)
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000)
MozBackup 1.5.1 (x32)
Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)
Mozilla Maintenance Service (x32 Version: 21.0)
Mozilla Thunderbird 17.0.2 (x86 de) (x32 Version: 17.0.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Nitro Reader 2 (Version: 2.5.0.45)
OpenOffice.org 3.4 (x32 Version: 3.4.9590)
PaperPort Image Printer 64-bit (Version: 1.00.0000)
PDF Settings CS5 (x32 Version: 10.0)
PxMergeModule (x32 Version: 1.00.0000)
QuickTime (x32 Version: 7.72.80.56)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6608)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10010)
S?????? f?t???af??? t?? Windows Live (x32 Version: 15.4.3502.0922)
ScanSoft PaperPort 11 (x32 Version: 11.2.0000)
Skype™ 6.3 (x32 Version: 6.3.105)
Sony Ericsson Update Engine (x32 Version: 2.13.6.201305161305)
Sony PC Companion 2.10.155 (x32 Version: 2.10.155)
Spybot - Search & Destroy (x32 Version: 1.6.2)
St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se?? (x32 Version: 15.4.5722.2)
Tom Clancy's Rainbow Six: Lockdown (x32 Version: 1.02.000)
Update (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.2 (x32 Version: 2.0.2)
Windows Live ??? (x32 Version: 15.4.3502.0922)
Windows Live ???? (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Family Safety (Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinFlash (x32 Version: 2.41.1)
Wireless Console 3 (x32 Version: 3.0.27)
XMedia Recode Version 3.1.2.5 (x32 Version: 3.1.2.5)
==================== Restore Points =========================
Could not list Restore Points.
==================== Hosts content: ==========================
# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
# #
# Start of entries inserted by Spybot - Search & Destroy
# This list is Copyright 2000-2008 Safer Networking Limited
# End of entries inserted by Spybot - Search & Destroy
# 127.0.0.1 localhost
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 3dns.adobe.com
127.0.0.1 3dns-1.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-4.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-1.adobe.com
There are more than 1000 lines starting with "127.0.0.1"
==================== Scheduled Tasks (whitelisted) =============
==================== Faulty Device Manager Devices =============
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/24/2013 10:34:34 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenProcessToken" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Fehlerspezifische
Details:
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Error: (06/24/2013 10:34:34 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenProcessToken" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Fehlerspezifische
Details:
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Error: (06/24/2013 10:34:34 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenProcessToken" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\0bada1de-01a9-4625-8278-69e735f39dd2.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Error: (06/24/2013 10:29:02 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (06/23/2013 02:40:16 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenProcessToken" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Fehlerspezifische
Details:
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Error: (06/23/2013 02:40:16 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenProcessToken" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Fehlerspezifische
Details:
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Error: (06/23/2013 02:40:16 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "OpenProcessToken" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\0bada1de-01a9-4625-8278-69e735f39dd2.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Error: (06/23/2013 11:55:39 AM) (Source: ESENT) (User: )
Description: taskhost (9096) Versuch, Datei "C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error: (06/23/2013 11:21:07 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
Error: (06/21/2013 06:09:30 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
System errors:
=============
Error: (06/24/2013 07:04:46 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (06/24/2013 07:03:32 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst GenieTimelineService erreicht.
Error: (06/24/2013 06:51:38 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (06/23/2013 04:43:23 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (06/23/2013 04:42:27 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst GenieTimelineService erreicht.
Error: (06/23/2013 04:42:25 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst fdPHost erreicht.
Error: (06/23/2013 04:41:57 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst GenieTimelineService erreicht.
Error: (06/23/2013 04:41:27 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst GenieTimelineService erreicht.
Error: (06/23/2013 04:40:57 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst GenieTimelineService erreicht.
Error: (06/23/2013 04:40:27 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst GenieTimelineService erreicht.
Microsoft Office Sessions:
=========================
Error: (06/24/2013 10:34:34 AM) (Source: VSS)(User: )
Description: OpenProcessToken0x80070005, Zugriff verweigert
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Fehlerspezifische
Details:
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Error: (06/24/2013 10:34:34 AM) (Source: VSS)(User: )
Description: OpenProcessToken0x80070005, Zugriff verweigert
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Fehlerspezifische
Details:
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Error: (06/24/2013 10:34:34 AM) (Source: VSS)(User: )
Description: OpenProcessToken0x80070005, Zugriff verweigert
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\0bada1de-01a9-4625-8278-69e735f39dd2.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Error: (06/24/2013 10:29:02 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files\Genie9\genie timeline\x86\GenieTimeLineAgent.exe
Error: (06/23/2013 02:40:16 PM) (Source: VSS)(User: )
Description: OpenProcessToken0x80070005, Zugriff verweigert
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Fehlerspezifische
Details:
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Error: (06/23/2013 02:40:16 PM) (Source: VSS)(User: )
Description: OpenProcessToken0x80070005, Zugriff verweigert
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Fehlerspezifische
Details:
Fehler: AddExpressWriter failed, 0x80042302, Unerwarteter Fehler bei einer Komponente des Volumeschattenkopie-Diensts.
Weitere Informationen finden Sie im Anwendungsereignisprotokoll.
Error: (06/23/2013 02:40:16 PM) (Source: VSS)(User: )
Description: OpenProcessToken0x80070005, Zugriff verweigert
Vorgang:
Generator wird initialisiert
Generatordaten werden gesammelt
Asynchroner Vorgang wird ausgeführt
Kontext:
Dateiname: C:\Windows\Vss\Writers\System\0bada1de-01a9-4625-8278-69e735f39dd2.xml
Dateipfad: C:\Windows\Vss\Writers\System\
Ausführungskontext: Requestor
Aktueller Status: GatherWriterMetadata
Error: (06/23/2013 11:55:39 AM) (Source: ESENT)(User: )
Description: taskhost9096C:\Users\Admin\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
Error: (06/23/2013 11:21:07 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
Error: (06/21/2013 06:09:30 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
==================== Memory info ===========================
Percentage of memory in use: 62%
Total physical RAM: 3981.98 MB
Available physical RAM: 1505.99 MB
Total Pagefile: 7962.14 MB
Available Pagefile: 5332.55 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:98.54 GB) (Free:15.67 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:125.61 GB) (Free:8.37 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
|
So funktioniert es: