Trojaner-Board - Win 7 64 bit- Kaspersky IS 2013-keine Updates-keine Aktivierung nach Neuinstallation-Fehler 2 Arbeitsstationsdienst

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Win 7 64 bit- Kaspersky IS 2013-keine Updates-keine Aktivierung nach Neuinstallation-Fehler 2 Arbeitsstationsdienst (https://www.trojaner-board.de/140990-win-7-64-bit-kaspersky-is-2013-keine-updates-keine-aktivierung-neuinstallation-fehler-2-arbeitsstationsdienst.html)

mk72	04.09.2013 14:41

Win 7 64 bit- Kaspersky IS 2013-keine Updates-keine Aktivierung nach Neuinstallation-Fehler 2 Arbeitsstationsdienst

Hallo Leute,

nach der I-Net-Suche zu meinem Problem bin ich bei euch gelandet.

Folgendes Problem trat vor einer ganzen Weile auf:

- KIS 2013- Schwarze Liste beschädigt, Selbstschutz deaktiviert, dann ging es ab und zu
- da o.g. Vorgehen kein Dauerzustand sein sollte, Kasperky-Support bemüht- ohne Erfolg
- nachdem der Support eine Neuinstallation mit zuvor gelöschtem Aktivierungscode wünschte, war keine Aktivierung mehr möglich weil der Arbeitsstationsdienst nicht mehr gestartet werden kann und Kaspersky hat sich schon seit Tagen nicht mehr gemeldet
- erst ein mal KIS 2013 entfernt und Antivir free installiert- scheint zu funktionieren

Die logs musste ich leider als Anhang beilegen.

Antivir hat heute das hier gefunden- hat meiner Meinung nach aber nichts mit dem Problem zu tun:

Code:

04.09.2013 13:09 [System-Scanner] Malware gefunden

      Die Datei 

      'G:\Sicherung_von_C\Marko\Downloads\BestVideoDownloaderSetup-TurboUpgrade.exe'

      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/Yontoo.Gen2' [adware].

      Durchgeführte Aktion(en):

      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '54748bb6.qua' 

      verschoben!
 

04.09.2013 13:09 [Echtzeit-Scanner] Malware gefunden

      In der Datei 

      'G:\Sicherung_von_C\Marko\Downloads\BestVideoDownloaderSetup-TurboUpgrade.exe'

      wurde ein Virus oder unerwünschtes Programm 'ADWARE/Yontoo.Gen2' [adware] 

      gefunden.

      Ausgeführte Aktion: Zugriff verweigern

schrauber

04.09.2013 15:37

hi,

Logs zur Not aufteilen und posten.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

mk72	04.09.2013 18:32

Hallo,

ich hatte zuerst alle Logs im Beitrag drin, als ich dann die Vorschau anzeigen ließ, sagte mir das System, das ich zu viele Zeichen habe und es als Anhang posten soll.

Also bitte verzeih mir das, ich hatte dererlei vorher noch nie gemacht.

Soll ich jetzt mehrere Antworten hintereinander schreiben und nur die logs, die reinpassen erstellen?
Ach ich machs einfach.

Code:

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 14:08 on 04/09/2013 (Marko)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.

HKCU:DAEMON Tools Lite -> Removed

HKCU:AlcoholAutomount -> Removed
 

Checking for services/drivers...

SPTD -> Disabled (Service running -> reboot required)
 
 

-=E.O.F=-

Code:

GMER 2.1.19163 - hxxp://www.gmer.net

Rootkit scan 2013-09-04 14:49:12

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\0000006b WDC_WD50 rev.15.0 465,76GB

Running: gmer_2.1.19163.exe; Driver: C:\Users\Marko\AppData\Local\Temp\pwldqpog.sys
 
 

---- Registry - GMER 2.1 ----
 

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001bdc0f9fcc                                           

Reg  HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application@Sources                                                   MSDMine?DfSd?DfSd?DfSdk

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04                                      

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0                                   e:\Programme\Alcohol Soft\Alcohol 120\

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0                                   0

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew                                0x2B 0x0C 0x55 0xAB ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001                             

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0                          0xA0 0x02 0x00 0x00 ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@ujdew                       0x8E 0xFE 0xA6 0xEC ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40                      

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40@ujdew                0xD3 0xE1 0xC2 0x7F ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                      

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                   0x00 0x00 0x00 0x00 ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                   1

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                0xDA 0x78 0xE6 0x62 ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                   E:\Programme\DAEMON Tools Lite\

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                             

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                       0x48 0x8B 0x9F 0x82 ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                          0xA0 0x02 0x00 0x00 ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                        

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                  0x14 0x97 0x0D 0x85 ...

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1                        

Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1@hdf12                  0x46 0x6A 0xB8 0x2A ...

Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001bdc0f9fcc (not active ControlSet)                       

Reg  HKLM\SYSTEM\ControlSet002\services\eventlog\Application@Sources                                                       MSDMine?DfSd?DfSd?DfSdk

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)                  

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0                                       e:\Programme\Alcohol Soft\Alcohol 120\

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0                                       0

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew                                    0x2B 0x0C 0x55 0xAB ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001 (not active ControlSet)         

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0                              0xA0 0x02 0x00 0x00 ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@ujdew                           0x8E 0xFE 0xA6 0xEC ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40 (not active ControlSet)  

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40@ujdew                    0xD3 0xE1 0xC2 0x7F ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                  

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                       0x00 0x00 0x00 0x00 ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                       1

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                    0xDA 0x78 0xE6 0x62 ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                       E:\Programme\DAEMON Tools Lite\

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)         

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                           0x48 0x8B 0x9F 0x82 ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                              0xA0 0x02 0x00 0x00 ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)    

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                      0x14 0x97 0x0D 0x85 ...

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1 (not active ControlSet)    

Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1@hdf12                      0x46 0x6A 0xB8 0x2A ...
 

---- EOF - GMER 2.1 ----

Hier das nächste log:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2013 03

Ran by Marko at 2013-09-04 14:23:16

Running from C:\Users\Marko\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

   

64 Bit HP CIO Components Installer (Version: 8.2.2)

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)

AC3Filter 2.5b (x32 Version: 2.5b)

Adobe AIR (x32 Version: 3.7.0.1860)

Adobe Bridge 1.0 (x32 Version: 001.000.001)

Adobe Common File Installer (x32 Version: 1.00.001)

Adobe Community Help (x32 Version: 3.5.23)

Adobe Download Assistant (x32 Version: 1.2.3)

Adobe Flash Player 11 ActiveX 64-bit (Version: 11.2.202.235)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)

Adobe Help Center 1.0 (x32 Version: 1.0.1)

Adobe Photoshop CS2 (x32 Version: 9.0)

Adobe Photoshop Elements 11 (x32 Version: 11.0)

Adobe Photoshop Lightroom 5 64-bit (Version: 5.0.1)

Adobe Premiere Elements 11 (Version: 11.0)

Adobe Stock Photos 1.0 (x32 Version: 1.0.1)

Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)

AMD Accelerated Video Transcoding (Version: 2.00.0002)

AMD APP SDK Runtime (Version: 10.0.938.2)

AMD Catalyst Install Manager (Version: 8.0.881.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Fuel (Version: 2012.0806.1213.19931)

AMD Media Foundation Decoders (Version: 1.0.70405.2224)

AMD System Monitor (x32 Version: 1.0.8)

AMD USB Filter Driver (x32 Version: 1.0.15.94)

AMD VISION Engine Control Center (x32 Version: 2012.0806.1213.19931)

AntiBrowserSpy (x32 Version: 3.6.106)

Apple Application Support (x32 Version: 2.3.4)

Apple Software Update (x32 Version: 2.1.3.127)

Application Profiles (x32 Version: 2.0.4337.36028)

Application Profiles (x32 Version: 2.0.4365.36132)

Ashampoo Burning Studio 12 v.12.0.5 (x32 Version: 12.0.5)

Ashampoo Home Designer Pro v.1.0.1 (x32 Version: 1.0.1)

Ashampoo Internet Accelerator 3 v.3.20 (x32 Version: 3.1.1)

Ashampoo Music Studio 4 v.4.0.5 (x32 Version: 4.0.5)

Ashampoo Music Studio 4 v.4.1.0 (x32 Version: 4.1.0)

Ashampoo Photo Commander 10 v.10.1.1 (x32 Version: 10.1.1)

Ashampoo Snap 5 v.5.1.5 (x32 Version: 5.1.5)

Ashampoo Video Styler 2013 v.1.0.1 (x32 Version: 1.0.1)

Ashampoo WinOptimizer 10 v.10.2.5 (x32 Version: 10.02.05)

Audio 180% (x32 Version: Audio 180%)

Avira Free Antivirus (x32 Version: 13.0.0.4052)

Bewerbungsfoto-/Passbild-Generator v3.5b (x32)

BEWERBUNGSMASTER (e:\Programme\BEWERBUNGSMASTER\) (x32)

BEWERBUNGSMASTER (x32)

BufferChm (x32 Version: 130.0.331.000)

Bullzip PDF Printer 9.3.0.1516 (Version: 9.3.0.1516)

C4400 (x32 Version: 130.0.365.000)

C4500 (x32 Version: 130.0.365.000)

CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.7.2.11)

Canon Internet Library for ZoomBrowser EX (x32 Version: 1.6.3.9)

Canon MOV Decoder (x32 Version: 1.5.0.7)

Canon MOV Encoder (x32 Version: 1.3.1.3)

Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.4.1.9)

Canon Utilities Digital Photo Professional 3.8 (x32 Version: 3.8.0.0)

Canon Utilities EOS Utility (x32 Version: 2.8.1.0)

Canon Utilities PhotoStitch (x32 Version: 3.1.22.46)

Canon Utilities Picture Style Editor (x32 Version: 1.7.0.0)

Canon Utilities WFT Utility (x32 Version: 3.5.1.1)

Canon Utilities ZoomBrowser EX (x32 Version: 6.5.1.15)

Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.3.0.4)

Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1213.19931)

Catalyst Control Center Localization All (x32 Version: 2012.0806.1213.19931)

CCC Help Chinese Standard (x32 Version: 2012.0806.1212.19931)

CCC Help Chinese Traditional (x32 Version: 2012.0806.1212.19931)

CCC Help Czech (x32 Version: 2012.0806.1212.19931)

CCC Help Danish (x32 Version: 2012.0806.1212.19931)

CCC Help Dutch (x32 Version: 2012.0806.1212.19931)

CCC Help English (x32 Version: 2012.0806.1212.19931)

CCC Help Finnish (x32 Version: 2012.0806.1212.19931)

CCC Help French (x32 Version: 2012.0806.1212.19931)

CCC Help German (x32 Version: 2012.0806.1212.19931)

CCC Help Greek (x32 Version: 2012.0806.1212.19931)

CCC Help Hungarian (x32 Version: 2012.0806.1212.19931)

CCC Help Italian (x32 Version: 2012.0806.1212.19931)

CCC Help Japanese (x32 Version: 2012.0806.1212.19931)

CCC Help Korean (x32 Version: 2012.0806.1212.19931)

CCC Help Norwegian (x32 Version: 2012.0806.1212.19931)

CCC Help Polish (x32 Version: 2012.0806.1212.19931)

CCC Help Portuguese (x32 Version: 2012.0806.1212.19931)

CCC Help Russian (x32 Version: 2012.0806.1212.19931)

CCC Help Spanish (x32 Version: 2012.0806.1212.19931)

CCC Help Swedish (x32 Version: 2012.0806.1212.19931)

CCC Help Thai (x32 Version: 2012.0806.1212.19931)

CCC Help Turkish (x32 Version: 2012.0806.1212.19931)

ccc-utility64 (Version: 2012.0806.1213.19931)

Classic Shell (Version: 3.6.8)

Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)

COMPUTERBILD-Abzockschutz (x32 Version: 1.0.40)

Content Manager 2 (x32 Version: 3.10.0.52790)

Copy (x32 Version: 130.0.428.000)

CPUID CPU-Z 1.59

CyberGhost VPN

DAEMON Tools Lite (x32 Version: 4.46.1.0327)

Data Lifeguard Diagnostic for Windows 1.24 (x32)

DateiCommander13 Basic (x32)

Desk Drive (x32 Version: 1.8.2)

DeskDrive Version 1.8.5 (x32 Version: 1.8.5)

Destinations (x32 Version: 130.0.0.0)

DeviceDiscovery (x32 Version: 130.0.465.000)

Diagnostic Utility (x32 Version: 1.00.0000)

DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904)

DivX-Setup (x32 Version: 2.6.1.44)

DocProc (x32 Version: 13.0.0.0)

dows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)

DxO FilmPack 2.0 (x32 Version: 2.0.0)

DxO Optics Pro 5.3.5 (x32 Version: 5.3.5)

DxO Optics Pro 6 (x32 Version: 6.6.0)

Elements 11 Organizer (x32 Version: 11.0)

eReg (x32 Version: 1.20.138.34)

erLT (x32 Version: 1.20.0137)

Fahrtenbuch professionell (x32)

FileBox eXtender (Version: 2.1.0)

FileBox eXtender (x32)

FileZilla Client 3.5.3 (x32 Version: 3.5.3)

Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0)

FolderVisualizer (x32 Version: 2012)

GeoSetter 3.4.16 (x32)

Gigaset QuickSync (Version: 7.2.0844.6)

Google Earth Plug-in (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.21.153)

GPBaseService2 (x32 Version: 130.0.371.000)

HP Customer Participation Program 13.0 (Version: 13.0)

HP Imaging Device Functions 13.0 (Version: 13.0)

HP Photo Creations (x32 Version: 1.0.0.9452)

HP Photosmart C4400 All-In-One Driver Software 13.0 Rel. 3 (Version: 13.0)

HP Photosmart C4500 All-In-One Driver Software 13.0 Rel. 4 (Version: 13.0)

HP Smart Web Printing 4.51 (Version: 4.51)

HP Solution Center 13.0 (Version: 13.0)

HP Update (x32 Version: 5.003.001.001)

HPDiagnosticAlert (x32 Version: 1.00.0000)

HPPhotoGadget (x32 Version: 130.0.282.000)

HPProductAssistant (x32 Version: 130.0.371.000)

Inpaint 3 Installation & Registrierung (x32)

Inpaint 3.0 (x32)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

Java(TM) 6 Update 31 (x32 Version: 6.0.310)

JavaFX 2.1.1 (x32 Version: 2.1.1)

KeePass Password Safe 2.21 (x32)

Logitech Flow Scroll 4.0 (Version: 4.00.33)

Logitech SetPoint 6.32 (Version: 6.32.20)

Logitech Unifying-Software 2.10 (Version: 2.10.37)

MadAppLauncher version 1.10.0.0 (x32 Version: 1.10.0.0)

MAGIX Foto Designer 7 (x32 Version: 7.0.1.1)

MAGIX Screenshare (x32 Version: 4.3.6.1987)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6)

MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6)

MarketResearch (x32 Version: 130.0.374.000)

MediaCoder x64 0.8.25.5553 (Version: 0.8.25.5553)

Mediencenter 3.8.1.2208 (HKCU Version: 3.8.1.2208)

Mediencenter Assistent (Version: 2.7.0.1451)

MEDION NAS TOOL (x32)

Memeo Instant Backup (x32 Version: 4.60.0.7939)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)

Microsoft Office Professional 2013 - de-de (Version: 15.0.4517.1509)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)

Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)

Miso 1.0 (x32 Version: 1.0)

Mozilla Firefox 18.0.1 (x86 de) (x32 Version: 18.0.1)

Mozilla Firefox 23.0.1 (x86 de) (HKCU Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 18.0.1)

Mp3tag v2.57 (x32 Version: v2.57)

MSVC80_x64_v2 (Version: 1.0.3.0)

MSVC80_x86_v2 (x32 Version: 1.0.3.0)

MSVC90_x64 (Version: 1.0.1.2)

MSVC90_x86 (x32 Version: 1.0.1.2)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)

Naviextras Toolbox Prerequesities (x32 Version: 1.0.0)

Nero 8 (x32 Version: 8.3.312)

neroxml (x32 Version: 1.0.0)

Network64 (Version: 130.0.572.000)

Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0)

Nokia Suite (x32 Version: 3.8.30.0)

NTRIP (x32)

O&O DriveLED Professional (Version: 4.2.157)

OCR Software by I.R.I.S. 13.0 (Version: 13.0)

Ocster Backup Pro (Version: 8.08)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4517.1509)

Office 15 Click-to-Run Licensing Component (Version: 15.0.4517.1509)

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4517.1509)

ON_OFF Charge B11.1102.1 (x32 Version: 1.00.0001)

Paragon Festplatten Manager™ 2011 Kompakt 2nd Edition (x32 Version: 90.00.0003)

PC Connectivity Solution (x32 Version: 12.0.109.0)

PDF Experte 8 Ultimate (x32 Version: 8.0.0140.0)

Perfect Effects 4.0.4 (x32 Version: 4.0.4)

PL-2303 USB-to-Serial (x32 Version: 1.7.0)

PRE11 STI 64Installer (x32 Version: 11.0)

PS_AIO_03_C4400_Software_Min (x32 Version: 130.0.365.000)

PS_AIO_04_C4500_Software_Min (x32 Version: 130.0.365.000)

PSE11 STI Installer (x32 Version: 11.0)

Q-Dir (x32)

QuickTime (x32 Version: 7.74.80.86)

Rainmeter (x32 Version: 2.4 r1678)

Realtek Ethernet Controller Driver (x32 Version: 7.58.411.2012)

Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6650)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)

Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.39.0)

Scan (x32 Version: 13.0.0.0)

SeaTools for Windows (x32 Version: 1.2.0.7)

Send To Toys v2.61

SiSoftware Sandra Lite 2012.SP5c (Version: 18.74.2012.10)

SmartTools Publishing • Excel AutoBackup (x32 Version: v2.50)

SmartTools Publishing • Outlook Adress-Assistent (x32 Version: v3.50)

SmartTools Publishing • Word Adressfenster-Assistent (x32 Version: v2.50)

SmartWebPrinting (x32 Version: 130.0.457.000)

SolutionCenter (x32 Version: 130.0.373.000)

Status (x32 Version: 130.0.469.000)

swMSM (x32 Version: 12.0.0.1)

TomTom HOME (x32 Version: 2.9.2)

TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)

Toolbox (x32 Version: 130.0.648.000)

TrayApp (x32 Version: 130.0.422.000)

Treiber-Studio 2013 (Version: 8.0.519)

Treiber-Studio 2013 (Version: 8.1.428)

Unknown Device Identifier 8.00

UnloadSupport (x32 Version: 11.0.0)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)

VCRedistSetup (x32 Version: 1.0.0)

WebReg (x32 Version: 130.0.132.017)

Windows Mobile-Gerätecenter (Version: 6.1.6965.0)

XnView Shell Extension 3.2.0 (64bits) (x32 Version: 3.2.0)
 

==================== Restore Points  =========================
 

30-08-2013 18:07:20 Windows-Sicherung
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2012-05-22 09:49 - 00000895 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 www.google-analytics.com

127.0.0.1 google-analytics.com
 
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => start w32time task_started

Task: {07FD82E2-B526-4FC7-8798-FCA387122C0B} - System32\Tasks\One-Click Optimizer => E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-05-15] (Ashampoo Development GmbH & Co. KG)

Task: {18E87A3D-D345-46C8-83A0-765A4D34BF98} - System32\Tasks\{0DC1FC84-5EDB-4337-ABC3-B6DDCF71C3C2} => E:\Programme\Mozilla\firefox.exe No File

Task: {479C03B9-CEC4-41F3-A69F-F81E31FC295D} - System32\Tasks\{485AAEC7-0CDC-4324-B369-6564E05046FA} => E:\Programme\Mozilla Firefox\firefox.exe [2013-08-18] (Mozilla Corporation)

Task: {55D08572-AF0D-4D79-B374-B2288E853937} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-21] (Google Inc.)

Task: {94E7BDC3-C5CF-4EFB-A69A-8C6218A52551} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => start osppsvc

Task: {9D61BA86-511D-4EF2-9642-5A4E7FC5D66A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-06-09] (Microsoft Corporation)

Task: {9E55C402-A616-4ED1-B9A3-DDE6CCFFCF6A} - System32\Tasks\Microsoft\Windows\MemDiag => C:\Windows\system32\mdres.exe [2009-07-14] (Microsoft Corporation)

Task: {A00464E8-6BBC-4CE0-B494-EA214C5F7098} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)

Task: {B5FF5D24-9746-49F5-9A08-EE16078E7451} - System32\Tasks\{68FCBDDC-F452-4549-97AD-356CC5E03486} => E:\Programme\Nero\Nero\Nero8\Nero Burning Rom\nero.exe [2008-06-24] (Nero AG)

Task: {BE32AC8B-F571-4959-965A-8CCC10A0E121} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-21] (Google Inc.)

Task: {C820FD4E-DC50-452F-A5E7-1350854F076E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)

Task: {E47767F2-BC3A-463D-8CBD-A409DEA7DCA3} - System32\Tasks\AdobeAAMUpdater-1.0-Kobolt-Marko => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)

Task: {F07079E8-DB7A-4819-8454-71FE70E5A687} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2011-08-23] ()

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

Task: C:\Windows\Tasks\One-Click Optimizer.job => E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe
 

==================== Loaded Modules (whitelisted) =============
 

2011-02-23 17:09 - 2011-02-23 17:09 - 00313344 _____ (Hyperionics Technology LLC) E:\Programme\FileBX\FileBXH.dll

2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm

2012-04-06 03:09 - 2012-04-06 03:09 - 00054784 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll

2012-04-06 04:20 - 2012-04-06 04:20 - 01067520 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll

2012-04-06 03:54 - 2012-04-06 03:54 - 07479296 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00244696 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00661448 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\MSVCP110.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00828872 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\MSVCR110.dll

2013-04-04 10:22 - 2013-04-04 10:22 - 00558592 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll

2013-06-29 10:50 - 2013-06-29 10:50 - 00724992 _____ (IvoSoft) E:\Programme\Classic Shell\ClassicExplorer64.dll

2013-06-29 10:50 - 2013-06-29 10:50 - 01750528 _____ (IvoSoft) E:\Programme\Classic Shell\ClassicStartMenuDLL.dll

2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () e:\Programme\FileZilla FTP Client\fzshellext_64.dll

2011-12-05 17:57 - 2010-11-20 06:27 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll

2013-07-29 14:57 - 2013-05-15 15:22 - 00117096 _____ (TODO: <Company name>) E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WinOptimizerContextHandler64.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 02288184 _____ (Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\shlext64.dll

2013-04-24 15:25 - 2013-04-24 15:25 - 00402432 _____ (Florian Heidenreich) E:\Programme\MP3-Tag\Mp3tag\Mp3tagShell64.dll

2013-04-04 10:22 - 2013-04-04 10:22 - 00152064 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll

2012-08-15 11:55 - 2012-08-13 17:25 - 00149504 _____ (Deutsche Telekom AG) C:\Windows\system32\DTAG.Mediencenter.ShellExtension.dll

2012-05-22 11:01 - 2012-02-23 21:44 - 02409472 _____ () e:\Programme\XnView\ShellEx\XnViewShellExt64.dll

2013-07-10 13:15 - 2011-02-01 20:09 - 00593788 _____ (Friedemann Schmidt) e:\Programme\GeoSetter\GeoSetterShellExt64.dll

2010-11-18 22:08 - 2010-11-18 22:08 - 00086016 _____ (Igor Pavlov) E:\Programme\7zip\7-zip.dll

2012-05-22 11:07 - 2011-05-18 17:47 - 00137216 _____ (Gabriele Ponti) e:\Programme\Send To Toys\SendToFolderShellExt.dll

2012-05-22 11:07 - 2011-05-18 17:47 - 00140800 _____ (Gabriele Ponti) e:\Programme\Send To Toys\SendToClipboardShellExt.dll

2009-07-14 02:08 - 2009-07-14 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\NetworkItemFactory.dll

2009-07-14 02:08 - 2009-07-14 03:40 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\dtsh.dll

2009-07-14 02:08 - 2009-07-14 03:40 - 00101376 _____ (Microsoft Corporation) C:\Windows\System32\fdwcn.dll

2009-07-14 02:08 - 2009-07-14 03:41 - 00120832 _____ (Microsoft Corporation) C:\Windows\System32\wcnapi.dll

2009-07-14 01:35 - 2009-07-14 03:40 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\fdWNet.dll

2009-07-14 01:53 - 2009-07-14 03:40 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\dfscli.dll

2013-08-28 16:17 - 2013-07-18 08:01 - 00231480 _____ (Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll

2012-04-06 03:09 - 2012-04-06 03:09 - 00044544 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll

2012-04-06 03:23 - 2012-04-06 03:23 - 07431680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll

2012-04-06 03:34 - 2012-04-06 03:34 - 04731904 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll

2011-10-07 11:37 - 2011-10-07 11:37 - 00047896 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\khalwrapper.dll

2011-10-07 11:37 - 2011-10-07 11:37 - 00161048 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\KemUtil.dll

2011-10-07 11:37 - 2011-10-07 11:37 - 00091416 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\KemXML.dll

2011-10-07 11:37 - 2011-10-07 11:37 - 00185112 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\kemutb.dll

2011-10-07 11:37 - 2011-10-07 11:37 - 00140056 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\KemWnd.dll

2011-10-07 11:38 - 2011-10-07 11:38 - 00037144 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\SetPointCOM.dll

2011-10-07 11:39 - 2011-10-07 11:39 - 01304856 _____ () E:\Programme\Logitech\SetPointP\Macros\MacroCore.dll

2011-10-07 11:38 - 2011-10-07 11:38 - 00038168 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\WebBrowserSupport.dll

2011-10-07 11:39 - 2011-10-07 11:39 - 00204056 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\Macros\MacroAppSwitch.dll

2011-10-07 11:39 - 2011-10-07 11:39 - 00293656 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\Macros\MacroMedia.dll

2011-10-07 11:39 - 2011-10-07 11:39 - 00236824 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\Macros\MacroEmail.dll

2011-10-07 11:37 - 2011-10-07 11:37 - 00026904 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\KemMon.dll

2011-10-07 11:37 - 2011-10-07 11:37 - 00086808 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\kgame.dll

2011-10-07 11:38 - 2011-10-07 11:38 - 00141592 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\LCabHandler.dll

2011-10-07 11:39 - 2011-10-07 11:39 - 00096536 _____ (Logitech, Inc.) E:\Programme\Logitech\SetPointP\Macros\MacroBT.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 06088360 _____ () E:\Programme\Ocster Backup\bin\backupClientLib.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00388264 _____ () E:\Programme\Ocster Backup\bin\updateman.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00468648 _____ () E:\Programme\Ocster Backup\bin\twirl.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00343208 _____ () E:\Programme\Ocster Backup\bin\tomb.dll

2013-04-12 11:09 - 2013-04-12 11:09 - 01645568 _____ (The OpenSSL Project, hxxp://www.openssl.org/) E:\Programme\Ocster Backup\bin\LIBEAY32.dll

2013-04-12 11:09 - 2013-04-12 11:09 - 00346112 _____ (The OpenSSL Project, hxxp://www.openssl.org/) E:\Programme\Ocster Backup\bin\SSLEAY32.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 04712104 _____ () E:\Programme\Ocster Backup\bin\ox.dll

2013-04-12 10:45 - 2013-04-12 10:45 - 00641024 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxmsw28u_xrc_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00622592 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxmsw28u_html_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 03663872 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxmsw28u_core_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 01488384 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxbase28u_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00875520 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxmsw28u_adv_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00157696 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxbase28u_xml_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 00152576 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxbase28u_net_vc_ox.dll

2011-12-05 17:56 - 2010-11-20 06:26 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2013-04-12 10:30 - 2013-04-12 10:30 - 00076288 _____ () E:\Programme\Ocster Backup\bin\zdll.dll

2013-04-12 11:13 - 2013-04-12 11:13 - 00239104 _____ (The cURL library, hxxp://curl.haxx.se/) E:\Programme\Ocster Backup\bin\libcurl.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 10897576 _____ () E:\Programme\Ocster Backup\bin\backupCore.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00156328 _____ () E:\Programme\Ocster Backup\bin\deemon.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00491176 _____ () E:\Programme\Ocster Backup\bin\veem.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00060072 _____ () E:\Programme\Ocster Backup\bin\minizutil.dll

2013-06-27 07:56 - 2013-06-27 07:56 - 00020992 _____ () E:\Programme\Ocster Backup\bin\zlibutil.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00052392 _____ () E:\Programme\Ocster Backup\bin\lzmaUtil.dll

2013-06-27 07:58 - 2013-06-27 07:58 - 00049664 _____ () E:\Programme\Ocster Backup\bin\lzma.dll

2013-06-27 08:01 - 2013-06-27 08:01 - 00309248 _____ () E:\Programme\Ocster Backup\bin\party.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00112808 _____ () E:\Programme\Ocster Backup\bin\scoolite.dll

2013-06-27 07:56 - 2013-06-27 07:56 - 00626688 _____ () E:\Programme\Ocster Backup\bin\sqlite.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00204968 _____ () E:\Programme\Ocster Backup\bin\netutil.dll

2011-12-05 17:57 - 2010-11-20 06:27 - 01753088 _____ (Microsoft Corporation) C:\Windows\system32\VSSAPI.DLL

2009-07-14 01:36 - 2009-07-14 03:41 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\VssTrace.DLL

2013-07-02 17:21 - 2013-07-02 17:21 - 00147112 _____ () E:\Programme\Ocster Backup\bin\featback.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00598944 _____ (Microsoft) E:\Programme\AntiBrowserSpy\BrowserMaske.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00035744 _____ (unknown) E:\Programme\AntiBrowserSpy\AbFlexTrans.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00037792 _____ () E:\Programme\AntiBrowserSpy\AbCommons.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 06362528 _____ () E:\Programme\AntiBrowserSpy\Commons.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 02648480 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.Data.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00173984 _____ () E:\Programme\AntiBrowserSpy\AbBrowserLibs.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00274336 _____ (The Apache Software Foundation) E:\Programme\AntiBrowserSpy\log4net.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 03414944 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.Utils.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00018336 _____ () E:\Programme\AntiBrowserSpy\VersionInfo.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00018848 _____ () E:\Programme\AntiBrowserSpy\AbSettingsKeeper.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 01750432 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.XtraEditors.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00012704 _____ () E:\Programme\AntiBrowserSpy\AbProcessManager.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-03-12 20:16 - 2013-03-12 20:16 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-02-27 18:36 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll

2009-07-14 01:58 - 2009-07-14 03:38 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2009-07-14 01:58 - 2009-07-14 03:41 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\ScrRun.dll

2011-12-05 17:56 - 2010-11-20 06:16 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00012520 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\CoreTempReader.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00015080 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\GetCoreTempInfoNET.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00014056 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\SystemInfo.dll

2011-02-23 17:04 - 2011-02-23 17:04 - 00080896 _____ () E:\Programme\FileBX\FbxRes.dll

2009-07-14 01:41 - 2009-07-14 03:41 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\uiautomationcore.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 04712104 _____ () e:\Programme\Ocster Backup\bin\ox.dll

2013-04-12 10:45 - 2013-04-12 10:45 - 00641024 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_xrc_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00622592 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_html_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 03663872 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_core_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 01488384 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00875520 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_adv_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00157696 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_xml_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 00152576 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_net_vc_ox.dll

2013-08-20 17:55 - 2013-08-20 17:55 - 00287232 _____ (The Apache Software Foundation) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\log4net.dll

2013-08-22 09:49 - 2013-08-22 09:49 - 00073728 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ProxyClient.dll

2013-08-22 09:49 - 2013-08-22 09:49 - 00008192 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.Common.dll

2013-08-22 09:49 - 2013-08-22 09:49 - 00881664 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\de-DE\Mediencenter.resources.dll

2013-08-22 09:49 - 2013-08-22 09:49 - 00030720 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ProxyContracts.dll

2009-07-14 01:50 - 2009-07-14 03:32 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\security.dll

2011-06-11 02:15 - 2011-06-11 02:15 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\MSVCR100.dll

2012-11-04 16:25 - 2012-11-04 16:25 - 00736968 _____ () E:\Programme\Rainmeter\Rainmeter.dll

2011-06-11 02:15 - 2011-06-11 02:15 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\MSVCP100.dll

2012-11-04 16:23 - 2012-11-04 16:23 - 00056832 _____ () E:\Programme\Rainmeter\Plugins\WebParser.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00097280 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.Implementation.dll

2012-08-06 13:03 - 2012-08-06 13:03 - 00031232 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00025088 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00048128 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Implementation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Implementation.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00022016 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CCC.Implementation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00015360 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\NEWAEM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00061440 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00018432 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.XManifest.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00038400 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00029184 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\ATICCCom.dll

2012-07-17 09:58 - 2012-07-17 09:58 - 00175104 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ADL.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00034816 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006144 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Server.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00047616 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Source.Kit.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.CoreAudioAPI.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00006656 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.DPPE.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Hotkeys.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006144 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.WinMessages.Shared.dll

2009-04-22 13:13 - 2009-04-22 13:13 - 00045056 _____ (ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0601.dll

2010-03-04 02:27 - 2010-03-04 02:27 - 00016384 _____ (ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006656 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.dll

2012-04-06 04:16 - 2012-04-06 04:16 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIDEMGX.dll

2010-10-07 14:07 - 2010-10-07 14:07 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I1010.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.REG.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00311296 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00196608 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll

2009-06-17 06:27 - 2009-06-17 06:27 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.GD.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005120 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Audio.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Actions.CCAA.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00008704 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ResourceManagement.Foundation.Private.dll

2008-04-03 17:29 - 2008-04-03 17:29 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0804.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00025600 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.Shared.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00028672 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00045056 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00053248 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.shared.dll

2009-12-08 08:49 - 2009-12-08 08:49 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0912.dll

2007-08-09 17:58 - 2007-08-09 17:58 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0706.dll

2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00049152 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00144384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceLCD.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00053248 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00028672 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CustomFormats.Graphics.Shared.dll

2008-12-30 13:04 - 2008-12-30 13:04 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0812.dll

2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0805.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00050688 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.OverDrive5.Graphics.shared.dll

2007-05-02 18:44 - 2007-05-02 18:44 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0703.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00110592 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00081920 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Shared.dll

2010-11-05 15:18 - 2010-11-05 15:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I1011.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00110592 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00081920 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Shared.dll

2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00045056 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.shared.dll

2009-01-20 15:51 - 2009-01-20 15:51 - 00007168 _____ ( ) C:\ATI\ATI.ACE\Core-Static\atixclib.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00008192 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00015872 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Runtime.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00012288 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00019968 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00010752 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013312 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\Fuel.Foundation.dll

2012-08-06 13:24 - 2012-08-06 13:24 - 00037376 _____ (AMD) C:\ATI\ATI.ACE\Fuel\FUEL.Implementation.dll

2012-08-06 13:24 - 2012-08-06 13:24 - 00103424 _____ () C:\ATI\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

2012-08-06 13:03 - 2012-08-06 13:03 - 00479232 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\Localization.Foundation.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00352256 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\Localization.Foundation.Implementation.de_Localization.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00071168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Fusion.Aspects.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00012800 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DPPE.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00011264 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Fets.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.WiFi.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUPStates.Fuel.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00018944 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00018944 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00011264 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00015360 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00012800 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00011776 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00066048 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\APM.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00024576 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\APM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Extension.EEU.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.EEU.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00380928 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00036352 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Client.Shared.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007680 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Client.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 01395200 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00413696 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Systemtray.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00175104 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ResourceManagement.Foundation.Implementation.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00172032 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 01007616 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00028160 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00057344 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 01406464 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects1.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00441344 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00369152 _____ () C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00393216 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 02400256 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00024576 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MultiVPU2.Graphics.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00237568 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00159744 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00100864 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.OverDrive5.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00021504 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00044544 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Audio.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 01260032 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.User.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00026112 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Fets.Fuel.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00021504 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.WiFi.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00048128 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DPPE.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00029696 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUPStates.Fuel.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00037376 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00007680 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00039936 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008192 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00307200 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.Client.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00060928 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.ProfileManager2.dll

2009-07-14 03:01 - 2009-06-10 22:31 - 01165664 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00528384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.dll

2013-08-28 16:17 - 2013-07-18 08:01 - 00258104 _____ (Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll

2012-11-28 10:56 - 2012-10-16 09:39 - 00561664 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcLayers.DLL

2011-02-23 17:09 - 2011-02-23 17:09 - 00301568 _____ (Hyperionics Technology LLC) E:\Programme\FileBX\FileBXH32.dll

2013-07-10 10:19 - 2013-07-10 10:19 - 00313000 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll

2013-08-14 22:22 - 2013-08-14 22:22 - 00358056 _____ () C:\Program Files\Microsoft Office 15\root\office15\c2r32.dll

2013-01-15 19:16 - 2012-02-24 02:55 - 02882048 _____ (Embarcadero Technologies, Inc.) E:\Programme\Avanquest\PDF Experte 8 Ultimate\rtl160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 03409920 _____ (Embarcadero Technologies, Inc.) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vcl160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 01186816 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\TMSlite160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00445952 _____ (Embarcadero Technologies, Inc.) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vclactnband160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00259072 _____ (Embarcadero Technologies, Inc.) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vclx160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 01666560 _____ (Embarcadero Technologies, Inc.) E:\Programme\Avanquest\PDF Experte 8 Ultimate\xmlrtl160.bpl

2013-01-15 19:16 - 2012-03-13 14:50 - 03660800 _____ (Project JEDI) E:\Programme\Avanquest\PDF Experte 8 Ultimate\Jcl160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00087552 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspropsaver160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02478080 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsvector160.bpl

2013-01-15 19:16 - 2012-03-29 18:00 - 04119552 _____ (visagesoft) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsgdi.dll

2013-01-15 19:16 - 2012-02-24 02:55 - 00347136 _____ (Embarcadero Technologies, Inc.) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vclimg160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 04680704 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfcore160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02693120 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\BBlite160.bpl

2013-01-15 19:16 - 2012-02-23 16:11 - 00025088 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vstrees160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00064512 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsprinters160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00064512 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprinter160.bpl

2013-01-15 19:16 - 2011-09-30 19:10 - 00684032 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\js32.dll

2013-01-15 19:16 - 2012-04-11 20:06 - 00097280 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\expertpdfcore160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00253952 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndySystem160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 02506752 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndyProtocols160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00387584 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndyCore160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02253824 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\PKIECtrl160.bpl

2009-07-14 02:18 - 2009-07-14 03:40 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll

2009-07-14 02:18 - 2009-07-14 03:40 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\AVICAP32.DLL

2013-01-15 19:16 - 2012-04-11 20:06 - 00517120 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfeditor160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00255488 _____ (Embarcadero Technologies, Inc.) E:\Programme\Avanquest\PDF Experte 8 Ultimate\inet160.bpl

2013-01-15 19:16 - 2011-01-19 17:49 - 00156160 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\Snapu.dll

2013-01-15 19:16 - 2010-04-06 15:41 - 00316416 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\OLRegist.dll

2013-01-15 19:16 - 2010-08-05 10:57 - 00599296 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\bvrpctln.dll

2011-09-16 15:39 - 2011-09-16 15:39 - 00098664 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll

2011-12-05 17:56 - 2010-11-20 06:25 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\Cabinet.dll

2013-02-13 04:38 - 2013-02-13 04:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2011-06-11 02:15 - 2011-06-11 02:15 - 05601616 _____ (Microsoft Corporation) C:\Windows\system32\mfc100u.dll

2011-06-11 02:15 - 2011-06-11 02:15 - 00064336 _____ (Microsoft Corporation) C:\Windows\system32\MFC100DEU.DLL

2013-08-28 16:17 - 2013-09-04 11:36 - 00749112 _____ (Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\ccwkrlib.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00055352 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\cfglib.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00349752 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccguard.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00029240 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccgrdrc.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00229432 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccgrdw.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00415288 _____ (Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\grdcore.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00218168 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\gpipc.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00059448 _____ (Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avipc.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00419384 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccwgrd.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00807992 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccgen.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00049720 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccgenrc.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00220216 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccupdate.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00028728 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccupdrc.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00083000 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\cclic.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00009784 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\cclicrc.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00237624 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccmsg.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00010296 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccmsgrc.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 04786744 _____ (Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\rcimage.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00014392 _____ (Avira Operations GmbH & Co. KG) e:\programme\antivir\avira\antivir desktop\ccmainrc.dll

2013-08-28 16:17 - 2013-09-04 11:36 - 00212536 _____ (Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\ccupdw.dll

2013-08-18 14:19 - 2013-01-16 22:08 - 00770384 _____ (Microsoft Corporation) E:\Programme\Mozilla Firefox\MSVCR100.dll

2013-08-18 14:19 - 2013-01-16 22:08 - 00421200 _____ (Microsoft Corporation) E:\Programme\Mozilla Firefox\MSVCP100.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 00158104 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\mozglue.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 01914264 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\nss3.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 03551640 _____ () E:\Programme\Mozilla Firefox\mozjs.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 00016280 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\mozalloc.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 03429784 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\gkmedias.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 20616088 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\xul.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 00262552 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\browser\components\browsercomps.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 00152984 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\softokn3.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 00091544 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\nssdbm3.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 00301976 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\freebl3.dll

2013-08-18 14:19 - 2013-08-18 14:20 - 00392600 _____ (Mozilla Foundation) E:\Programme\Mozilla Firefox\nssckbi.dll

2013-04-16 21:01 - 2013-04-16 21:01 - 00424960 _____ (AVM Berlin) C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\s0d1rked.default\extensions\fb_add_on@avm.de\components\windows\FB_AddOn4.dll

2013-04-16 21:01 - 2013-04-16 21:01 - 01085440 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\s0d1rked.default\extensions\fb_add_on@avm.de\components\windows\libeay32.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00220632 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00534480 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\MSVCP110.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00862664 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\MSVCR110.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00537560 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\Telemetry.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00038360 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\logging.dll

2011-12-05 17:57 - 2010-11-20 06:26 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\faultrep.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 00230624 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 01660128 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Utility.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 00020704 _____ (Stan Schultes, VBNetExpert.com) C:\Program Files (x86)\Memeo\AutoBackup\XMLSettings.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 01557728 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00054496 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Interop.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 02888416 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.UI.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 00025824 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.DriveDetection.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 00015872 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Memeo.Client.resources.dll

2011-09-16 01:18 - 2011-09-16 01:18 - 00028672 _____ () C:\Program Files (x86)\Memeo\AutoBackup\de-DE\InstantBackup.resources.dll

2010-04-05 20:52 - 2010-04-05 20:52 - 00013824 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.eWebControl.dll

2010-04-05 20:50 - 2010-04-05 20:50 - 00143360 _____ (Digital River, Inc.) C:\Program Files (x86)\Common Files\Memeo\eWebControl365.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00025824 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Third-party.Security.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00296160 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.DataAccess.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00067808 _____ (Newtonsoft) C:\Program Files (x86)\Memeo\AutoBackup\Newtonsoft.Json.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 02798816 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.BMU.dll

2011-09-16 01:18 - 2011-09-16 01:18 - 00057344 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.DataClad.resources.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00074976 _____ (Finisar Corporation) C:\Program Files (x86)\Memeo\AutoBackup\SQLite.NET.dll

2010-04-05 20:52 - 2010-04-05 20:52 - 00504293 _____ () C:\Program Files (x86)\Memeo\AutoBackup\sqlite3.DLL

2011-09-16 01:16 - 2011-09-16 01:16 - 00042208 _____ (Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoRemoteCore.dll

2011-09-16 01:18 - 2011-09-16 01:18 - 00036864 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.Utility.resources.dll

2010-04-05 20:52 - 2010-04-05 20:52 - 00053248 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Mono.Nat.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00010240 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\MemeoUpdater.resources.dll

2013-07-10 12:34 - 2013-07-10 12:34 - 16166280 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
 

==================== Alternate Data Streams (whitelisted) ==========
 

AlternateDataStreams: C:\ProgramData\Microsoft:cJP8NoA3alrUCM20

AlternateDataStreams: C:\ProgramData\Microsoft:V6rvehwmRjYqRAkFBpLsBNz

AlternateDataStreams: C:\Users\Marko\Cookies:xfyRDFyvnvb5tEWMQke9kc

AlternateDataStreams: C:\Users\Marko\Lokale Einstellungen:ESx4L4fSedPdx1ERV9rqEL

AlternateDataStreams: C:\Users\Marko\AppData\Local:ESx4L4fSedPdx1ERV9rqEL

AlternateDataStreams: C:\Users\Marko\AppData\Local\Anwendungsdaten:ESx4L4fSedPdx1ERV9rqEL
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/04/2013 02:10:28 PM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/04/2013 11:31:18 AM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/03/2013 02:50:35 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (09/03/2013 02:50:35 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (09/03/2013 02:50:33 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/03/2013 02:18:39 PM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/02/2013 02:52:17 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 15.0.4517.1505, Zeitstempel: 0x51bfe4f8

Name des fehlerhaften Moduls: oart.dll, Version: 15.0.4517.1506, Zeitstempel: 0x51c9a2fa

Ausnahmecode: 0xc00002b4

Fehleroffset: 0x0026feab

ID des fehlerhaften Prozesses: 0x19e0

Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0

Pfad der fehlerhaften Anwendung: WINWORD.EXE1

Pfad des fehlerhaften Moduls: WINWORD.EXE2

Berichtskennung: WINWORD.EXE3
 

Error: (09/02/2013 02:41:21 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 15.0.4517.1505, Zeitstempel: 0x51bfe4f8

Name des fehlerhaften Moduls: oart.dll, Version: 15.0.4517.1506, Zeitstempel: 0x51c9a2fa

Ausnahmecode: 0xc00002b4

Fehleroffset: 0x0026feab

ID des fehlerhaften Prozesses: 0x68c

Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0

Pfad der fehlerhaften Anwendung: WINWORD.EXE1

Pfad des fehlerhaften Moduls: WINWORD.EXE2

Berichtskennung: WINWORD.EXE3
 

Error: (09/02/2013 02:40:53 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 15.0.4517.1505, Zeitstempel: 0x51bfe4f8

Name des fehlerhaften Moduls: oart.dll, Version: 15.0.4517.1506, Zeitstempel: 0x51c9a2fa

Ausnahmecode: 0xc00002b4

Fehleroffset: 0x0026feab

ID des fehlerhaften Prozesses: 0xc58

Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0

Pfad der fehlerhaften Anwendung: WINWORD.EXE1

Pfad des fehlerhaften Moduls: WINWORD.EXE2

Berichtskennung: WINWORD.EXE3
 

Error: (09/02/2013 02:40:23 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 15.0.4517.1505, Zeitstempel: 0x51bfe4f8

Name des fehlerhaften Moduls: oart.dll, Version: 15.0.4517.1506, Zeitstempel: 0x51c9a2fa

Ausnahmecode: 0xc00002b4

Fehleroffset: 0x0026feab

ID des fehlerhaften Prozesses: 0x19b4

Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0

Pfad der fehlerhaften Anwendung: WINWORD.EXE1

Pfad des fehlerhaften Moduls: WINWORD.EXE2

Berichtskennung: WINWORD.EXE3
 
 

System errors:

=============

Error: (09/04/2013 02:13:00 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Adobe Active File Monitor V11 erreicht.
 

Error: (09/04/2013 02:11:58 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.
 

Error: (09/04/2013 02:10:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/04/2013 02:10:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/04/2013 02:10:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/04/2013 02:10:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/04/2013 02:10:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/04/2013 02:10:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/04/2013 02:10:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/04/2013 02:10:31 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (09/04/2013 02:10:28 PM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/04/2013 11:31:18 AM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/03/2013 02:50:35 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Programme\Nero\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe
 

Error: (09/03/2013 02:50:35 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Programme\Nero\Nero\Nero8\Nero PhotoSnap\PhotoSnap.exe
 

Error: (09/03/2013 02:50:33 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Programme\Nero\Nero\Nero8\Nero Toolkit\DiscSpeed.exe
 

Error: (09/03/2013 02:18:39 PM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/02/2013 02:52:17 PM) (Source: Application Error)(User: )

Description: WINWORD.EXE15.0.4517.150551bfe4f8oart.dll15.0.4517.150651c9a2fac00002b40026feab19e001cea7db3f6be465C:\Program Files\Microsoft Office 15\Root\Office15\WINWORD.EXEC:\Program Files\Microsoft Office 15\Root\Office15\oart.dll7ec87f32-13ce-11e3-ae6c-1c6f6581d4c8
 

Error: (09/02/2013 02:41:21 PM) (Source: Application Error)(User: )

Description: WINWORD.EXE15.0.4517.150551bfe4f8oart.dll15.0.4517.150651c9a2fac00002b40026feab68c01cea7d9b8c800daC:\Program Files\Microsoft Office 15\Root\Office15\WINWORD.EXEC:\Program Files\Microsoft Office 15\Root\Office15\oart.dllf819c60e-13cc-11e3-ae6c-1c6f6581d4c8
 

Error: (09/02/2013 02:40:53 PM) (Source: Application Error)(User: )

Description: WINWORD.EXE15.0.4517.150551bfe4f8oart.dll15.0.4517.150651c9a2fac00002b40026feabc5801cea7d9a7b777a3C:\Program Files\Microsoft Office 15\Root\Office15\WINWORD.EXEC:\Program Files\Microsoft Office 15\Root\Office15\oart.dlle72e2a81-13cc-11e3-ae6c-1c6f6581d4c8
 

Error: (09/02/2013 02:40:23 PM) (Source: Application Error)(User: )

Description: WINWORD.EXE15.0.4517.150551bfe4f8oart.dll15.0.4517.150651c9a2fac00002b40026feab19b401cea7d994e7367eC:\Program Files\Microsoft Office 15\Root\Office15\WINWORD.EXEC:\Program Files\Microsoft Office 15\Root\Office15\oart.dlld573a32d-13cc-11e3-ae6c-1c6f6581d4c8
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-06-28 13:37:59.118

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.117

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.114

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.100

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.099

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.096

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-05-08 11:24:41.256

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-05-08 11:24:41.254

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-05-08 11:24:41.253

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-05-08 11:24:41.237

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 31%

Total physical RAM: 8188.54 MB

Available physical RAM: 5609.87 MB

Total Pagefile: 16375.25 MB

Available Pagefile: 13331.9 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: (Windows) (Fixed) (Total:104.75 GB) (Free:25.24 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (FreeAgent GoFlex Drive) (Fixed) (Total:465.76 GB) (Free:401.84 GB) NTFS

Drive e: (Programme) (Fixed) (Total:41.22 GB) (Free:12.25 GB) NTFS

Drive f: (Daten) (Fixed) (Total:180.27 GB) (Free:43.81 GB) NTFS

Drive g: (Backup) (Fixed) (Total:89.52 GB) (Free:16.88 GB) NTFS

Drive h: (Laufwerk) (Fixed) (Total:50 GB) (Free:27.1 GB) NTFS

Drive k: (Sicherung) (Fixed) (Total:931.51 GB) (Free:21.39 GB) NTFS

Drive p: (SEAGATE_EXP) (Fixed) (Total:1907.32 GB) (Free:1885 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C4086204)

Partition 1: (Active) - (Size=105 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=361 GB) - (Type=OF Extended)
 

========================================================

Disk: 1 (Size: 932 GB) (Disk ID: 56A6B2F7)

Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (Size: 466 GB) (Disk ID: 76942D58)

Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 4.
 

==================== End Of Log ============================

mk72	04.09.2013 18:33

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2013 03

Ran by Marko (administrator) on KOBOLT on 04-09-2013 14:22:13

Running from C:\Users\Marko\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avshadow.exe

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe

(Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe

(mst software GmbH, Germany) E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Deutsche Telekom AG) E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe

(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

(StarWind Software) e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Logitech, Inc.) C:\Program Files\Logitech\FlowScroll\KhalScroll.exe

(Logitech, Inc.) E:\Programme\Logitech\SetPointP\SetPoint.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() E:\Programme\Ocster Backup\bin\backupClient-ox.exe

(IvoSoft) E:\Programme\Classic Shell\ClassicStartMenu.exe

(Blue Onion Software) E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe

(Microsoft) E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

() C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

(Hyperionics Technology LLC) E:\Programme\FileBX\FileBX.exe

() E:\Programme\MadAppLauncher\MadAppLauncher.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE

(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE

() e:\Programme\Ocster Backup\bin\oxHelper.exe

(Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe

() E:\Programme\Rainmeter\Rainmeter.exe

() E:\Programme\FileBX\Fbx32helper.exe

(Visagesoft) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe

(Mozilla Corporation) E:\Programme\Mozilla Firefox\firefox.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

() e:\Programme\Ocster Backup\bin\backupService-ox.exe

() C:\Program Files (x86)\Memeo\AutoBackup\InstantBackup.exe

(Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\MemeoUpdater.exe

() e:\Programme\Ocster Backup\bin\oxHelper.exe

(TomTom) E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe

(Mozilla Corporation) E:\Programme\Mozilla Firefox\plugin-container.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

(Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)

HKLM\...\Run: [LogiScrollApp] - C:\Program Files\Logitech\FlowScroll\KhalScroll.exe [166680 2012-02-08] (Logitech, Inc.)

HKLM\...\Run: [EvtMgr6] - E:\Programme\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)

HKLM\...\Run: [Ocster Backup] - E:\Programme\Ocster Backup\bin\backupClient-ox.exe [312488 2013-07-02] ()

HKLM\...\Run: [Classic Start Menu] - E:\Programme\Classic Shell\ClassicStartMenu.exe [151552 2013-06-29] (IvoSoft)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKLM\...\Policies\Explorer: [NoActiveDesktop] 1

HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1

HKLM\...\Policies\Explorer: [NoDriveTypeAutoRun] 60

HKLM\...\Policies\Explorer: [NoViewContextMenu] 0

HKCU\...\Run: [DeskDriveStartup] - E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe [66048 2009-12-06] (Blue Onion Software)

HKCU\...\Run: [BrowserMask] - E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe [101280 2011-06-21] (Microsoft)

HKCU\...\Run: [] -  [x]

HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKCU\...\Policies\Explorer: [NoCDBurning] 0

MountPoints2: I - I:\Run.exe

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [NPSStartup] -  [x]

HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-01-31] ()

HKLM-x32\...\Run: [DivXMediaServer] - e:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)

HKLM-x32\...\Run: [vspdfprsrv.exe] - e:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe [6082560 2012-04-23] (Visagesoft)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [StartCCC] - C:\ATI\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Memeo Instant Backup] - C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2011-09-16] (Memeo Inc.)

HKLM-x32\...\Run: [avgnt] - E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FileBox eXtender.lnk

ShortcutTarget: FileBox eXtender.lnk -> E:\Programme\FileBX\FileBX.exe (Hyperionics Technology LLC)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MadAppLauncher.lnk

ShortcutTarget: MadAppLauncher.lnk -> E:\Programme\MadAppLauncher\MadAppLauncher.exe ()

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk

ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk

ShortcutTarget: Mediencenter.lnk -> C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk

ShortcutTarget: Rainmeter.lnk -> E:\Programme\Rainmeter\Rainmeter.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.jan-records.de/

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {B8043587-EBE9-4754-9E02-4BD5899FE7BA} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=971163&p={searchTerms}

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll (Logitech, Inc.)

BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - e:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programme\Java\bin\ssv.dll (Oracle Corporation)

BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Programme\Java\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll (Logitech, Inc.)

BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} -  No File

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.4.0\ViProtocol.dll (AVG Secure Search)

Winsock: Catalog9 01 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 20 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 01 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 02 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 03 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 04 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 05 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 06 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 07 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 08 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 20 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Path=C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-812850846-3816870413-364722810-1001\FireFox

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @canon.com/MycameraPlugin - E:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)

FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - e:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - e:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - E:\Programme\Java\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}] C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt

FF Extension: Logitech Flow Scroll - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt

FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF StartMenuInternet: FIREFOX.EXE - e:\Programme\Mozilla Firefox\firefox.exe
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-07-17] (Adobe Systems)

S2 AdobeActiveFileMonitor11.0; E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)

R2 AMD FUEL Service; C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.)

R2 AntiVirSchedulerService; E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; E:\Programme\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()

S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)

R2 DfSdkS; E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)

S2 LanmanWorkstation; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation)

R2 MCSWASVR; E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe [12800 2011-11-23] (Deutsche Telekom AG)

S4 Nero BackItUp Scheduler 3; E:\Programme\Nero\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)

S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)

R2 ocster_backup; e:\Programme\Ocster Backup\bin\backupService-ox.exe [23720 2013-07-02] ()

R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)

S3 SandraAgentSrv; E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe [68760 2008-09-05] (SiSoftware)

R2 StarWindServiceAE; e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)

R2 TomTomHOMEService; E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe [92632 2012-08-28] (TomTom)

S4 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [1616048 2013-07-29] (AVG Secure Search)

S4 McComponentHostService; "C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe" [x]

R2 Update-Service; %SystemRoot%\System32\UpdSvc.dll [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 AODDriver4.1; C:\ATI\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)

R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)

S3 etdrv; C:\Windows\etdrv.sys [25640 2012-02-01] (Windows (R) Server 2003 DDK provider)

S3 etdrv; C:\Windows\etdrv.sys [25640 2012-02-01] (Windows (R) Server 2003 DDK provider)

S3 gdrv; C:\Windows\gdrv.sys [25640 2012-10-09] (Windows (R) Server 2003 DDK provider)

S3 gdrv; C:\Windows\gdrv.sys [25640 2012-10-09] (Windows (R) Server 2003 DDK provider)

S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG)

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-02-01] ()

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-02-01] ()

R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39728 2011-11-04] (Paragon Software Group)

R0 oodrvled; C:\Windows\System32\DRIVERS\oodrvled.sys [30800 2011-03-02] (O&O Software GmbH)

R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)

S3 SANDRA; E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\Sandra.sys [23112 2009-08-08] (SiSoftware)

S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-11-07] (Duplex Secure Ltd.)

R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-04] (Windows (R) 2000 DDK provider)

R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-04] (Paragon)

R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-04] (Paragon)

S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [x]

S0 TPkd; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-04 14:20 - 2013-09-04 14:20 - 01950416 _____ (Farbar) C:\Users\Marko\Desktop\FRST64.exe

2013-09-04 14:08 - 2013-09-04 14:08 - 00000720 _____ C:\Users\Marko\Desktop\defogger_disable.log

2013-09-04 14:08 - 2013-09-04 14:08 - 00000344 _____ C:\Users\Marko\defogger_reenable

2013-09-04 14:06 - 2013-09-04 14:06 - 00050477 _____ C:\Users\Marko\Desktop\Defogger.exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(3).exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(2).exe

2013-09-04 13:51 - 2013-09-04 13:51 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(1).exe

2013-09-02 17:15 - 2013-09-02 17:15 - 00000787 _____ C:\Users\Marko\Desktop\DivX Movies.lnk

2013-09-02 17:15 - 2013-09-02 17:15 - 00000754 _____ C:\Users\Public\Desktop\DivX Plus Player.lnk

2013-08-29 08:59 - 2013-08-29 08:59 - 05192704 _____ (Geza Kovacs) C:\Users\Marko\Downloads\unetbootin-windows-585.exe

2013-08-29 08:53 - 2013-08-29 08:53 - 00000000 ____D C:\Users\Marko\Desktop\Hausbau

2013-08-28 19:23 - 2013-08-28 19:23 - 616382464 _____ C:\Users\Marko\Downloads\rescue-system.iso

2013-08-28 16:21 - 2013-08-28 16:21 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Avira

2013-08-28 16:18 - 2013-09-04 11:36 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-08-28 16:17 - 2013-09-04 11:36 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-08-28 16:17 - 2013-09-04 11:36 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-28 16:17 - 2013-08-28 16:17 - 00000000 ____D C:\ProgramData\Avira

2013-08-28 16:17 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-08-28 15:58 - 2013-08-28 15:59 - 110344048 _____ C:\Users\Marko\Downloads\avira_free4045_antivirus_de.exe

2013-08-28 15:46 - 2013-08-28 15:46 - 02733958 _____ C:\Users\Marko\Downloads\tdsskiller.zip

2013-08-28 15:40 - 2013-08-28 15:40 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck.exe

2013-08-27 13:39 - 2013-08-29 08:43 - 00095620 _____ C:\Windows\PFRO.log

2013-08-26 14:38 - 2013-08-26 15:04 - 00000000 ____D C:\Users\Marko\Desktop\Kaspersky

2013-08-25 18:15 - 2013-08-27 22:03 - 00000000 ____D C:\Users\Marko\AppData\Local\BewerbungsMaster

2013-08-25 18:14 - 2013-08-27 23:00 - 00000000 ____D C:\Users\Marko\Documents\BewerbungsMaster

2013-08-25 18:13 - 2013-08-25 18:13 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2013-08-25 18:07 - 2013-08-25 18:14 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2013-08-25 18:07 - 2013-08-25 18:14 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2013-08-25 18:06 - 2013-08-25 18:06 - 11616256 _____ C:\Users\Marko\Downloads\master71.exe

2013-08-25 17:23 - 2013-09-02 17:00 - 00000000 ____D C:\Users\Marko\Desktop\Nick_Ausbildung

2013-08-24 11:32 - 2013-09-04 14:10 - 00001747 _____ C:\Windows\setupact.log

2013-08-24 11:32 - 2013-08-24 11:32 - 00000000 _____ C:\Windows\setuperr.log

2013-08-22 15:01 - 2013-08-22 15:01 - 00000000 ____D C:\Users\Marko\AppData\Roaming\dvdcss

2013-08-22 14:58 - 2013-08-22 14:58 - 00000687 _____ C:\Users\Marko\Desktop\MediaCoder x64.lnk

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Broad Intelligence

2013-08-22 14:55 - 2013-08-22 14:57 - 68913986 _____ C:\Users\Marko\Downloads\MediaCoder-x64-0.8.25.5553.exe

2013-08-19 14:10 - 2013-08-25 21:41 - 00000000 ____D C:\Users\Marko\MEDION NAS TOOL

2013-08-19 14:00 - 2013-08-19 14:00 - 00001168 _____ C:\Users\Public\Desktop\Memeo Instant Backup.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000954 _____ C:\Users\Public\Desktop\MEDION NAS TOOL.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Memeo

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Program Files (x86)\Memeo

2013-08-18 13:50 - 2013-08-18 13:50 - 02899663 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.cab

2013-08-18 13:50 - 2013-08-18 13:50 - 02427392 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.exe

2013-08-15 11:34 - 2013-08-28 15:47 - 00000000 ____D C:\Users\Marko\Downloads\tdsskiller

2013-08-14 22:28 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-08-14 22:28 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-14 22:28 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-14 22:28 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-08-14 22:28 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-08-14 22:28 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-08-14 22:28 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-14 22:28 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-08-14 22:28 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-08-14 22:28 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-08-14 22:28 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-08-14 22:28 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-08-14 22:28 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-08-14 22:28 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-08-14 22:28 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-08-14 22:27 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-14 22:27 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-14 22:27 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-08-14 22:27 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-08-14 22:27 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-08-14 22:24 - 2013-08-14 22:24 - 02224290 _____ C:\Users\Marko\Downloads\tdsskiller.rar

2013-08-14 22:23 - 2013-08-14 22:26 - 176212264 _____ (Kaspersky Lab) C:\Users\Marko\Downloads\kis13.0.1.4190de-de(2).exe

2013-08-14 22:22 - 2013-08-14 22:25 - 181393840 _____ C:\Users\Marko\Downloads\setup_11.0.0.1245.x01_2013_08_14_23_13.exe

2013-08-14 22:17 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-14 22:17 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-08-14 22:17 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 22:17 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-08-14 22:17 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 22:17 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 22:17 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-08-14 22:17 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 22:17 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 22:17 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 22:17 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 22:17 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-14 22:17 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-08-14 22:17 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-08-14 22:17 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-08-14 22:17 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-08-14 22:17 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-08-14 22:17 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-08-14 22:17 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-08-14 22:17 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-08-14 22:17 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-08-14 22:17 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-08-14 22:17 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-08-14 22:17 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-08-14 22:17 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-08-14 22:17 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 22:17 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-08-13 15:34 - 2013-08-13 15:34 - 09143640 _____ (Abelssoft                                                   ) C:\Users\Marko\Downloads\6773_2_ABS_2014_CB.exe

2013-08-13 15:31 - 2013-08-13 15:32 - 21991048 _____ (abylonsoft                                                  ) C:\Users\Marko\Downloads\6219_2_Cryptdrive_CB.exe

2013-08-09 15:16 - 2013-08-09 15:16 - 03128152 _____ C:\Users\Marko\Downloads\org.geometerplus.zlibrary.ui.android_106042.apk

2013-08-09 15:16 - 2013-08-09 15:16 - 00230586 _____ C:\Users\Marko\Downloads\org.fdroid.fdroid_40.apk

2013-08-09 15:15 - 2013-08-09 15:15 - 06113402 _____ C:\Users\Marko\Downloads\mapfactor_navigator_0_12_x.apk
 

==================== One Month Modified Files and Folders =======
 

2013-09-04 14:22 - 2013-09-04 14:22 - 00000000 ____D C:\FRST

2013-09-04 14:20 - 2013-09-04 14:20 - 01950416 _____ (Farbar) C:\Users\Marko\Desktop\FRST64.exe

2013-09-04 14:20 - 2009-07-14 06:45 - 00015856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-04 14:20 - 2009-07-14 06:45 - 00015856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-04 14:17 - 2012-09-14 10:49 - 00000338 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job

2013-09-04 14:16 - 2012-01-16 23:34 - 01298888 _____ C:\Windows\WindowsUpdate.log

2013-09-04 14:15 - 2012-03-21 16:30 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-04 14:10 - 2013-08-24 11:32 - 00001747 _____ C:\Windows\setupact.log

2013-09-04 14:10 - 2012-03-21 16:30 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-04 14:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-04 14:08 - 2013-09-04 14:08 - 00000720 _____ C:\Users\Marko\Desktop\defogger_disable.log

2013-09-04 14:08 - 2013-09-04 14:08 - 00000344 _____ C:\Users\Marko\defogger_reenable

2013-09-04 14:08 - 2012-03-29 22:15 - 00069246 _____ C:\Windows\system32\log.xml

2013-09-04 14:08 - 2012-03-29 22:15 - 00000008 _____ C:\Windows\system32\log-suffix.xml

2013-09-04 14:08 - 2011-12-05 17:51 - 00000000 ____D C:\Users\Marko

2013-09-04 14:06 - 2013-09-04 14:06 - 00050477 _____ C:\Users\Marko\Desktop\Defogger.exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(3).exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(2).exe

2013-09-04 13:51 - 2013-09-04 13:51 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(1).exe

2013-09-04 11:36 - 2013-08-28 16:18 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-04 11:36 - 2013-08-28 16:17 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-04 11:36 - 2013-08-28 16:17 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-03 14:28 - 2012-08-03 17:25 - 00000000 ____D C:\Users\Marko\AppData\Local\Adobe

2013-09-02 17:43 - 2012-04-04 12:07 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Mp3tag

2013-09-02 17:16 - 2012-03-19 17:27 - 00000000 ____D C:\Users\Marko\Desktop\Auto

2013-09-02 17:15 - 2013-09-02 17:15 - 00000787 _____ C:\Users\Marko\Desktop\DivX Movies.lnk

2013-09-02 17:15 - 2013-09-02 17:15 - 00000754 _____ C:\Users\Public\Desktop\DivX Plus Player.lnk

2013-09-02 17:15 - 2012-08-21 13:36 - 00000000 ____D C:\ProgramData\DivX

2013-09-02 17:13 - 2012-11-29 12:31 - 00000000 _____ C:\end

2013-09-02 17:00 - 2013-08-25 17:23 - 00000000 ____D C:\Users\Marko\Desktop\Nick_Ausbildung

2013-09-02 15:12 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-08-29 20:08 - 2011-12-05 17:51 - 00000000 ___RD C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-08-29 19:31 - 2009-07-14 19:58 - 00700370 _____ C:\Windows\system32\perfh007.dat

2013-08-29 19:31 - 2009-07-14 19:58 - 00149184 _____ C:\Windows\system32\perfc007.dat

2013-08-29 19:31 - 2009-07-14 07:13 - 01622098 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-29 17:02 - 2013-02-03 18:03 - 00000000 ____D C:\Users\Marko\AppData\Local\Microsoft Help

2013-08-29 16:39 - 2013-07-19 13:45 - 00000000 ____D C:\Users\Marko\AppData\Roaming\onOne Software

2013-08-29 08:59 - 2013-08-29 08:59 - 05192704 _____ (Geza Kovacs) C:\Users\Marko\Downloads\unetbootin-windows-585.exe

2013-08-29 08:53 - 2013-08-29 08:53 - 00000000 ____D C:\Users\Marko\Desktop\Hausbau

2013-08-29 08:43 - 2013-08-27 13:39 - 00095620 _____ C:\Windows\PFRO.log

2013-08-28 19:23 - 2013-08-28 19:23 - 616382464 _____ C:\Users\Marko\Downloads\rescue-system.iso

2013-08-28 16:21 - 2013-08-28 16:21 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Avira

2013-08-28 16:17 - 2013-08-28 16:17 - 00000000 ____D C:\ProgramData\Avira

2013-08-28 15:59 - 2013-08-28 15:58 - 110344048 _____ C:\Users\Marko\Downloads\avira_free4045_antivirus_de.exe

2013-08-28 15:47 - 2013-08-15 11:34 - 00000000 ____D C:\Users\Marko\Downloads\tdsskiller

2013-08-28 15:46 - 2013-08-28 15:46 - 02733958 _____ C:\Users\Marko\Downloads\tdsskiller.zip

2013-08-28 15:40 - 2013-08-28 15:40 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck.exe

2013-08-27 23:00 - 2013-08-25 18:14 - 00000000 ____D C:\Users\Marko\Documents\BewerbungsMaster

2013-08-27 22:03 - 2013-08-25 18:15 - 00000000 ____D C:\Users\Marko\AppData\Local\BewerbungsMaster

2013-08-26 16:55 - 2012-03-23 11:34 - 00000000 ____D C:\ProgramData\firebird

2013-08-26 15:04 - 2013-08-26 14:38 - 00000000 ____D C:\Users\Marko\Desktop\Kaspersky

2013-08-26 14:53 - 2013-05-24 12:28 - 00002453 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk

2013-08-25 21:41 - 2013-08-19 14:10 - 00000000 ____D C:\Users\Marko\MEDION NAS TOOL

2013-08-25 18:14 - 2013-08-25 18:07 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2013-08-25 18:14 - 2013-08-25 18:07 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2013-08-25 18:13 - 2013-08-25 18:13 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2013-08-25 18:06 - 2013-08-25 18:06 - 11616256 _____ C:\Users\Marko\Downloads\master71.exe

2013-08-24 11:32 - 2013-08-24 11:32 - 00000000 _____ C:\Windows\setuperr.log

2013-08-23 20:20 - 2013-07-29 14:57 - 00000370 _____ C:\Windows\Tasks\One-Click Optimizer.job

2013-08-23 20:18 - 2011-12-05 17:31 - 00000000 ____D C:\Windows\Panther

2013-08-23 13:05 - 2013-04-21 20:07 - 00001147 _____ C:\Users\Marko\Desktop\Mediencenter.lnk

2013-08-23 13:05 - 2013-04-21 20:07 - 00001133 _____ C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk

2013-08-22 15:01 - 2013-08-22 15:01 - 00000000 ____D C:\Users\Marko\AppData\Roaming\dvdcss

2013-08-22 14:58 - 2013-08-22 14:58 - 00000687 _____ C:\Users\Marko\Desktop\MediaCoder x64.lnk

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Broad Intelligence

2013-08-22 14:57 - 2013-08-22 14:55 - 68913986 _____ C:\Users\Marko\Downloads\MediaCoder-x64-0.8.25.5553.exe

2013-08-22 14:33 - 2012-01-03 18:30 - 00018944 _____ C:\Users\Marko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-08-22 14:31 - 2012-08-21 13:39 - 00000000 ____D C:\Users\Marko\AppData\Roaming\DivX

2013-08-22 14:30 - 2012-02-28 17:45 - 00000124 _____ C:\Users\Marko\Documents\ax_files.xml

2013-08-21 12:09 - 2011-12-06 19:45 - 00000000 ____D C:\ProgramData\ashampoo

2013-08-19 14:00 - 2013-08-19 14:00 - 00001168 _____ C:\Users\Public\Desktop\Memeo Instant Backup.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000954 _____ C:\Users\Public\Desktop\MEDION NAS TOOL.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Memeo

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Program Files (x86)\Memeo

2013-08-18 13:50 - 2013-08-18 13:50 - 02899663 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.cab

2013-08-18 13:50 - 2013-08-18 13:50 - 02427392 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.exe

2013-08-15 14:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-08-15 11:42 - 2013-03-01 12:06 - 00000000 ____D C:\Program Files\Microsoft Office 15

2013-08-14 22:26 - 2013-08-14 22:23 - 176212264 _____ (Kaspersky Lab) C:\Users\Marko\Downloads\kis13.0.1.4190de-de(2).exe

2013-08-14 22:25 - 2013-08-14 22:22 - 181393840 _____ C:\Users\Marko\Downloads\setup_11.0.0.1245.x01_2013_08_14_23_13.exe

2013-08-14 22:24 - 2013-08-14 22:24 - 02224290 _____ C:\Users\Marko\Downloads\tdsskiller.rar

2013-08-14 22:24 - 2013-07-11 11:28 - 00000000 ____D C:\Windows\system32\MRT

2013-08-14 22:18 - 2011-12-06 14:35 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-13 15:34 - 2013-08-13 15:34 - 09143640 _____ (Abelssoft                                                   ) C:\Users\Marko\Downloads\6773_2_ABS_2014_CB.exe

2013-08-13 15:32 - 2013-08-13 15:31 - 21991048 _____ (abylonsoft                                                  ) C:\Users\Marko\Downloads\6219_2_Cryptdrive_CB.exe

2013-08-12 11:28 - 2013-07-10 10:20 - 00000000 ____D C:\Users\_ocster_backup_

2013-08-09 15:16 - 2013-08-09 15:16 - 03128152 _____ C:\Users\Marko\Downloads\org.geometerplus.zlibrary.ui.android_106042.apk

2013-08-09 15:16 - 2013-08-09 15:16 - 00230586 _____ C:\Users\Marko\Downloads\org.fdroid.fdroid_40.apk

2013-08-09 15:15 - 2013-08-09 15:15 - 06113402 _____ C:\Users\Marko\Downloads\mapfactor_navigator_0_12_x.apk
 

Files to move or delete:

====================

C:\Users\Marko\AppData\Local\Temp\DivXSetup.exe

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista64\R4EEA64H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista64\R4EED64H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista64\R4EEG64H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista64\R4EEL64H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista64\R4EEP64H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista\R4EEA32H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista\R4EED32H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista\R4EEG32H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista\R4EEL32H.dll

C:\Users\Marko\AppData\Local\Temp\pft3A08~tmp\HDMI\Vista\R4EEP32H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista64\R4EEA64H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista64\R4EED64H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista64\R4EEG64H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista64\R4EEL64H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista64\R4EEP64H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista\R4EEA32H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista\R4EED32H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista\R4EEG32H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista\R4EEL32H.dll

C:\Users\Marko\AppData\Local\Temp\pft2E93~tmp\HDMI\Vista\R4EEP32H.dll

C:\Users\Marko\AppData\Local\Temp\MailStore\MailStoreHomeSetup-8.0.5.8779.exe

C:\Users\Marko\AppData\Local\Temp\ct3297265\ism.exe

C:\Users\Marko\AppData\Local\Temp\ainet2188D7FD\update_0530_4.1.1.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-02 12:29
 

==================== End Of Log ============================

--- --- ---

--- --- ---

mk72	04.09.2013 18:39

Ich hab hier noch ein paar logs vom KIS-Service-Programm gefunden, vielleicht nützts.

Code:

11:34:33.0399 6092  TDSS rootkit removing tool 2.8.17.0 Apr 11 2013 11:56:34

11:34:37.0468 6092  ============================================================

11:34:37.0468 6092  Current date / time: 2013/08/15 11:34:37.0468

11:34:37.0468 6092  SystemInfo:

11:34:37.0468 6092  

11:34:37.0469 6092  OS Version: 6.1.7601 ServicePack: 1.0

11:34:37.0469 6092  Product type: Workstation

11:34:37.0469 6092  ComputerName: KOBOLT

11:34:37.0469 6092  UserName: Marko

11:34:37.0469 6092  Windows directory: C:\Windows

11:34:37.0469 6092  System windows directory: C:\Windows

11:34:37.0469 6092  Running under WOW64

11:34:37.0469 6092  Processor architecture: Intel x64

11:34:37.0469 6092  Number of processors: 6

11:34:37.0469 6092  Page size: 0x1000

11:34:37.0470 6092  Boot type: Normal boot

11:34:37.0470 6092  ============================================================

11:34:37.0858 6092  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

11:34:37.0879 6092  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0CADE00 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

11:34:37.0882 6092  Drive \Device\Harddisk2\DR2 - Size: 0x7470C05E00 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'

11:34:38.0164 6092  Drive \Device\Harddisk3\DR3 - Size: 0x2BAA1476000 (2794.52 Gb), SectorSize: 0x1000, Cylinders: 0xB220, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'

11:34:38.0168 6092  ============================================================

11:34:38.0168 6092  \Device\Harddisk0\DR0:

11:34:38.0168 6092  MBR partitions:

11:34:38.0168 6092  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xD17F0AB

11:34:38.0176 6092  \Device\Harddisk1\DR1:

11:34:38.0176 6092  MBR partitions:

11:34:38.0176 6092  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982

11:34:38.0176 6092  \Device\Harddisk2\DR2:

11:34:38.0229 6092  MBR partitions:

11:34:38.0229 6092  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C41

11:34:38.0229 6092  \Device\Harddisk3\DR3:

11:34:38.0387 6092  MBR partitions:

11:34:38.0387 6092  \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2BAA0800

11:34:38.0387 6092  ============================================================

11:34:38.0431 6092  C: <-> \Device\Harddisk0\DR0\Partition1

11:34:38.0474 6092  D: <-> \Device\Harddisk2\DR2\Partition1

11:34:38.0492 6092  K: <-> \Device\Harddisk1\DR1\Partition1

11:34:38.0522 6092  P: <-> \Device\Harddisk3\DR3\Partition1

11:34:38.0522 6092  ============================================================

11:34:38.0523 6092  Initialize success

11:34:38.0523 6092  ============================================================

11:34:41.0787 6172  ============================================================

11:34:41.0787 6172  Scan started

11:34:41.0787 6172  Mode: Manual; 

11:34:41.0787 6172  ============================================================

11:34:42.0653 6172  ================ Scan system memory ========================

11:34:42.0653 6172  System memory - ok

11:34:42.0654 6172  ================ Scan services =============================

11:34:43.0365 6172  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys

11:34:43.0369 6172  1394ohci - ok

11:34:43.0408 6172  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

11:34:43.0415 6172  ACPI - ok

11:34:43.0445 6172  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

11:34:43.0446 6172  AcpiPmi - ok

11:34:43.0520 6172  [ 8B46D5A1D3EF08232C04D0EAFB871FB2 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

11:34:43.0523 6172  Adobe LM Service - ok

11:34:43.0548 6172  AdobeActiveFileMonitor11.0 - ok

11:34:43.0599 6172  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

11:34:43.0603 6172  adp94xx - ok

11:34:43.0633 6172  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

11:34:43.0636 6172  adpahci - ok

11:34:43.0641 6172  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

11:34:43.0643 6172  adpu320 - ok

11:34:43.0673 6172  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

11:34:43.0674 6172  AeLookupSvc - ok

11:34:43.0729 6172  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys

11:34:43.0735 6172  AFD - ok

11:34:43.0766 6172  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys

11:34:43.0768 6172  agp440 - ok

11:34:43.0785 6172  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

11:34:43.0786 6172  ALG - ok

11:34:43.0812 6172  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys

11:34:43.0813 6172  aliide - ok

11:34:43.0855 6172  [ 20C8A3E435A47F0408A1EA674AFA6194 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

11:34:43.0857 6172  AMD External Events Utility - ok

11:34:43.0928 6172  AMD FUEL Service - ok

11:34:43.0962 6172  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys

11:34:43.0964 6172  amdide - ok

11:34:43.0995 6172  [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64        C:\Windows\system32\DRIVERS\amdiox64.sys

11:34:43.0997 6172  amdiox64 - ok

11:34:44.0024 6172  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

11:34:44.0026 6172  AmdK8 - ok

11:34:44.0529 6172  [ 0B45C18B0F3EE996D25BAA4E74884B83 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

11:34:44.0690 6172  amdkmdag - ok

11:34:44.0737 6172  [ 0E57258E5CC4CC7A9A9A877AFDF0CEC6 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

11:34:44.0743 6172  amdkmdap - ok

11:34:44.0783 6172  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

11:34:44.0784 6172  AmdPPM - ok

11:34:44.0812 6172  [ 53D8D46D51D390ABDB54ECA623165CB7 ] amdsata         C:\Windows\system32\DRIVERS\amdsata.sys

11:34:44.0814 6172  amdsata - ok

11:34:44.0842 6172  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

11:34:44.0845 6172  amdsbs - ok

11:34:44.0863 6172  [ 75C51148154E34EB3D7BB84749A758D5 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

11:34:44.0863 6172  amdxata - ok

11:34:44.0901 6172  [ EE4797DFEBBE8ACDB548DD8E80BE0A88 ] amd_sata        C:\Windows\system32\DRIVERS\amd_sata.sys

11:34:44.0902 6172  amd_sata - ok

11:34:44.0922 6172  [ D56EAD71A86FD2ACAE2DB47D0A6A3A41 ] amd_xata        C:\Windows\system32\DRIVERS\amd_xata.sys

11:34:44.0923 6172  amd_xata - ok

11:34:44.0972 6172  AODDriver4.01 - ok

11:34:45.0023 6172  [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1    C:\ATI\ATI.ACE\Fuel\amd64\AODDriver2.sys

11:34:45.0025 6172  AODDriver4.1 - ok

11:34:45.0062 6172  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys

11:34:45.0065 6172  AppID - ok

11:34:45.0088 6172  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

11:34:45.0090 6172  AppIDSvc - ok

11:34:45.0112 6172  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll

11:34:45.0114 6172  Appinfo - ok

11:34:45.0152 6172  [ BA957E7ACD2B44FA3B01FAA64F6A9060 ] AppleCharger    C:\Windows\system32\DRIVERS\AppleCharger.sys

11:34:45.0153 6172  AppleCharger - ok

11:34:45.0180 6172  [ 95EF7247C50C7241FDAE39A9B3AFF4AE ] AppleChargerSrv C:\Windows\system32\AppleChargerSrv.exe

11:34:45.0181 6172  AppleChargerSrv - ok

11:34:45.0229 6172  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt         C:\Windows\System32\appmgmts.dll

11:34:45.0231 6172  AppMgmt - ok

11:34:45.0267 6172  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys

11:34:45.0268 6172  arc - ok

11:34:45.0272 6172  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

11:34:45.0273 6172  arcsas - ok

11:34:45.0458 6172  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

11:34:45.0460 6172  aspnet_state - ok

11:34:45.0501 6172  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

11:34:45.0502 6172  AsyncMac - ok

11:34:45.0537 6172  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys

11:34:45.0538 6172  atapi - ok

11:34:45.0590 6172  [ B0790FF0E25B7A2674296052F2162C1A ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys

11:34:45.0591 6172  AtiHDAudioService - ok

11:34:45.0632 6172  atillk64 - ok

11:34:45.0682 6172  [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie         C:\Windows\system32\DRIVERS\AtiPcie.sys

11:34:45.0682 6172  AtiPcie - ok

11:34:45.0733 6172  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

11:34:45.0746 6172  AudioEndpointBuilder - ok

11:34:45.0760 6172  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

11:34:45.0765 6172  AudioSrv - ok

11:34:45.0812 6172  [ 18AAAC7ED383C465E319B5DD07D0A0B6 ] avgtp           C:\Windows\system32\drivers\avgtpx64.sys

11:34:45.0813 6172  avgtp - ok

11:34:46.0124 6172  [ F1CA8ED683D6945EFDC4492AB60B1460 ] AVP             C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe

11:34:46.0128 6172  AVP - ok

11:34:46.0175 6172  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll

11:34:46.0178 6172  AxInstSV - ok

11:34:46.0222 6172  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

11:34:46.0227 6172  b06bdrv - ok

11:34:46.0270 6172  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

11:34:46.0276 6172  b57nd60a - ok

11:34:46.0303 6172  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

11:34:46.0305 6172  BDESVC - ok

11:34:46.0341 6172  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

11:34:46.0343 6172  Beep - ok

11:34:46.0399 6172  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll

11:34:46.0413 6172  BFE - ok

11:34:46.0454 6172  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll

11:34:46.0465 6172  BITS - ok

11:34:46.0493 6172  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

11:34:46.0494 6172  blbdrive - ok

11:34:46.0536 6172  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

11:34:46.0539 6172  bowser - ok

11:34:46.0586 6172  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

11:34:46.0587 6172  BrFiltLo - ok

11:34:46.0592 6172  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

11:34:46.0593 6172  BrFiltUp - ok

11:34:46.0616 6172  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll

11:34:46.0617 6172  Browser - ok

11:34:46.0622 6172  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

11:34:46.0625 6172  Brserid - ok

11:34:46.0636 6172  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

11:34:46.0637 6172  BrSerWdm - ok

11:34:46.0640 6172  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

11:34:46.0641 6172  BrUsbMdm - ok

11:34:46.0644 6172  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

11:34:46.0645 6172  BrUsbSer - ok

11:34:46.0699 6172  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys

11:34:46.0701 6172  BthEnum - ok

11:34:46.0736 6172  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

11:34:46.0739 6172  BTHMODEM - ok

11:34:46.0759 6172  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

11:34:46.0761 6172  BthPan - ok

11:34:46.0787 6172  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys

11:34:46.0794 6172  BTHPORT - ok

11:34:46.0828 6172  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

11:34:46.0830 6172  bthserv - ok

11:34:46.0851 6172  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys

11:34:46.0852 6172  BTHUSB - ok

11:34:46.0879 6172  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

11:34:46.0881 6172  cdfs - ok

11:34:46.0915 6172  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

11:34:46.0917 6172  cdrom - ok

11:34:46.0959 6172  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll

11:34:46.0961 6172  CertPropSvc - ok

11:34:47.0076 6172  [ 213B6EC3DE19E35373A1906397588429 ] CGVPNCliSrvc    C:\Program Files\CyberGhost VPN\CGVPNCliService.exe

11:34:47.0136 6172  CGVPNCliSrvc - ok

11:34:47.0175 6172  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

11:34:47.0177 6172  circlass - ok

11:34:47.0215 6172  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys

11:34:47.0222 6172  CLFS - ok

11:34:47.0271 6172  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

11:34:47.0273 6172  clr_optimization_v2.0.50727_32 - ok

11:34:47.0314 6172  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

11:34:47.0317 6172  clr_optimization_v2.0.50727_64 - ok

11:34:47.0395 6172  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

11:34:47.0398 6172  clr_optimization_v4.0.30319_32 - ok

11:34:47.0412 6172  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

11:34:47.0415 6172  clr_optimization_v4.0.30319_64 - ok

11:34:47.0451 6172  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

11:34:47.0452 6172  CmBatt - ok

11:34:47.0473 6172  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys

11:34:47.0474 6172  cmdide - ok

11:34:47.0505 6172  [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG             C:\Windows\system32\Drivers\cng.sys

11:34:47.0510 6172  CNG - ok

11:34:47.0526 6172  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

11:34:47.0527 6172  Compbatt - ok

11:34:47.0563 6172  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

11:34:47.0564 6172  CompositeBus - ok

11:34:47.0577 6172  COMSysApp - ok

11:34:47.0641 6172  [ C08063F052308B6F5882482615387F30 ] cpuz135         C:\Windows\system32\drivers\cpuz135_x64.sys

11:34:47.0641 6172  cpuz135 - ok

11:34:47.0652 6172  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

11:34:47.0653 6172  crcdisk - ok

11:34:47.0701 6172  [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

11:34:47.0703 6172  CryptSvc - ok

11:34:47.0743 6172  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC             C:\Windows\system32\drivers\csc.sys

11:34:47.0753 6172  CSC - ok

11:34:47.0787 6172  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll

11:34:47.0795 6172  CscService - ok

11:34:47.0835 6172  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll

11:34:47.0843 6172  DcomLaunch - ok

11:34:47.0870 6172  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

11:34:47.0874 6172  defragsvc - ok

11:34:47.0895 6172  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

11:34:47.0897 6172  DfsC - ok

11:34:47.0938 6172  DfSdkS - ok

11:34:47.0966 6172  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll

11:34:47.0969 6172  Dhcp - ok

11:34:47.0993 6172  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

11:34:47.0994 6172  discache - ok

11:34:48.0020 6172  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys

11:34:48.0021 6172  Disk - ok

11:34:48.0042 6172  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

11:34:48.0044 6172  Dnscache - ok

11:34:48.0058 6172  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll

11:34:48.0061 6172  dot3svc - ok

11:34:48.0099 6172  [ B42ED0320C6E41102FDE0005154849BB ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

11:34:48.0103 6172  Dot4 - ok

11:34:48.0126 6172  [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

11:34:48.0128 6172  Dot4Print - ok

11:34:48.0146 6172  [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

11:34:48.0148 6172  dot4usb - ok

11:34:48.0182 6172  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll

11:34:48.0184 6172  DPS - ok

11:34:48.0211 6172  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

11:34:48.0212 6172  drmkaud - ok

11:34:48.0261 6172  [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

11:34:48.0275 6172  DXGKrnl - ok

11:34:48.0314 6172  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

11:34:48.0315 6172  EapHost - ok

11:34:48.0399 6172  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

11:34:48.0434 6172  ebdrv - ok

11:34:48.0457 6172  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe

11:34:48.0458 6172  EFS - ok

11:34:48.0509 6172  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

11:34:48.0519 6172  ehRecvr - ok

11:34:48.0542 6172  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

11:34:48.0544 6172  ehSched - ok

11:34:48.0578 6172  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

11:34:48.0585 6172  elxstor - ok

11:34:48.0613 6172  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys

11:34:48.0614 6172  ErrDev - ok

11:34:48.0653 6172  [ 84486624268E078255BC7AA47F0960BC ] etdrv           C:\Windows\etdrv.sys

11:34:48.0654 6172  etdrv - ok

11:34:48.0678 6172  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

11:34:48.0684 6172  EventSystem - ok

11:34:48.0708 6172  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys

11:34:48.0711 6172  exfat - ok

11:34:48.0767 6172  Fabs - ok

11:34:48.0808 6172  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys

11:34:48.0812 6172  fastfat - ok

11:34:48.0852 6172  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe

11:34:48.0860 6172  Fax - ok

11:34:48.0896 6172  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

11:34:48.0897 6172  fdc - ok

11:34:48.0916 6172  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

11:34:48.0917 6172  fdPHost - ok

11:34:48.0926 6172  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

11:34:48.0928 6172  FDResPub - ok

11:34:48.0943 6172  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

11:34:48.0944 6172  FileInfo - ok

11:34:48.0949 6172  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

11:34:48.0950 6172  Filetrace - ok

11:34:49.0058 6172  [ 5BD96D8C5411ACE71A7EAACAF0EF2903 ] FirebirdServerMAGIXInstance C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe

11:34:49.0119 6172  FirebirdServerMAGIXInstance - ok

11:34:49.0170 6172  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

11:34:49.0171 6172  flpydisk - ok

11:34:49.0218 6172  [ CF145A57AEBA71B82B1C6F103461F6FA ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

11:34:49.0222 6172  FltMgr - ok

11:34:49.0284 6172  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll

11:34:49.0299 6172  FontCache - ok

11:34:49.0361 6172  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

11:34:49.0363 6172  FontCache3.0.0.0 - ok

11:34:49.0418 6172  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

11:34:49.0421 6172  FsDepends - ok

11:34:49.0449 6172  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

11:34:49.0451 6172  Fs_Rec - ok

11:34:49.0503 6172  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

11:34:49.0506 6172  fvevol - ok

11:34:49.0527 6172  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

11:34:49.0529 6172  gagp30kx - ok

11:34:49.0564 6172  [ 7907E14F9BCF3A4689C9A74A1A873CB6 ] gdrv            C:\Windows\gdrv.sys

11:34:49.0566 6172  gdrv - ok

11:34:49.0615 6172  [ B93252C4C5A3733ECD5522CAF88DE02D ] GigasetGenericUSB_x64 C:\Windows\system32\DRIVERS\GigasetGenericUSB_x64.sys

11:34:49.0618 6172  GigasetGenericUSB_x64 - ok

11:34:49.0656 6172  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll

11:34:49.0662 6172  gpsvc - ok

11:34:49.0734 6172  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

11:34:49.0738 6172  gupdate - ok

11:34:49.0748 6172  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

11:34:49.0751 6172  gupdatem - ok

11:34:49.0804 6172  [ 8126331FBD4ED29EB3B356F9C905064D ] GVTDrv64        C:\Windows\GVTDrv64.sys

11:34:49.0805 6172  GVTDrv64 - ok

11:34:49.0834 6172  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

11:34:49.0835 6172  hcw85cir - ok

11:34:49.0879 6172  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

11:34:49.0882 6172  HdAudAddService - ok

11:34:49.0925 6172  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

11:34:49.0926 6172  HDAudBus - ok

11:34:49.0930 6172  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

11:34:49.0931 6172  HidBatt - ok

11:34:49.0946 6172  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

11:34:49.0947 6172  HidBth - ok

11:34:49.0951 6172  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

11:34:49.0952 6172  HidIr - ok

11:34:49.0966 6172  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll

11:34:49.0968 6172  hidserv - ok

11:34:49.0995 6172  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

11:34:49.0996 6172  HidUsb - ok

11:34:50.0021 6172  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll

11:34:50.0022 6172  hkmsvc - ok

11:34:50.0039 6172  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

11:34:50.0041 6172  HomeGroupListener - ok

11:34:50.0067 6172  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

11:34:50.0069 6172  HomeGroupProvider - ok

11:34:50.0126 6172  [ 5DB012836189C25241701B99E72B2745 ] hotcore3        C:\Windows\system32\DRIVERS\hotcore3.sys

11:34:50.0127 6172  hotcore3 - ok

11:34:50.0217 6172  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll

11:34:50.0222 6172  hpqcxs08 - ok

11:34:50.0268 6172  [ 99E8EEF42FE2F4AF29B08C3355DD7685 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll

11:34:50.0269 6172  hpqddsvc - ok

11:34:50.0287 6172  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

11:34:50.0288 6172  HpSAMD - ok

11:34:50.0356 6172  [ 7F57926169C1B8ABA9274EA7D4B70F18 ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL

11:34:50.0377 6172  HPSLPSVC - ok

11:34:50.0431 6172  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

11:34:50.0444 6172  HTTP - ok

11:34:50.0471 6172  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

11:34:50.0472 6172  hwpolicy - ok

11:34:50.0524 6172  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

11:34:50.0528 6172  i8042prt - ok

11:34:50.0572 6172  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

11:34:50.0576 6172  iaStorV - ok

11:34:50.0648 6172  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

11:34:50.0649 6172  IDriverT - ok

11:34:50.0688 6172  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

11:34:50.0693 6172  idsvc - ok

11:34:50.0718 6172  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

11:34:50.0719 6172  iirsp - ok

11:34:50.0755 6172  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll

11:34:50.0767 6172  IKEEXT - ok

11:34:50.0871 6172  [ C2F868881D48A568B525255F084EF063 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

11:34:50.0891 6172  IntcAzAudAddService - ok

11:34:50.0932 6172  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys

11:34:50.0933 6172  intelide - ok

11:34:50.0968 6172  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

11:34:50.0970 6172  intelppm - ok

11:34:50.0998 6172  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

11:34:51.0000 6172  IPBusEnum - ok

11:34:51.0028 6172  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

11:34:51.0029 6172  IpFilterDriver - ok

11:34:51.0063 6172  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

11:34:51.0071 6172  iphlpsvc - ok

11:34:51.0094 6172  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

11:34:51.0096 6172  IPMIDRV - ok

11:34:51.0102 6172  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

11:34:51.0104 6172  IPNAT - ok

11:34:51.0135 6172  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

11:34:51.0136 6172  IRENUM - ok

11:34:51.0148 6172  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

11:34:51.0149 6172  isapnp - ok

11:34:51.0163 6172  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

11:34:51.0167 6172  iScsiPrt - ok

11:34:51.0182 6172  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

11:34:51.0183 6172  kbdclass - ok

11:34:51.0216 6172  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

11:34:51.0217 6172  kbdhid - ok

11:34:51.0232 6172  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe

11:34:51.0234 6172  KeyIso - ok

11:34:51.0301 6172  [ 8B5219318DF5895ABD230C373F2DF18A ] kl1             C:\Windows\system32\DRIVERS\kl1.sys

11:34:51.0307 6172  kl1 - ok

11:34:51.0371 6172  [ 8191BB24F61EBCAF84719993C7F7B5C6 ] KLIF            C:\Windows\system32\DRIVERS\klif.sys

11:34:51.0380 6172  KLIF - ok

11:34:51.0419 6172  [ 9BD99E1AB3F664120AB95C35F9EC1EB0 ] KLIM6           C:\Windows\system32\DRIVERS\klim6.sys

11:34:51.0419 6172  KLIM6 - ok

11:34:51.0467 6172  [ 2C43FD500522EF3B8C283A5846B7FC41 ] klkbdflt        C:\Windows\system32\DRIVERS\klkbdflt.sys

11:34:51.0469 6172  klkbdflt - ok

11:34:51.0481 6172  [ 70A6D2E292017EC47949696F51ABE18D ] klmouflt        C:\Windows\system32\DRIVERS\klmouflt.sys

11:34:51.0483 6172  klmouflt - ok

11:34:51.0517 6172  [ FFC0501A1EA742406F1904A0CFE3BFE2 ] kltdi           C:\Windows\system32\DRIVERS\kltdi.sys

11:34:51.0518 6172  kltdi - ok

11:34:51.0542 6172  [ 185D21CB8F10CFB351FF65DA88C18BC9 ] kneps           C:\Windows\system32\DRIVERS\kneps.sys

11:34:51.0544 6172  kneps - ok

11:34:51.0574 6172  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

11:34:51.0575 6172  KSecDD - ok

11:34:51.0598 6172  [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

11:34:51.0600 6172  KSecPkg - ok

11:34:51.0618 6172  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

11:34:51.0619 6172  ksthunk - ok

11:34:51.0644 6172  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

11:34:51.0650 6172  KtmRm - ok

11:34:51.0702 6172  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll

11:34:51.0710 6172  LanmanServer - ok

11:34:51.0877 6172  [ 7772DFAB22611050B79504E671B06E6E ] LBTServ         C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe

11:34:51.0884 6172  LBTServ - ok

11:34:51.0943 6172  [ ED7EC050CD6C20E1A93A4DAFB7EFD14D ] LEqdUsb         C:\Windows\system32\DRIVERS\LEqdUsb.Sys

11:34:51.0945 6172  LEqdUsb - ok

11:34:51.0975 6172  [ 3267BC698E29474A8381E68904EB0390 ] LHidEqd         C:\Windows\system32\DRIVERS\LHidEqd.Sys

11:34:51.0976 6172  LHidEqd - ok

11:34:51.0994 6172  [ 241F2648ADF090E2A10095BD6D6F5DCB ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys

11:34:51.0996 6172  LHidFilt - ok

11:34:52.0028 6172  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

11:34:52.0030 6172  lltdio - ok

11:34:52.0060 6172  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

11:34:52.0068 6172  lltdsvc - ok

11:34:52.0084 6172  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

11:34:52.0087 6172  lmhosts - ok

11:34:52.0125 6172  [ 342ED5A4B3326014438F36D22D803737 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys

11:34:52.0126 6172  LMouFilt - ok

11:34:52.0181 6172  [ 5DCD36FC4A6ECBF6E7F9B3BF7E0D0F55 ] LPDSVC          C:\Windows\system32\lpdsvc.dll

11:34:52.0184 6172  LPDSVC - ok

11:34:52.0221 6172  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

11:34:52.0224 6172  LSI_FC - ok

11:34:52.0246 6172  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

11:34:52.0249 6172  LSI_SAS - ok

11:34:52.0259 6172  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

11:34:52.0262 6172  LSI_SAS2 - ok

11:34:52.0274 6172  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

11:34:52.0278 6172  LSI_SCSI - ok

11:34:52.0306 6172  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys

11:34:52.0308 6172  luafv - ok

11:34:52.0343 6172  [ 29C733E1DE824670DC9315CFC9BDBCD3 ] LUsbFilt        C:\Windows\system32\Drivers\LUsbFilt.Sys

11:34:52.0344 6172  LUsbFilt - ok

11:34:52.0372 6172  McComponentHostService - ok

11:34:52.0413 6172  MCSWASVR - ok

11:34:52.0448 6172  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

11:34:52.0453 6172  Mcx2Svc - ok

11:34:52.0470 6172  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

11:34:52.0472 6172  megasas - ok

11:34:52.0485 6172  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

11:34:52.0491 6172  MegaSR - ok

11:34:52.0519 6172  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

11:34:52.0522 6172  MMCSS - ok

11:34:52.0537 6172  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys

11:34:52.0539 6172  Modem - ok

11:34:52.0568 6172  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

11:34:52.0568 6172  monitor - ok

11:34:52.0598 6172  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

11:34:52.0599 6172  mouclass - ok

11:34:52.0609 6172  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

11:34:52.0610 6172  mouhid - ok

11:34:52.0654 6172  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

11:34:52.0656 6172  mountmgr - ok

11:34:52.0698 6172  [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

11:34:52.0700 6172  MozillaMaintenance - ok

11:34:52.0711 6172  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys

11:34:52.0713 6172  mpio - ok

11:34:52.0720 6172  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

11:34:52.0723 6172  mpsdrv - ok

11:34:52.0786 6172  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll

11:34:52.0805 6172  MpsSvc - ok

11:34:52.0863 6172  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

11:34:52.0867 6172  MRxDAV - ok

11:34:52.0895 6172  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

11:34:52.0897 6172  mrxsmb - ok

11:34:52.0912 6172  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

11:34:52.0916 6172  mrxsmb10 - ok

11:34:52.0939 6172  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

11:34:52.0941 6172  mrxsmb20 - ok

11:34:52.0968 6172  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys

11:34:52.0969 6172  msahci - ok

11:34:53.0003 6172  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

11:34:53.0006 6172  msdsm - ok

11:34:53.0024 6172  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

11:34:53.0027 6172  MSDTC - ok

11:34:53.0053 6172  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

11:34:53.0054 6172  Msfs - ok

11:34:53.0062 6172  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

11:34:53.0063 6172  mshidkmdf - ok

11:34:53.0072 6172  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

11:34:53.0073 6172  msisadrv - ok

11:34:53.0093 6172  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

11:34:53.0096 6172  MSiSCSI - ok

11:34:53.0101 6172  msiserver - ok

11:34:53.0116 6172  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

11:34:53.0117 6172  MSKSSRV - ok

11:34:53.0128 6172  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

11:34:53.0129 6172  MSPCLOCK - ok

11:34:53.0135 6172  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

11:34:53.0136 6172  MSPQM - ok

11:34:53.0173 6172  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

11:34:53.0177 6172  MsRPC - ok

11:34:53.0185 6172  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

11:34:53.0186 6172  mssmbios - ok

11:34:53.0222 6172  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

11:34:53.0223 6172  MSTEE - ok

11:34:53.0231 6172  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

11:34:53.0233 6172  MTConfig - ok

11:34:53.0249 6172  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

11:34:53.0251 6172  Mup - ok

11:34:53.0282 6172  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll

11:34:53.0291 6172  napagent - ok

11:34:53.0325 6172  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

11:34:53.0332 6172  NativeWifiP - ok

11:34:53.0402 6172  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys

11:34:53.0412 6172  NDIS - ok

11:34:53.0439 6172  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

11:34:53.0440 6172  NdisCap - ok

11:34:53.0458 6172  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

11:34:53.0459 6172  NdisTapi - ok

11:34:53.0485 6172  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

11:34:53.0487 6172  Ndisuio - ok

11:34:53.0502 6172  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

11:34:53.0504 6172  NdisWan - ok

11:34:53.0520 6172  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

11:34:53.0522 6172  NDProxy - ok

11:34:53.0539 6172  Nero BackItUp Scheduler 3 - ok

11:34:53.0575 6172  [ 2C723E42FC8D7B0209492828F921FB50 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

11:34:53.0577 6172  Net Driver HPZ12 - ok

11:34:53.0582 6172  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

11:34:53.0583 6172  NetBIOS - ok

11:34:53.0614 6172  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

11:34:53.0619 6172  NetBT - ok

11:34:53.0640 6172  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe

11:34:53.0643 6172  Netlogon - ok

11:34:53.0685 6172  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

11:34:53.0690 6172  Netman - ok

11:34:53.0722 6172  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:34:53.0724 6172  NetMsmqActivator - ok

11:34:53.0730 6172  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:34:53.0731 6172  NetPipeActivator - ok

11:34:53.0741 6172  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

11:34:53.0747 6172  netprofm - ok

11:34:53.0753 6172  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:34:53.0754 6172  NetTcpActivator - ok

11:34:53.0759 6172  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

11:34:53.0761 6172  NetTcpPortSharing - ok

11:34:53.0766 6172  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

11:34:53.0767 6172  nfrd960 - ok

11:34:53.0799 6172  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll

11:34:53.0802 6172  NlaSvc - ok

11:34:53.0860 6172  [ CB992AE1506985D9167E85883B4C3240 ] NMIndexingService C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe

11:34:53.0866 6172  NMIndexingService - ok

11:34:53.0910 6172  [ 1381E95D4E0F94F22DD484B5F8C1D61D ] nmwcd           C:\Windows\system32\drivers\ccdcmbx64.sys

11:34:53.0911 6172  nmwcd - ok

11:34:53.0951 6172  [ 205510CDB7B6084BF31760B5D06F9242 ] nmwcdc          C:\Windows\system32\drivers\ccdcmbox64.sys

11:34:53.0952 6172  nmwcdc - ok

11:34:53.0956 6172  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

11:34:53.0957 6172  Npfs - ok

11:34:53.0973 6172  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll

11:34:53.0975 6172  nsi - ok

11:34:53.0978 6172  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

11:34:53.0979 6172  nsiproxy - ok

11:34:54.0020 6172  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

11:34:54.0031 6172  Ntfs - ok

11:34:54.0046 6172  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

11:34:54.0046 6172  Null - ok

11:34:54.0066 6172  [ B01C1E6D7477961D6D1CBDCD44AF3E67 ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys

11:34:54.0067 6172  nusb3hub - ok

11:34:54.0119 6172  [ 796BAE22DD827DB8AD7AE7C3F775E92F ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys

11:34:54.0123 6172  nusb3xhc - ok

11:34:54.0169 6172  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys

11:34:54.0173 6172  nvraid - ok

11:34:54.0212 6172  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys

11:34:54.0216 6172  nvstor - ok

11:34:54.0235 6172  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

11:34:54.0237 6172  nv_agp - ok

11:34:54.0254 6172  ocster_backup - ok

11:34:54.0388 6172  [ CE8AD6748DBA78A9D3CBB7094176D6C8 ] OfficeSvc       C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

11:34:54.0403 6172  OfficeSvc - ok

11:34:54.0425 6172  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

11:34:54.0426 6172  ohci1394 - ok

11:34:54.0458 6172  [ 17553AE5699D2BFE46C746B9C059C0C1 ] oodrvled        C:\Windows\system32\DRIVERS\oodrvled.sys

11:34:54.0459 6172  oodrvled - ok

11:34:54.0533 6172  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

11:34:54.0537 6172  ose - ok

11:34:54.0738 6172  [ FE9C0029E1AF26350D9985D00520E5C8 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

11:34:54.0782 6172  osppsvc - ok

11:34:54.0828 6172  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

11:34:54.0832 6172  p2pimsvc - ok

11:34:54.0844 6172  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

11:34:54.0848 6172  p2psvc - ok

11:34:54.0890 6172  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

11:34:54.0894 6172  Parport - ok

11:34:54.0921 6172  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys

11:34:54.0922 6172  partmgr - ok

11:34:54.0939 6172  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll

11:34:54.0945 6172  PcaSvc - ok

11:34:54.0988 6172  [ 3FDE033DFB0D07F8B7D5C9A3044AA121 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfdx64.sys

11:34:54.0990 6172  pccsmcfd - ok

11:34:55.0015 6172  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys

11:34:55.0018 6172  pci - ok

11:34:55.0040 6172  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys

11:34:55.0041 6172  pciide - ok

11:34:55.0065 6172  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

11:34:55.0068 6172  pcmcia - ok

11:34:55.0081 6172  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

11:34:55.0082 6172  pcw - ok

11:34:55.0099 6172  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

11:34:55.0106 6172  PEAUTH - ok

11:34:55.0148 6172  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

11:34:55.0172 6172  PeerDistSvc - ok

11:34:55.0244 6172  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

11:34:55.0248 6172  PerfHost - ok

11:34:55.0314 6172  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll

11:34:55.0332 6172  pla - ok

11:34:55.0365 6172  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

11:34:55.0369 6172  PlugPlay - ok

11:34:55.0429 6172  [ 171E6D91A20AAC8D02172A64E82CE90B ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

11:34:55.0430 6172  Pml Driver HPZ12 - ok

11:34:55.0449 6172  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

11:34:55.0453 6172  PNRPAutoReg - ok

11:34:55.0472 6172  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

11:34:55.0480 6172  PNRPsvc - ok

11:34:55.0517 6172  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

11:34:55.0528 6172  PolicyAgent - ok

11:34:55.0562 6172  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll

11:34:55.0567 6172  Power - ok

11:34:55.0596 6172  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

11:34:55.0598 6172  PptpMiniport - ok

11:34:55.0621 6172  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys

11:34:55.0622 6172  Processor - ok

11:34:55.0642 6172  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll

11:34:55.0646 6172  ProfSvc - ok

11:34:55.0656 6172  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

11:34:55.0658 6172  ProtectedStorage - ok

11:34:55.0682 6172  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

11:34:55.0684 6172  Psched - ok

11:34:55.0714 6172  [ 07D57B890DD5693A6AB660CBAE8F91B4 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys

11:34:55.0716 6172  PxHlpa64 - ok

11:34:55.0767 6172  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

11:34:55.0798 6172  ql2300 - ok

11:34:55.0824 6172  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

11:34:55.0827 6172  ql40xx - ok

11:34:55.0854 6172  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

11:34:55.0859 6172  QWAVE - ok

11:34:55.0864 6172  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

11:34:55.0865 6172  QWAVEdrv - ok

11:34:55.0917 6172  [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr         C:\Windows\WindowsMobile\rapimgr.dll

11:34:55.0919 6172  RapiMgr - ok

11:34:55.0931 6172  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

11:34:55.0932 6172  RasAcd - ok

11:34:55.0965 6172  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

11:34:55.0966 6172  RasAgileVpn - ok

11:34:55.0976 6172  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

11:34:55.0978 6172  RasAuto - ok

11:34:55.0997 6172  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

11:34:55.0999 6172  Rasl2tp - ok

11:34:56.0012 6172  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll

11:34:56.0016 6172  RasMan - ok

11:34:56.0038 6172  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

11:34:56.0040 6172  RasPppoe - ok

11:34:56.0070 6172  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

11:34:56.0072 6172  RasSstp - ok

11:34:56.0077 6172  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

11:34:56.0079 6172  rdbss - ok

11:34:56.0091 6172  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

11:34:56.0092 6172  rdpbus - ok

11:34:56.0100 6172  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

11:34:56.0101 6172  RDPCDD - ok

11:34:56.0127 6172  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

11:34:56.0128 6172  RDPDR - ok

11:34:56.0132 6172  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

11:34:56.0132 6172  RDPENCDD - ok

11:34:56.0137 6172  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

11:34:56.0137 6172  RDPREFMP - ok

11:34:56.0188 6172  [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

11:34:56.0188 6172  RdpVideoMiniport - ok

11:34:56.0214 6172  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

11:34:56.0219 6172  RDPWD - ok

11:34:56.0263 6172  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

11:34:56.0267 6172  rdyboost - ok

11:34:56.0309 6172  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

11:34:56.0314 6172  RemoteAccess - ok

11:34:56.0331 6172  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

11:34:56.0337 6172  RemoteRegistry - ok

11:34:56.0370 6172  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

11:34:56.0374 6172  RFCOMM - ok

11:34:56.0393 6172  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

11:34:56.0395 6172  RpcEptMapper - ok

11:34:56.0417 6172  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

11:34:56.0419 6172  RpcLocator - ok

11:34:56.0451 6172  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll

11:34:56.0457 6172  RpcSs - ok

11:34:56.0496 6172  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

11:34:56.0500 6172  rspndr - ok

11:34:56.0534 6172  [ BE29B0A3AC1E8BD02FFAB8CEE86BADFA ] RSUSBSTOR       C:\Windows\system32\Drivers\RtsUStor.sys

11:34:56.0539 6172  RSUSBSTOR - ok

11:34:56.0581 6172  [ C435AC77704EB16E85C9D630F4D4B4F7 ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys

11:34:56.0583 6172  RTHDMIAzAudService - ok

11:34:56.0622 6172  [ BD9BA262CF26EFE9A9867EBE32D12164 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

11:34:56.0628 6172  RTL8167 - ok

11:34:56.0660 6172  [ 2B38C905492F36FE42B59DA52D6B4EB7 ] RtNdPt60        C:\Windows\system32\DRIVERS\RtNdPt60.sys

11:34:56.0661 6172  RtNdPt60 - ok

11:34:56.0698 6172  [ 3183388DA27655085960A22B4B29CAA9 ] RTTEAMPT        C:\Windows\system32\DRIVERS\RtTeam60.sys

11:34:56.0700 6172  RTTEAMPT - ok

11:34:56.0713 6172  [ 8B6B42D782202363A562F82B0E13B1C0 ] RTVLANPT        C:\Windows\system32\DRIVERS\RtVlan60.sys

11:34:56.0715 6172  RTVLANPT - ok

11:34:56.0737 6172  [ E60C0A09F997826C7627B244195AB581 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

11:34:56.0738 6172  s3cap - ok

11:34:56.0747 6172  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe

11:34:56.0748 6172  SamSs - ok

11:34:56.0768 6172  SANDRA - ok

11:34:56.0786 6172  SandraAgentSrv - ok

11:34:56.0812 6172  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

11:34:56.0813 6172  sbp2port - ok

11:34:56.0836 6172  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

11:34:56.0839 6172  SCardSvr - ok

11:34:56.0857 6172  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

11:34:56.0859 6172  scfilter - ok

11:34:56.0908 6172  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll

11:34:56.0949 6172  Schedule - ok

11:34:56.0982 6172  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll

11:34:56.0984 6172  SCPolicySvc - ok

11:34:57.0008 6172  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

11:34:57.0012 6172  SDRSVC - ok

11:34:57.0033 6172  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

11:34:57.0034 6172  secdrv - ok

11:34:57.0046 6172  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll

11:34:57.0049 6172  seclogon - ok

11:34:57.0080 6172  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll

11:34:57.0083 6172  SENS - ok

11:34:57.0105 6172  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

11:34:57.0108 6172  SensrSvc - ok

11:34:57.0156 6172  [ 2437720D4480523562360B2B6B5864A7 ] Ser2pl          C:\Windows\system32\DRIVERS\ser2pl64.sys

11:34:57.0160 6172  Ser2pl - ok

11:34:57.0181 6172  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

11:34:57.0183 6172  Serenum - ok

11:34:57.0205 6172  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys

11:34:57.0207 6172  Serial - ok

11:34:57.0235 6172  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

11:34:57.0237 6172  sermouse - ok

11:34:57.0307 6172  [ 78F7BB9F4924BE164294C59B8C3FC096 ] ServiceLayer    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

11:34:57.0315 6172  ServiceLayer - ok

11:34:57.0360 6172  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll

11:34:57.0364 6172  SessionEnv - ok

11:34:57.0393 6172  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

11:34:57.0395 6172  sffdisk - ok

11:34:57.0409 6172  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

11:34:57.0412 6172  sffp_mmc - ok

11:34:57.0429 6172  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

11:34:57.0430 6172  sffp_sd - ok

11:34:57.0458 6172  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

11:34:57.0459 6172  sfloppy - ok

11:34:57.0482 6172  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

11:34:57.0487 6172  SharedAccess - ok

11:34:57.0513 6172  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

11:34:57.0518 6172  ShellHWDetection - ok

11:34:57.0529 6172  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

11:34:57.0531 6172  SiSRaid2 - ok

11:34:57.0539 6172  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

11:34:57.0540 6172  SiSRaid4 - ok

11:34:57.0555 6172  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

11:34:57.0557 6172  Smb - ok

11:34:57.0594 6172  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

11:34:57.0595 6172  SNMPTRAP - ok

11:34:57.0605 6172  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys

11:34:57.0606 6172  spldr - ok

11:34:57.0646 6172  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe

11:34:57.0657 6172  Spooler - ok

11:34:57.0771 6172  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe

11:34:57.0787 6172  sppsvc - ok

11:34:57.0807 6172  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

11:34:57.0809 6172  sppuinotify - ok

11:34:57.0868 6172  [ D6AB7C13FCDD2E4CAC35244D2C172D9A ] sptd            C:\Windows\System32\Drivers\sptd.sys

11:34:57.0878 6172  sptd - ok

11:34:57.0930 6172  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys

11:34:57.0936 6172  srv - ok

11:34:57.0954 6172  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

11:34:57.0959 6172  srv2 - ok

11:34:57.0982 6172  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

11:34:57.0985 6172  srvnet - ok

11:34:58.0025 6172  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

11:34:58.0029 6172  SSDPSRV - ok

11:34:58.0043 6172  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

11:34:58.0046 6172  SstpSvc - ok

11:34:58.0082 6172  StarWindServiceAE - ok

11:34:58.0113 6172  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

11:34:58.0115 6172  stexstor - ok

11:34:58.0155 6172  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll

11:34:58.0164 6172  stisvc - ok

11:34:58.0194 6172  [ 7785DC213270D2FC066538DAF94087E7 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

11:34:58.0195 6172  storflt - ok

11:34:58.0216 6172  [ C40841817EF57D491F22EB103DA587CC ] StorSvc         C:\Windows\system32\storsvc.dll

11:34:58.0219 6172  StorSvc - ok

11:34:58.0227 6172  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc         C:\Windows\system32\drivers\storvsc.sys

11:34:58.0228 6172  storvsc - ok

11:34:58.0242 6172  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys

11:34:58.0243 6172  swenum - ok

11:34:58.0270 6172  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

11:34:58.0278 6172  swprv - ok

11:34:58.0325 6172  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll

11:34:58.0360 6172  SysMain - ok

11:34:58.0388 6172  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

11:34:58.0391 6172  TabletInputService - ok

11:34:58.0414 6172  [ F9BE29D5E097F03F81D3CD12B794CB66 ] tap0901         C:\Windows\system32\DRIVERS\tap0901.sys

11:34:58.0415 6172  tap0901 - ok

11:34:58.0442 6172  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll

11:34:58.0447 6172  TapiSrv - ok

11:34:58.0470 6172  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll

11:34:58.0474 6172  TBS - ok

11:34:58.0540 6172  [ DB74544B75566C974815E79A62433F29 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

11:34:58.0569 6172  Tcpip - ok

11:34:58.0600 6172  [ DB74544B75566C974815E79A62433F29 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

11:34:58.0611 6172  TCPIP6 - ok

11:34:58.0639 6172  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

11:34:58.0640 6172  tcpipreg - ok

11:34:58.0660 6172  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

11:34:58.0663 6172  TDPIPE - ok

11:34:58.0685 6172  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

11:34:58.0686 6172  TDTCP - ok

11:34:58.0708 6172  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

11:34:58.0711 6172  tdx - ok

11:34:58.0739 6172  [ 3183388DA27655085960A22B4B29CAA9 ] TEAM            C:\Windows\system32\DRIVERS\RtTeam60.sys

11:34:58.0740 6172  TEAM - ok

11:34:58.0763 6172  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys

11:34:58.0764 6172  TermDD - ok

11:34:58.0792 6172  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll

11:34:58.0799 6172  TermService - ok

11:34:58.0835 6172  [ 48D9D00C2E0E72C3D4F52772C80355F6 ] TFsExDisk       C:\Windows\System32\Drivers\TFsExDisk.sys

11:34:58.0837 6172  TFsExDisk - ok

11:34:58.0862 6172  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

11:34:58.0866 6172  Themes - ok

11:34:58.0885 6172  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

11:34:58.0886 6172  THREADORDER - ok

11:34:58.0903 6172  TomTomHOMEService - ok

11:34:58.0912 6172  TPkd - ok

11:34:58.0934 6172  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

11:34:58.0937 6172  TrkWks - ok

11:34:58.0972 6172  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

11:34:58.0977 6172  TrustedInstaller - ok

11:34:59.0006 6172  [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

11:34:59.0007 6172  tssecsrv - ok

11:34:59.0029 6172  [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

11:34:59.0030 6172  TsUsbFlt - ok

11:34:59.0064 6172  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

11:34:59.0068 6172  tunnel - ok

11:34:59.0100 6172  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

11:34:59.0102 6172  uagp35 - ok

11:34:59.0118 6172  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

11:34:59.0125 6172  udfs - ok

11:34:59.0147 6172  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

11:34:59.0150 6172  UI0Detect - ok

11:34:59.0183 6172  [ 34859D3801F4BD3DACFA131DD928455A ] UimBus          C:\Windows\system32\DRIVERS\uimx64.sys

11:34:59.0185 6172  UimBus - ok

11:34:59.0208 6172  [ D3CE4776E7FFB25E6935B1C797F4650C ] Uim_IM          C:\Windows\system32\Drivers\Uim_IMx64.sys

11:34:59.0213 6172  Uim_IM - ok

11:34:59.0235 6172  [ 532E4BED5C7803B2EE5681818B2528B7 ] Uim_VIM         C:\Windows\system32\Drivers\uim_vimx64.sys

11:34:59.0239 6172  Uim_VIM - ok

11:34:59.0255 6172  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

11:34:59.0257 6172  uliagpkx - ok

11:34:59.0301 6172  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

11:34:59.0303 6172  umbus - ok

11:34:59.0324 6172  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

11:34:59.0326 6172  UmPass - ok

11:34:59.0342 6172  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll

11:34:59.0347 6172  UmRdpService - ok

11:34:59.0365 6172  Update-Service - ok

11:34:59.0396 6172  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

11:34:59.0402 6172  upnphost - ok

11:34:59.0456 6172  [ 311C90F0767A63000AC35DD0A7078A30 ] upperdev        C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys

11:34:59.0458 6172  upperdev - ok

11:34:59.0494 6172  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

11:34:59.0497 6172  usbccgp - ok

11:34:59.0543 6172  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

11:34:59.0546 6172  usbcir - ok

11:34:59.0565 6172  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

11:34:59.0567 6172  usbehci - ok

11:34:59.0614 6172  [ 5AE9C87A1ED4B243942B3FDDD902134B ] usbfilter       C:\Windows\system32\DRIVERS\usbfilter.sys

11:34:59.0616 6172  usbfilter - ok

11:34:59.0650 6172  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

11:34:59.0657 6172  usbhub - ok

11:34:59.0679 6172  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

11:34:59.0681 6172  usbohci - ok

11:34:59.0716 6172  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

11:34:59.0718 6172  usbprint - ok

11:34:59.0753 6172  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

11:34:59.0756 6172  usbscan - ok

11:34:59.0799 6172  [ 4ACEE387FA8FD39F83564FCD2FC234F2 ] usbser          C:\Windows\system32\drivers\usbser.sys

11:34:59.0800 6172  usbser - ok

11:34:59.0837 6172  [ C03DA998E412D69D18DD11D835229AF0 ] UsbserFilt      C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys

11:34:59.0838 6172  UsbserFilt - ok

11:34:59.0856 6172  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

11:34:59.0859 6172  USBSTOR - ok

11:34:59.0876 6172  [ 81FB2216D3A60D1284455D511797DB3D ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

11:34:59.0879 6172  usbuhci - ok

11:34:59.0928 6172  [ 7B28E2FBE75115660FAB31079C0A9F29 ] usb_rndisx      C:\Windows\system32\drivers\usb8023x.sys

11:34:59.0930 6172  usb_rndisx - ok

11:34:59.0955 6172  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

11:34:59.0961 6172  UxSms - ok

11:34:59.0981 6172  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe

11:34:59.0984 6172  VaultSvc - ok

11:35:00.0027 6172  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

11:35:00.0028 6172  vdrvroot - ok

11:35:00.0056 6172  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe

11:35:00.0063 6172  vds - ok

11:35:00.0068 6172  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

11:35:00.0070 6172  vga - ok

11:35:00.0084 6172  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

11:35:00.0085 6172  VgaSave - ok

11:35:00.0108 6172  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

11:35:00.0110 6172  vhdmp - ok

11:35:00.0126 6172  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys

11:35:00.0128 6172  viaide - ok

11:35:00.0145 6172  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus           C:\Windows\system32\drivers\vmbus.sys

11:35:00.0150 6172  vmbus - ok

11:35:00.0166 6172  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

11:35:00.0167 6172  VMBusHID - ok

11:35:00.0177 6172  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

11:35:00.0178 6172  volmgr - ok

11:35:00.0221 6172  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

11:35:00.0228 6172  volmgrx - ok

11:35:00.0278 6172  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

11:35:00.0284 6172  volsnap - ok

11:35:00.0312 6172  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

11:35:00.0315 6172  vsmraid - ok

11:35:00.0361 6172  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe

11:35:00.0391 6172  VSS - ok

11:35:00.0510 6172  [ 8754BA5FCC85325C229ADCB72087706E ] vToolbarUpdater15.4.0 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe

11:35:00.0521 6172  vToolbarUpdater15.4.0 - ok

11:35:00.0536 6172  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

11:35:00.0537 6172  vwifibus - ok

11:35:00.0556 6172  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

11:35:00.0560 6172  W32Time - ok

11:35:00.0583 6172  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

11:35:00.0584 6172  WacomPen - ok

11:35:00.0618 6172  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

11:35:00.0621 6172  WANARP - ok

11:35:00.0643 6172  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

11:35:00.0646 6172  Wanarpv6 - ok

11:35:00.0741 6172  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

11:35:00.0758 6172  WatAdminSvc - ok

11:35:00.0792 6172  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe

11:35:00.0804 6172  wbengine - ok

11:35:00.0832 6172  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

11:35:00.0835 6172  WbioSrvc - ok

11:35:00.0886 6172  [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm        C:\Windows\WindowsMobile\wcescomm.dll

11:35:00.0895 6172  WcesComm - ok

11:35:00.0932 6172  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll

11:35:00.0941 6172  wcncsvc - ok

11:35:00.0953 6172  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

11:35:00.0959 6172  WcsPlugInService - ok

11:35:00.0987 6172  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys

11:35:00.0988 6172  Wd - ok

11:35:01.0035 6172  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

11:35:01.0049 6172  Wdf01000 - ok

11:35:01.0070 6172  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll

11:35:01.0073 6172  WdiServiceHost - ok

11:35:01.0076 6172  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll

11:35:01.0078 6172  WdiSystemHost - ok

11:35:01.0104 6172  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll

11:35:01.0108 6172  WebClient - ok

11:35:01.0127 6172  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

11:35:01.0131 6172  Wecsvc - ok

11:35:01.0135 6172  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

11:35:01.0138 6172  wercplsupport - ok

11:35:01.0150 6172  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

11:35:01.0152 6172  WerSvc - ok

11:35:01.0184 6172  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

11:35:01.0185 6172  WfpLwf - ok

11:35:01.0198 6172  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

11:35:01.0199 6172  WIMMount - ok

11:35:01.0220 6172  WinDefend - ok

11:35:01.0234 6172  WinHttpAutoProxySvc - ok

11:35:01.0295 6172  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

11:35:01.0300 6172  Winmgmt - ok

11:35:01.0369 6172  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll

11:35:01.0410 6172  WinRM - ok

11:35:01.0458 6172  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

11:35:01.0460 6172  WinUsb - ok

11:35:01.0491 6172  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll

11:35:01.0503 6172  Wlansvc - ok

11:35:01.0523 6172  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

11:35:01.0524 6172  WmiAcpi - ok

11:35:01.0552 6172  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

11:35:01.0555 6172  wmiApSrv - ok

11:35:01.0590 6172  WMPNetworkSvc - ok

11:35:01.0602 6172  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

11:35:01.0605 6172  WPCSvc - ok

11:35:01.0632 6172  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

11:35:01.0636 6172  WPDBusEnum - ok

11:35:01.0662 6172  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

11:35:01.0663 6172  ws2ifsl - ok

11:35:01.0680 6172  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll

11:35:01.0683 6172  wscsvc - ok

11:35:01.0688 6172  WSearch - ok

11:35:01.0805 6172  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

11:35:01.0824 6172  wuauserv - ok

11:35:01.0841 6172  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

11:35:01.0842 6172  WudfPf - ok

11:35:01.0866 6172  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

11:35:01.0871 6172  WUDFRd - ok

11:35:01.0899 6172  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

11:35:01.0906 6172  wudfsvc - ok

11:35:01.0937 6172  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll

11:35:01.0946 6172  WwanSvc - ok

11:35:01.0994 6172  ================ Scan global ===============================

11:35:02.0022 6172  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

11:35:02.0047 6172  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

11:35:02.0064 6172  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

11:35:02.0113 6172  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

11:35:02.0150 6172  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

11:35:02.0158 6172  [Global] - ok

11:35:02.0159 6172  ================ Scan MBR ==================================

11:35:02.0172 6172  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

11:35:03.0675 6172  \Device\Harddisk0\DR0 - ok

11:35:03.0700 6172  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1

11:35:03.0707 6172  \Device\Harddisk1\DR1 - ok

11:35:04.0003 6172  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk2\DR2

11:35:04.0075 6172  \Device\Harddisk2\DR2 - ok

11:35:04.0133 6172  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk3\DR3

11:35:04.0146 6172  \Device\Harddisk3\DR3 - ok

11:35:04.0148 6172  ================ Scan VBR ==================================

11:35:04.0164 6172  [ 6F69E5D8684287108C89046EBFCDDCFB ] \Device\Harddisk0\DR0\Partition1

11:35:04.0178 6172  \Device\Harddisk0\DR0\Partition1 - ok

11:35:04.0185 6172  [ 6905A7941A427EBBF4462515BF494A81 ] \Device\Harddisk1\DR1\Partition1

11:35:04.0189 6172  \Device\Harddisk1\DR1\Partition1 - ok

11:35:04.0197 6172  [ D59DC1BC55FFC27F7ECA062B5AD6F2E5 ] \Device\Harddisk2\DR2\Partition1

11:35:04.0201 6172  \Device\Harddisk2\DR2\Partition1 - ok

11:35:04.0206 6172  [ 1D4EAA37EDC3097E5982FE6E680A7559 ] \Device\Harddisk3\DR3\Partition1

11:35:04.0208 6172  \Device\Harddisk3\DR3\Partition1 - ok

11:35:04.0209 6172  ============================================================

11:35:04.0209 6172  Scan finished

11:35:04.0209 6172  ============================================================

11:35:04.0223 6308  Detected object count: 0

11:35:04.0223 6308  Actual detected object count: 0

11:35:18.0529 6404  Deinitialize success

mk72	04.09.2013 18:46

Code:

15:47:22.0742 0x1984  TDSS rootkit removing tool 2.9.2.0 Aug 15 2013 16:44:29

15:47:23.0551 0x1984  ============================================================

15:47:23.0552 0x1984  Current date / time: 2013/08/28 15:47:23.0551

15:47:23.0552 0x1984  SystemInfo:

15:47:23.0552 0x1984  

15:47:23.0552 0x1984  OS Version: 6.1.7601 ServicePack: 1.0

15:47:23.0552 0x1984  Product type: Workstation

15:47:23.0552 0x1984  ComputerName: KOBOLT

15:47:23.0553 0x1984  UserName: Marko

15:47:23.0553 0x1984  Windows directory: C:\Windows

15:47:23.0553 0x1984  System windows directory: C:\Windows

15:47:23.0553 0x1984  Running under WOW64

15:47:23.0553 0x1984  Processor architecture: Intel x64

15:47:23.0553 0x1984  Number of processors: 6

15:47:23.0553 0x1984  Page size: 0x1000

15:47:23.0553 0x1984  Boot type: Normal boot

15:47:23.0553 0x1984  ============================================================

15:47:24.0029 0x1984  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

15:47:24.0030 0x1984  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0CADE00 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

15:47:24.0033 0x1984  Drive \Device\Harddisk2\DR2 - Size: 0x7470C05E00 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'

15:47:24.0037 0x1984  Drive \Device\Harddisk4\DR4 - Size: 0x2BAA1476000 (2794.52 Gb), SectorSize: 0x1000, Cylinders: 0xB220, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'

15:47:24.0039 0x1984  ============================================================

15:47:24.0039 0x1984  \Device\Harddisk0\DR0:

15:47:24.0039 0x1984  MBR partitions:

15:47:24.0039 0x1984  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xD17F0AB

15:47:24.0054 0x1984  \Device\Harddisk1\DR1:

15:47:24.0055 0x1984  MBR partitions:

15:47:24.0055 0x1984  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982

15:47:24.0055 0x1984  \Device\Harddisk2\DR2:

15:47:24.0056 0x1984  MBR partitions:

15:47:24.0056 0x1984  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C41

15:47:24.0056 0x1984  \Device\Harddisk4\DR4:

15:47:24.0320 0x1984  GPT partitions:

15:47:24.0321 0x1984  \Device\Harddisk4\DR4\Partition1: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {6CBD0141-C0B6-4284-8C2D-C57E68E194BD}, Name: unknown, StartLBA 0x100, BlocksNum 0x2BAA1300

15:47:24.0321 0x1984  MBR partitions:

15:47:24.0321 0x1984  ============================================================

15:47:24.0341 0x1984  C: <-> \Device\Harddisk0\DR0\Partition1

15:47:27.0974 0x1984  D: <-> \Device\Harddisk2\DR2\Partition1

15:47:33.0990 0x1984  K: <-> \Device\Harddisk1\DR1\Partition1

15:47:33.0991 0x1984  P: <-> \Device\Harddisk4\DR4\Partition1

15:47:33.0991 0x1984  ============================================================

15:47:33.0992 0x1984  Initialize success

15:47:33.0992 0x1984  ============================================================

15:47:48.0000 0x1814  ============================================================

15:47:48.0000 0x1814  Scan started

15:47:48.0000 0x1814  Mode: Manual; 

15:47:48.0000 0x1814  ============================================================

15:47:48.0557 0x1814  ================ Scan system memory ========================

15:47:48.0557 0x1814  System memory - ok

15:47:48.0558 0x1814  ================ Scan services =============================

15:47:48.0691 0x1814  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys

15:47:48.0694 0x1814  1394ohci - ok

15:47:48.0708 0x1814  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

15:47:48.0713 0x1814  ACPI - ok

15:47:48.0730 0x1814  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

15:47:48.0731 0x1814  AcpiPmi - ok

15:47:48.0789 0x1814  [ 8B46D5A1D3EF08232C04D0EAFB871FB2 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

15:47:48.0790 0x1814  Adobe LM Service - ok

15:47:48.0816 0x1814  AdobeActiveFileMonitor11.0 - ok

15:47:48.0852 0x1814  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

15:47:48.0858 0x1814  adp94xx - ok

15:47:48.0877 0x1814  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

15:47:48.0883 0x1814  adpahci - ok

15:47:48.0890 0x1814  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

15:47:48.0893 0x1814  adpu320 - ok

15:47:48.0934 0x1814  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

15:47:48.0935 0x1814  AeLookupSvc - ok

15:47:48.0990 0x1814  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys

15:47:48.0996 0x1814  AFD - ok

15:47:49.0019 0x1814  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys

15:47:49.0020 0x1814  agp440 - ok

15:47:49.0037 0x1814  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

15:47:49.0039 0x1814  ALG - ok

15:47:49.0064 0x1814  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys

15:47:49.0065 0x1814  aliide - ok

15:47:49.0107 0x1814  [ 20C8A3E435A47F0408A1EA674AFA6194 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

15:47:49.0110 0x1814  AMD External Events Utility - ok

15:47:49.0180 0x1814  AMD FUEL Service - ok

15:47:49.0197 0x1814  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys

15:47:49.0199 0x1814  amdide - ok

15:47:49.0239 0x1814  [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64        C:\Windows\system32\DRIVERS\amdiox64.sys

15:47:49.0240 0x1814  amdiox64 - ok

15:47:49.0277 0x1814  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

15:47:49.0278 0x1814  AmdK8 - ok

15:47:49.0493 0x1814  [ 0B45C18B0F3EE996D25BAA4E74884B83 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

15:47:49.0651 0x1814  amdkmdag - ok

15:47:49.0670 0x1814  [ 0E57258E5CC4CC7A9A9A877AFDF0CEC6 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

15:47:49.0672 0x1814  amdkmdap - ok

15:47:49.0702 0x1814  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

15:47:49.0703 0x1814  AmdPPM - ok

15:47:49.0731 0x1814  [ 53D8D46D51D390ABDB54ECA623165CB7 ] amdsata         C:\Windows\system32\DRIVERS\amdsata.sys

15:47:49.0732 0x1814  amdsata - ok

15:47:49.0752 0x1814  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

15:47:49.0754 0x1814  amdsbs - ok

15:47:49.0765 0x1814  [ 75C51148154E34EB3D7BB84749A758D5 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

15:47:49.0765 0x1814  amdxata - ok

15:47:49.0787 0x1814  [ EE4797DFEBBE8ACDB548DD8E80BE0A88 ] amd_sata        C:\Windows\system32\DRIVERS\amd_sata.sys

15:47:49.0787 0x1814  amd_sata - ok

15:47:49.0800 0x1814  [ D56EAD71A86FD2ACAE2DB47D0A6A3A41 ] amd_xata        C:\Windows\system32\DRIVERS\amd_xata.sys

15:47:49.0800 0x1814  amd_xata - ok

15:47:49.0833 0x1814  AODDriver4.01 - ok

15:47:49.0892 0x1814  [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1    C:\ATI\ATI.ACE\Fuel\amd64\AODDriver2.sys

15:47:49.0893 0x1814  AODDriver4.1 - ok

15:47:49.0939 0x1814  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys

15:47:49.0941 0x1814  AppID - ok

15:47:49.0965 0x1814  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

15:47:49.0967 0x1814  AppIDSvc - ok

15:47:49.0989 0x1814  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll

15:47:49.0990 0x1814  Appinfo - ok

15:47:50.0029 0x1814  [ BA957E7ACD2B44FA3B01FAA64F6A9060 ] AppleCharger    C:\Windows\system32\DRIVERS\AppleCharger.sys

15:47:50.0030 0x1814  AppleCharger - ok

15:47:50.0058 0x1814  [ 95EF7247C50C7241FDAE39A9B3AFF4AE ] AppleChargerSrv C:\Windows\system32\AppleChargerSrv.exe

15:47:50.0059 0x1814  AppleChargerSrv - ok

15:47:50.0107 0x1814  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt         C:\Windows\System32\appmgmts.dll

15:47:50.0110 0x1814  AppMgmt - ok

15:47:50.0153 0x1814  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys

15:47:50.0154 0x1814  arc - ok

15:47:50.0162 0x1814  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

15:47:50.0163 0x1814  arcsas - ok

15:47:50.0268 0x1814  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

15:47:50.0269 0x1814  aspnet_state - ok

15:47:50.0282 0x1814  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

15:47:50.0283 0x1814  AsyncMac - ok

15:47:50.0306 0x1814  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys

15:47:50.0306 0x1814  atapi - ok

15:47:50.0359 0x1814  [ B0790FF0E25B7A2674296052F2162C1A ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys

15:47:50.0360 0x1814  AtiHDAudioService - ok

15:47:50.0417 0x1814  atillk64 - ok

15:47:50.0468 0x1814  [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie         C:\Windows\system32\DRIVERS\AtiPcie.sys

15:47:50.0469 0x1814  AtiPcie - ok

15:47:50.0514 0x1814  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

15:47:50.0520 0x1814  AudioEndpointBuilder - ok

15:47:50.0529 0x1814  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

15:47:50.0533 0x1814  AudioSrv - ok

15:47:50.0572 0x1814  [ 18AAAC7ED383C465E319B5DD07D0A0B6 ] avgtp           C:\Windows\system32\drivers\avgtpx64.sys

15:47:50.0573 0x1814  avgtp - ok

15:47:50.0738 0x1814  [ F1CA8ED683D6945EFDC4492AB60B1460 ] AVP             C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe

15:47:50.0742 0x1814  AVP - ok

15:47:50.0785 0x1814  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll

15:47:50.0787 0x1814  AxInstSV - ok

15:47:50.0833 0x1814  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

15:47:50.0839 0x1814  b06bdrv - ok

15:47:50.0879 0x1814  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

15:47:50.0883 0x1814  b57nd60a - ok

15:47:50.0922 0x1814  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

15:47:50.0924 0x1814  BDESVC - ok

15:47:50.0935 0x1814  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

15:47:50.0936 0x1814  Beep - ok

15:47:50.0981 0x1814  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll

15:47:50.0989 0x1814  BFE - ok

15:47:51.0032 0x1814  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll

15:47:51.0043 0x1814  BITS - ok

15:47:51.0070 0x1814  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

15:47:51.0071 0x1814  blbdrive - ok

15:47:51.0096 0x1814  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

15:47:51.0098 0x1814  bowser - ok

15:47:51.0130 0x1814  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

15:47:51.0131 0x1814  BrFiltLo - ok

15:47:51.0137 0x1814  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

15:47:51.0138 0x1814  BrFiltUp - ok

15:47:51.0160 0x1814  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll

15:47:51.0163 0x1814  Browser - ok

15:47:51.0171 0x1814  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

15:47:51.0175 0x1814  Brserid - ok

15:47:51.0189 0x1814  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

15:47:51.0190 0x1814  BrSerWdm - ok

15:47:51.0196 0x1814  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

15:47:51.0197 0x1814  BrUsbMdm - ok

15:47:51.0203 0x1814  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

15:47:51.0204 0x1814  BrUsbSer - ok

15:47:51.0251 0x1814  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys

15:47:51.0252 0x1814  BthEnum - ok

15:47:51.0280 0x1814  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

15:47:51.0282 0x1814  BTHMODEM - ok

15:47:51.0303 0x1814  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

15:47:51.0306 0x1814  BthPan - ok

15:47:51.0331 0x1814  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys

15:47:51.0338 0x1814  BTHPORT - ok

15:47:51.0372 0x1814  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

15:47:51.0374 0x1814  bthserv - ok

15:47:51.0395 0x1814  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys

15:47:51.0397 0x1814  BTHUSB - ok

15:47:51.0423 0x1814  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

15:47:51.0425 0x1814  cdfs - ok

15:47:51.0468 0x1814  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

15:47:51.0470 0x1814  cdrom - ok

15:47:51.0511 0x1814  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll

15:47:51.0512 0x1814  CertPropSvc - ok

15:47:51.0615 0x1814  [ 213B6EC3DE19E35373A1906397588429 ] CGVPNCliSrvc    C:\Program Files\CyberGhost VPN\CGVPNCliService.exe

15:47:51.0658 0x1814  CGVPNCliSrvc - ok

15:47:51.0671 0x1814  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

15:47:51.0672 0x1814  circlass - ok

15:47:51.0697 0x1814  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys

15:47:51.0700 0x1814  CLFS - ok

15:47:51.0749 0x1814  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

15:47:51.0752 0x1814  clr_optimization_v2.0.50727_32 - ok

15:47:51.0791 0x1814  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

15:47:51.0793 0x1814  clr_optimization_v2.0.50727_64 - ok

15:47:51.0881 0x1814  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

15:47:51.0885 0x1814  clr_optimization_v4.0.30319_32 - ok

15:47:51.0906 0x1814  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

15:47:51.0909 0x1814  clr_optimization_v4.0.30319_64 - ok

15:47:51.0945 0x1814  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

15:47:51.0946 0x1814  CmBatt - ok

15:47:51.0976 0x1814  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys

15:47:51.0977 0x1814  cmdide - ok

15:47:52.0007 0x1814  [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG             C:\Windows\system32\Drivers\cng.sys

15:47:52.0013 0x1814  CNG - ok

15:47:52.0028 0x1814  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

15:47:52.0030 0x1814  Compbatt - ok

15:47:52.0065 0x1814  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

15:47:52.0067 0x1814  CompositeBus - ok

15:47:52.0080 0x1814  COMSysApp - ok

15:47:52.0143 0x1814  [ C08063F052308B6F5882482615387F30 ] cpuz135         C:\Windows\system32\drivers\cpuz135_x64.sys

15:47:52.0144 0x1814  cpuz135 - ok

15:47:52.0149 0x1814  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

15:47:52.0151 0x1814  crcdisk - ok

15:47:52.0189 0x1814  [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

15:47:52.0192 0x1814  CryptSvc - ok

15:47:52.0226 0x1814  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC             C:\Windows\system32\drivers\csc.sys

15:47:52.0232 0x1814  CSC - ok

15:47:52.0264 0x1814  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll

15:47:52.0272 0x1814  CscService - ok

15:47:52.0329 0x1814  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll

15:47:52.0337 0x1814  DcomLaunch - ok

15:47:52.0364 0x1814  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

15:47:52.0368 0x1814  defragsvc - ok

15:47:52.0389 0x1814  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

15:47:52.0391 0x1814  DfsC - ok

15:47:52.0432 0x1814  DfSdkS - ok

15:47:52.0460 0x1814  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll

15:47:52.0463 0x1814  Dhcp - ok

15:47:52.0487 0x1814  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

15:47:52.0488 0x1814  discache - ok

15:47:52.0514 0x1814  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys

15:47:52.0515 0x1814  Disk - ok

15:47:52.0536 0x1814  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

15:47:52.0538 0x1814  Dnscache - ok

15:47:52.0580 0x1814  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll

15:47:52.0586 0x1814  dot3svc - ok

15:47:52.0634 0x1814  [ B42ED0320C6E41102FDE0005154849BB ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

15:47:52.0635 0x1814  Dot4 - ok

15:47:52.0653 0x1814  [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

15:47:52.0654 0x1814  Dot4Print - ok

15:47:52.0664 0x1814  [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

15:47:52.0665 0x1814  dot4usb - ok

15:47:52.0692 0x1814  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll

15:47:52.0693 0x1814  DPS - ok

15:47:52.0712 0x1814  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

15:47:52.0713 0x1814  drmkaud - ok

15:47:52.0746 0x1814  [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

15:47:52.0751 0x1814  DXGKrnl - ok

15:47:52.0782 0x1814  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

15:47:52.0783 0x1814  EapHost - ok

15:47:52.0844 0x1814  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

15:47:52.0887 0x1814  ebdrv - ok

15:47:52.0917 0x1814  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe

15:47:52.0918 0x1814  EFS - ok

15:47:52.0977 0x1814  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

15:47:52.0990 0x1814  ehRecvr - ok

15:47:53.0019 0x1814  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

15:47:53.0020 0x1814  ehSched - ok

15:47:53.0046 0x1814  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

15:47:53.0050 0x1814  elxstor - ok

15:47:53.0073 0x1814  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys

15:47:53.0074 0x1814  ErrDev - ok

15:47:53.0112 0x1814  [ 84486624268E078255BC7AA47F0960BC ] etdrv           C:\Windows\etdrv.sys

15:47:53.0113 0x1814  etdrv - ok

15:47:53.0137 0x1814  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

15:47:53.0142 0x1814  EventSystem - ok

15:47:53.0159 0x1814  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys

15:47:53.0162 0x1814  exfat - ok

15:47:53.0227 0x1814  Fabs - ok

15:47:53.0241 0x1814  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys

15:47:53.0243 0x1814  fastfat - ok

15:47:53.0285 0x1814  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe

15:47:53.0292 0x1814  Fax - ok

15:47:53.0314 0x1814  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

15:47:53.0315 0x1814  fdc - ok

15:47:53.0334 0x1814  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

15:47:53.0335 0x1814  fdPHost - ok

15:47:53.0344 0x1814  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

15:47:53.0346 0x1814  FDResPub - ok

15:47:53.0352 0x1814  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

15:47:53.0353 0x1814  FileInfo - ok

15:47:53.0357 0x1814  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

15:47:53.0358 0x1814  Filetrace - ok

15:47:53.0421 0x1814  [ 5BD96D8C5411ACE71A7EAACAF0EF2903 ] FirebirdServerMAGIXInstance C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe

15:47:53.0464 0x1814  FirebirdServerMAGIXInstance - ok

15:47:53.0488 0x1814  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

15:47:53.0489 0x1814  flpydisk - ok

15:47:53.0528 0x1814  [ CF145A57AEBA71B82B1C6F103461F6FA ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

15:47:53.0530 0x1814  FltMgr - ok

15:47:53.0586 0x1814  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll

15:47:53.0615 0x1814  FontCache - ok

15:47:53.0680 0x1814  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

15:47:53.0681 0x1814  FontCache3.0.0.0 - ok

15:47:53.0695 0x1814  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

15:47:53.0697 0x1814  FsDepends - ok

15:47:53.0726 0x1814  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

15:47:53.0726 0x1814  Fs_Rec - ok

15:47:53.0779 0x1814  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

15:47:53.0782 0x1814  fvevol - ok

15:47:53.0794 0x1814  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

15:47:53.0796 0x1814  gagp30kx - ok

15:47:53.0832 0x1814  [ 7907E14F9BCF3A4689C9A74A1A873CB6 ] gdrv            C:\Windows\gdrv.sys

15:47:53.0834 0x1814  gdrv - ok

15:47:53.0883 0x1814  [ B93252C4C5A3733ECD5522CAF88DE02D ] GigasetGenericUSB_x64 C:\Windows\system32\DRIVERS\GigasetGenericUSB_x64.sys

15:47:53.0885 0x1814  GigasetGenericUSB_x64 - ok

15:47:53.0917 0x1814  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll

15:47:53.0926 0x1814  gpsvc - ok

15:47:54.0002 0x1814  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:47:54.0004 0x1814  gupdate - ok

15:47:54.0010 0x1814  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:47:54.0011 0x1814  gupdatem - ok

15:47:54.0055 0x1814  [ 8126331FBD4ED29EB3B356F9C905064D ] GVTDrv64        C:\Windows\GVTDrv64.sys

15:47:54.0057 0x1814  GVTDrv64 - ok

15:47:54.0085 0x1814  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

15:47:54.0086 0x1814  hcw85cir - ok

15:47:54.0131 0x1814  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

15:47:54.0136 0x1814  HdAudAddService - ok

15:47:54.0176 0x1814  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

15:47:54.0178 0x1814  HDAudBus - ok

15:47:54.0184 0x1814  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

15:47:54.0185 0x1814  HidBatt - ok

15:47:54.0197 0x1814  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

15:47:54.0200 0x1814  HidBth - ok

15:47:54.0205 0x1814  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

15:47:54.0208 0x1814  HidIr - ok

15:47:54.0243 0x1814  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll

15:47:54.0244 0x1814  hidserv - ok

15:47:54.0272 0x1814  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

15:47:54.0272 0x1814  HidUsb - ok

15:47:54.0297 0x1814  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll

15:47:54.0299 0x1814  hkmsvc - ok

15:47:54.0324 0x1814  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

15:47:54.0326 0x1814  HomeGroupListener - ok

15:47:54.0352 0x1814  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

15:47:54.0355 0x1814  HomeGroupProvider - ok

15:47:54.0393 0x1814  [ 5DB012836189C25241701B99E72B2745 ] hotcore3        C:\Windows\system32\DRIVERS\hotcore3.sys

15:47:54.0394 0x1814  hotcore3 - ok

15:47:54.0475 0x1814  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll

15:47:54.0477 0x1814  hpqcxs08 - ok

15:47:54.0519 0x1814  [ 99E8EEF42FE2F4AF29B08C3355DD7685 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll

15:47:54.0521 0x1814  hpqddsvc - ok

15:47:54.0547 0x1814  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

15:47:54.0548 0x1814  HpSAMD - ok

15:47:54.0625 0x1814  [ 7F57926169C1B8ABA9274EA7D4B70F18 ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL

15:47:54.0645 0x1814  HPSLPSVC - ok

15:47:54.0702 0x1814  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

15:47:54.0709 0x1814  HTTP - ok

15:47:54.0730 0x1814  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

15:47:54.0731 0x1814  hwpolicy - ok

15:47:54.0758 0x1814  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

15:47:54.0760 0x1814  i8042prt - ok

15:47:54.0798 0x1814  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

15:47:54.0802 0x1814  iaStorV - ok

15:47:54.0858 0x1814  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

15:47:54.0861 0x1814  IDriverT - ok

15:47:54.0901 0x1814  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

15:47:54.0910 0x1814  idsvc - ok

15:47:54.0936 0x1814  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

15:47:54.0938 0x1814  iirsp - ok

15:47:54.0968 0x1814  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll

15:47:54.0979 0x1814  IKEEXT - ok

15:47:55.0103 0x1814  [ C2F868881D48A568B525255F084EF063 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

15:47:55.0126 0x1814  IntcAzAudAddService - ok

15:47:55.0150 0x1814  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys

15:47:55.0151 0x1814  intelide - ok

15:47:55.0177 0x1814  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

15:47:55.0178 0x1814  intelppm - ok

15:47:55.0217 0x1814  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

15:47:55.0222 0x1814  IPBusEnum - ok

15:47:55.0238 0x1814  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

15:47:55.0242 0x1814  IpFilterDriver - ok

15:47:55.0276 0x1814  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

15:47:55.0281 0x1814  iphlpsvc - ok

15:47:55.0304 0x1814  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

15:47:55.0305 0x1814  IPMIDRV - ok

15:47:55.0321 0x1814  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

15:47:55.0323 0x1814  IPNAT - ok

15:47:55.0353 0x1814  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

15:47:55.0354 0x1814  IRENUM - ok

15:47:55.0374 0x1814  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

15:47:55.0375 0x1814  isapnp - ok

15:47:55.0389 0x1814  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

15:47:55.0392 0x1814  iScsiPrt - ok

15:47:55.0417 0x1814  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

15:47:55.0417 0x1814  kbdclass - ok

15:47:55.0440 0x1814  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

15:47:55.0441 0x1814  kbdhid - ok

15:47:55.0450 0x1814  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe

15:47:55.0451 0x1814  KeyIso - ok

15:47:55.0510 0x1814  [ 8B5219318DF5895ABD230C373F2DF18A ] kl1             C:\Windows\system32\DRIVERS\kl1.sys

15:47:55.0514 0x1814  kl1 - ok

15:47:55.0585 0x1814  [ 8191BB24F61EBCAF84719993C7F7B5C6 ] KLIF            C:\Windows\system32\DRIVERS\klif.sys

15:47:55.0594 0x1814  KLIF - ok

15:47:55.0641 0x1814  [ 9BD99E1AB3F664120AB95C35F9EC1EB0 ] KLIM6           C:\Windows\system32\DRIVERS\klim6.sys

15:47:55.0641 0x1814  KLIM6 - ok

15:47:55.0658 0x1814  [ 2C43FD500522EF3B8C283A5846B7FC41 ] klkbdflt        C:\Windows\system32\DRIVERS\klkbdflt.sys

15:47:55.0659 0x1814  klkbdflt - ok

15:47:55.0689 0x1814  [ 70A6D2E292017EC47949696F51ABE18D ] klmouflt        C:\Windows\system32\DRIVERS\klmouflt.sys

15:47:55.0689 0x1814  klmouflt - ok

15:47:55.0698 0x1814  [ FFC0501A1EA742406F1904A0CFE3BFE2 ] kltdi           C:\Windows\system32\DRIVERS\kltdi.sys

15:47:55.0699 0x1814  kltdi - ok

15:47:55.0726 0x1814  [ 185D21CB8F10CFB351FF65DA88C18BC9 ] kneps           C:\Windows\system32\DRIVERS\kneps.sys

15:47:55.0728 0x1814  kneps - ok

15:47:55.0758 0x1814  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

15:47:55.0759 0x1814  KSecDD - ok

15:47:55.0774 0x1814  [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

15:47:55.0776 0x1814  KSecPkg - ok

15:47:55.0811 0x1814  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

15:47:55.0812 0x1814  ksthunk - ok

15:47:55.0836 0x1814  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

15:47:55.0841 0x1814  KtmRm - ok

15:47:55.0878 0x1814  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll

15:47:55.0887 0x1814  LanmanServer - ok

15:47:56.0011 0x1814  [ 7772DFAB22611050B79504E671B06E6E ] LBTServ         C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe

15:47:56.0019 0x1814  LBTServ - ok

15:47:56.0060 0x1814  [ ED7EC050CD6C20E1A93A4DAFB7EFD14D ] LEqdUsb         C:\Windows\system32\DRIVERS\LEqdUsb.Sys

15:47:56.0061 0x1814  LEqdUsb - ok

15:47:56.0084 0x1814  [ 3267BC698E29474A8381E68904EB0390 ] LHidEqd         C:\Windows\system32\DRIVERS\LHidEqd.Sys

15:47:56.0085 0x1814  LHidEqd - ok

15:47:56.0095 0x1814  [ 241F2648ADF090E2A10095BD6D6F5DCB ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys

15:47:56.0095 0x1814  LHidFilt - ok

15:47:56.0129 0x1814  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

15:47:56.0130 0x1814  lltdio - ok

15:47:56.0151 0x1814  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

15:47:56.0155 0x1814  lltdsvc - ok

15:47:56.0169 0x1814  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

15:47:56.0171 0x1814  lmhosts - ok

15:47:56.0210 0x1814  [ 342ED5A4B3326014438F36D22D803737 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys

15:47:56.0212 0x1814  LMouFilt - ok

15:47:56.0265 0x1814  [ 5DCD36FC4A6ECBF6E7F9B3BF7E0D0F55 ] LPDSVC          C:\Windows\system32\lpdsvc.dll

15:47:56.0268 0x1814  LPDSVC - ok

15:47:56.0292 0x1814  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

15:47:56.0294 0x1814  LSI_FC - ok

15:47:56.0300 0x1814  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

15:47:56.0302 0x1814  LSI_SAS - ok

15:47:56.0309 0x1814  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

15:47:56.0310 0x1814  LSI_SAS2 - ok

15:47:56.0316 0x1814  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

15:47:56.0319 0x1814  LSI_SCSI - ok

15:47:56.0348 0x1814  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys

15:47:56.0349 0x1814  luafv - ok

15:47:56.0386 0x1814  [ 29C733E1DE824670DC9315CFC9BDBCD3 ] LUsbFilt        C:\Windows\system32\Drivers\LUsbFilt.Sys

15:47:56.0387 0x1814  LUsbFilt - ok

15:47:56.0406 0x1814  McComponentHostService - ok

15:47:56.0430 0x1814  MCSWASVR - ok

15:47:56.0457 0x1814  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

15:47:56.0460 0x1814  Mcx2Svc - ok

15:47:56.0464 0x1814  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

15:47:56.0465 0x1814  megasas - ok

15:47:56.0478 0x1814  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

15:47:56.0481 0x1814  MegaSR - ok

15:47:56.0542 0x1814  [ 6F62B8758B0C164E6D9BA7CACF9476C6 ] MemeoBackgroundService C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

15:47:56.0543 0x1814  MemeoBackgroundService - ok

15:47:56.0570 0x1814  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

15:47:56.0572 0x1814  MMCSS - ok

15:47:56.0580 0x1814  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys

15:47:56.0581 0x1814  Modem - ok

15:47:56.0611 0x1814  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

15:47:56.0611 0x1814  monitor - ok

15:47:56.0640 0x1814  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

15:47:56.0641 0x1814  mouclass - ok

15:47:56.0645 0x1814  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

15:47:56.0645 0x1814  mouhid - ok

15:47:56.0672 0x1814  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

15:47:56.0673 0x1814  mountmgr - ok

15:47:56.0708 0x1814  [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

15:47:56.0710 0x1814  MozillaMaintenance - ok

15:47:56.0721 0x1814  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys

15:47:56.0723 0x1814  mpio - ok

15:47:56.0727 0x1814  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

15:47:56.0728 0x1814  mpsdrv - ok

15:47:56.0756 0x1814  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll

15:47:56.0763 0x1814  MpsSvc - ok

15:47:56.0780 0x1814  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

15:47:56.0782 0x1814  MRxDAV - ok

15:47:56.0812 0x1814  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

15:47:56.0814 0x1814  mrxsmb - ok

15:47:56.0830 0x1814  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

15:47:56.0832 0x1814  mrxsmb10 - ok

15:47:56.0848 0x1814  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

15:47:56.0849 0x1814  mrxsmb20 - ok

15:47:56.0870 0x1814  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys

15:47:56.0870 0x1814  msahci - ok

15:47:56.0904 0x1814  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

15:47:56.0906 0x1814  msdsm - ok

15:47:56.0925 0x1814  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

15:47:56.0927 0x1814  MSDTC - ok

15:47:56.0946 0x1814  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

15:47:56.0946 0x1814  Msfs - ok

15:47:56.0955 0x1814  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

15:47:56.0956 0x1814  mshidkmdf - ok

15:47:56.0965 0x1814  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

15:47:56.0966 0x1814  msisadrv - ok

15:47:57.0002 0x1814  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

15:47:57.0005 0x1814  MSiSCSI - ok

15:47:57.0008 0x1814  msiserver - ok

15:47:57.0018 0x1814  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

15:47:57.0019 0x1814  MSKSSRV - ok

15:47:57.0029 0x1814  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

15:47:57.0030 0x1814  MSPCLOCK - ok

15:47:57.0033 0x1814  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

15:47:57.0034 0x1814  MSPQM - ok

15:47:57.0065 0x1814  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

15:47:57.0068 0x1814  MsRPC - ok

15:47:57.0084 0x1814  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

15:47:57.0084 0x1814  mssmbios - ok

15:47:57.0099 0x1814  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

15:47:57.0100 0x1814  MSTEE - ok

15:47:57.0103 0x1814  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

15:47:57.0104 0x1814  MTConfig - ok

15:47:57.0130 0x1814  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

15:47:57.0130 0x1814  Mup - ok

15:47:57.0158 0x1814  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll

15:47:57.0163 0x1814  napagent - ok

15:47:57.0202 0x1814  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

15:47:57.0209 0x1814  NativeWifiP - ok

15:47:57.0270 0x1814  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys

15:47:57.0286 0x1814  NDIS - ok

15:47:57.0307 0x1814  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

15:47:57.0308 0x1814  NdisCap - ok

15:47:57.0325 0x1814  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

15:47:57.0326 0x1814  NdisTapi - ok

15:47:57.0353 0x1814  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

15:47:57.0354 0x1814  Ndisuio - ok

15:47:57.0370 0x1814  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

15:47:57.0371 0x1814  NdisWan - ok

15:47:57.0389 0x1814  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

15:47:57.0390 0x1814  NDProxy - ok

15:47:57.0407 0x1814  Nero BackItUp Scheduler 3 - ok

15:47:57.0443 0x1814  [ 2C723E42FC8D7B0209492828F921FB50 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

15:47:57.0444 0x1814  Net Driver HPZ12 - ok

15:47:57.0449 0x1814  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

15:47:57.0450 0x1814  NetBIOS - ok

15:47:57.0482 0x1814  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

15:47:57.0484 0x1814  NetBT - ok

15:47:57.0500 0x1814  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe

15:47:57.0501 0x1814  Netlogon - ok

15:47:57.0544 0x1814  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

15:47:57.0547 0x1814  Netman - ok

15:47:57.0573 0x1814  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:47:57.0575 0x1814  NetMsmqActivator - ok

15:47:57.0578 0x1814  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:47:57.0579 0x1814  NetPipeActivator - ok

15:47:57.0585 0x1814  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

15:47:57.0589 0x1814  netprofm - ok

15:47:57.0593 0x1814  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:47:57.0594 0x1814  NetTcpActivator - ok

15:47:57.0597 0x1814  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:47:57.0598 0x1814  NetTcpPortSharing - ok

15:47:57.0602 0x1814  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

15:47:57.0603 0x1814  nfrd960 - ok

15:47:57.0634 0x1814  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll

15:47:57.0637 0x1814  NlaSvc - ok

15:47:57.0702 0x1814  [ CB992AE1506985D9167E85883B4C3240 ] NMIndexingService C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe

15:47:57.0708 0x1814  NMIndexingService - ok

15:47:57.0753 0x1814  [ 1381E95D4E0F94F22DD484B5F8C1D61D ] nmwcd           C:\Windows\system32\drivers\ccdcmbx64.sys

15:47:57.0754 0x1814  nmwcd - ok

15:47:57.0794 0x1814  [ 205510CDB7B6084BF31760B5D06F9242 ] nmwcdc          C:\Windows\system32\drivers\ccdcmbox64.sys

15:47:57.0795 0x1814  nmwcdc - ok

15:47:57.0799 0x1814  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

15:47:57.0799 0x1814  Npfs - ok

15:47:57.0817 0x1814  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll

15:47:57.0818 0x1814  nsi - ok

15:47:57.0821 0x1814  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

15:47:57.0822 0x1814  nsiproxy - ok

15:47:57.0864 0x1814  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

15:47:57.0875 0x1814  Ntfs - ok

15:47:57.0889 0x1814  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

15:47:57.0890 0x1814  Null - ok

15:47:57.0909 0x1814  [ B01C1E6D7477961D6D1CBDCD44AF3E67 ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys

15:47:57.0910 0x1814  nusb3hub - ok

15:47:57.0962 0x1814  [ 796BAE22DD827DB8AD7AE7C3F775E92F ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys

15:47:57.0967 0x1814  nusb3xhc - ok

15:47:58.0011 0x1814  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys

15:47:58.0013 0x1814  nvraid - ok

15:47:58.0046 0x1814  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys

15:47:58.0048 0x1814  nvstor - ok

15:47:58.0086 0x1814  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

15:47:58.0088 0x1814  nv_agp - ok

15:47:58.0106 0x1814  ocster_backup - ok

15:47:58.0217 0x1814  [ 5239571EC40C990C6FC4B03685D56777 ] OfficeSvc       C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

15:47:58.0233 0x1814  OfficeSvc - ok

15:47:58.0260 0x1814  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

15:47:58.0261 0x1814  ohci1394 - ok

15:47:58.0292 0x1814  [ 17553AE5699D2BFE46C746B9C059C0C1 ] oodrvled        C:\Windows\system32\DRIVERS\oodrvled.sys

15:47:58.0293 0x1814  oodrvled - ok

15:47:58.0358 0x1814  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

15:47:58.0360 0x1814  ose - ok

15:47:58.0524 0x1814  [ FE9C0029E1AF26350D9985D00520E5C8 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

15:47:58.0551 0x1814  osppsvc - ok

15:47:58.0580 0x1814  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

15:47:58.0584 0x1814  p2pimsvc - ok

15:47:58.0612 0x1814  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

15:47:58.0617 0x1814  p2psvc - ok

15:47:58.0658 0x1814  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

15:47:58.0659 0x1814  Parport - ok

15:47:58.0681 0x1814  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys

15:47:58.0682 0x1814  partmgr - ok

15:47:58.0697 0x1814  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll

15:47:58.0700 0x1814  PcaSvc - ok

15:47:58.0739 0x1814  [ 3FDE033DFB0D07F8B7D5C9A3044AA121 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfdx64.sys

15:47:58.0740 0x1814  pccsmcfd - ok

15:47:58.0759 0x1814  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys

15:47:58.0764 0x1814  pci - ok

15:47:58.0817 0x1814  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys

15:47:58.0818 0x1814  pciide - ok

15:47:58.0842 0x1814  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

15:47:58.0848 0x1814  pcmcia - ok

15:47:58.0859 0x1814  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

15:47:58.0861 0x1814  pcw - ok

15:47:58.0890 0x1814  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

15:47:58.0895 0x1814  PEAUTH - ok

15:47:58.0929 0x1814  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

15:47:58.0940 0x1814  PeerDistSvc - ok

15:47:59.0004 0x1814  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

15:47:59.0008 0x1814  PerfHost - ok

15:47:59.0072 0x1814  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll

15:47:59.0096 0x1814  pla - ok

15:47:59.0125 0x1814  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

15:47:59.0131 0x1814  PlugPlay - ok

15:47:59.0190 0x1814  [ 171E6D91A20AAC8D02172A64E82CE90B ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

15:47:59.0194 0x1814  Pml Driver HPZ12 - ok

15:47:59.0217 0x1814  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

15:47:59.0219 0x1814  PNRPAutoReg - ok

15:47:59.0230 0x1814  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

15:47:59.0233 0x1814  PNRPsvc - ok

15:47:59.0256 0x1814  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

15:47:59.0262 0x1814  PolicyAgent - ok

15:47:59.0280 0x1814  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll

15:47:59.0284 0x1814  Power - ok

15:47:59.0322 0x1814  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

15:47:59.0323 0x1814  PptpMiniport - ok

15:47:59.0348 0x1814  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys

15:47:59.0351 0x1814  Processor - ok

15:47:59.0385 0x1814  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll

15:47:59.0390 0x1814  ProfSvc - ok

15:47:59.0399 0x1814  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

15:47:59.0402 0x1814  ProtectedStorage - ok

15:47:59.0425 0x1814  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

15:47:59.0427 0x1814  Psched - ok

15:47:59.0458 0x1814  [ 07D57B890DD5693A6AB660CBAE8F91B4 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys

15:47:59.0459 0x1814  PxHlpa64 - ok

15:47:59.0511 0x1814  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

15:47:59.0539 0x1814  ql2300 - ok

15:47:59.0576 0x1814  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

15:47:59.0577 0x1814  ql40xx - ok

15:47:59.0596 0x1814  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

15:47:59.0599 0x1814  QWAVE - ok

15:47:59.0603 0x1814  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

15:47:59.0603 0x1814  QWAVEdrv - ok

15:47:59.0670 0x1814  [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr         C:\Windows\WindowsMobile\rapimgr.dll

15:47:59.0675 0x1814  RapiMgr - ok

15:47:59.0699 0x1814  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

15:47:59.0700 0x1814  RasAcd - ok

15:47:59.0734 0x1814  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

15:47:59.0735 0x1814  RasAgileVpn - ok

15:47:59.0752 0x1814  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

15:47:59.0756 0x1814  RasAuto - ok

15:47:59.0774 0x1814  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

15:47:59.0777 0x1814  Rasl2tp - ok

15:47:59.0798 0x1814  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll

15:47:59.0804 0x1814  RasMan - ok

15:47:59.0832 0x1814  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

15:47:59.0834 0x1814  RasPppoe - ok

15:47:59.0864 0x1814  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

15:47:59.0866 0x1814  RasSstp - ok

15:47:59.0874 0x1814  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

15:47:59.0877 0x1814  rdbss - ok

15:47:59.0909 0x1814  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

15:47:59.0910 0x1814  rdpbus - ok

15:47:59.0918 0x1814  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

15:47:59.0919 0x1814  RDPCDD - ok

15:47:59.0945 0x1814  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

15:47:59.0948 0x1814  RDPDR - ok

15:47:59.0967 0x1814  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

15:47:59.0968 0x1814  RDPENCDD - ok

15:47:59.0977 0x1814  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

15:47:59.0977 0x1814  RDPREFMP - ok

15:48:00.0031 0x1814  [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

15:48:00.0032 0x1814  RdpVideoMiniport - ok

15:48:00.0055 0x1814  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

15:48:00.0058 0x1814  RDPWD - ok

15:48:00.0098 0x1814  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

15:48:00.0102 0x1814  rdyboost - ok

15:48:00.0127 0x1814  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

15:48:00.0130 0x1814  RemoteAccess - ok

15:48:00.0148 0x1814  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

15:48:00.0152 0x1814  RemoteRegistry - ok

15:48:00.0187 0x1814  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

15:48:00.0190 0x1814  RFCOMM - ok

15:48:00.0219 0x1814  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

15:48:00.0223 0x1814  RpcEptMapper - ok

15:48:00.0244 0x1814  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

15:48:00.0246 0x1814  RpcLocator - ok

15:48:00.0278 0x1814  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll

15:48:00.0284 0x1814  RpcSs - ok

15:48:00.0323 0x1814  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

15:48:00.0325 0x1814  rspndr - ok

15:48:00.0351 0x1814  [ BE29B0A3AC1E8BD02FFAB8CEE86BADFA ] RSUSBSTOR       C:\Windows\system32\Drivers\RtsUStor.sys

15:48:00.0354 0x1814  RSUSBSTOR - ok

15:48:00.0391 0x1814  [ C435AC77704EB16E85C9D630F4D4B4F7 ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys

15:48:00.0393 0x1814  RTHDMIAzAudService - ok

15:48:00.0444 0x1814  [ BD9BA262CF26EFE9A9867EBE32D12164 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

15:48:00.0455 0x1814  RTL8167 - ok

15:48:00.0495 0x1814  [ 2B38C905492F36FE42B59DA52D6B4EB7 ] RtNdPt60        C:\Windows\system32\DRIVERS\RtNdPt60.sys

15:48:00.0497 0x1814  RtNdPt60 - ok

15:48:00.0532 0x1814  [ 3183388DA27655085960A22B4B29CAA9 ] RTTEAMPT        C:\Windows\system32\DRIVERS\RtTeam60.sys

15:48:00.0534 0x1814  RTTEAMPT - ok

15:48:00.0548 0x1814  [ 8B6B42D782202363A562F82B0E13B1C0 ] RTVLANPT        C:\Windows\system32\DRIVERS\RtVlan60.sys

15:48:00.0549 0x1814  RTVLANPT - ok

15:48:00.0572 0x1814  [ E60C0A09F997826C7627B244195AB581 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

15:48:00.0573 0x1814  s3cap - ok

15:48:00.0582 0x1814  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe

15:48:00.0584 0x1814  SamSs - ok

15:48:00.0612 0x1814  SANDRA - ok

15:48:00.0623 0x1814  SandraAgentSrv - ok

15:48:00.0655 0x1814  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

15:48:00.0657 0x1814  sbp2port - ok

15:48:00.0679 0x1814  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

15:48:00.0682 0x1814  SCardSvr - ok

15:48:00.0708 0x1814  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

15:48:00.0709 0x1814  scfilter - ok

15:48:00.0742 0x1814  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll

15:48:00.0751 0x1814  Schedule - ok

15:48:00.0775 0x1814  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll

15:48:00.0776 0x1814  SCPolicySvc - ok

15:48:00.0800 0x1814  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

15:48:00.0803 0x1814  SDRSVC - ok

15:48:00.0834 0x1814  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

15:48:00.0835 0x1814  secdrv - ok

15:48:00.0848 0x1814  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll

15:48:00.0849 0x1814  seclogon - ok

15:48:00.0873 0x1814  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll

15:48:00.0875 0x1814  SENS - ok

15:48:00.0882 0x1814  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

15:48:00.0883 0x1814  SensrSvc - ok

15:48:00.0929 0x1814  [ 2437720D4480523562360B2B6B5864A7 ] Ser2pl          C:\Windows\system32\DRIVERS\ser2pl64.sys

15:48:00.0934 0x1814  Ser2pl - ok

15:48:00.0957 0x1814  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

15:48:00.0958 0x1814  Serenum - ok

15:48:00.0973 0x1814  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys

15:48:00.0975 0x1814  Serial - ok

15:48:00.0995 0x1814  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

15:48:00.0996 0x1814  sermouse - ok

15:48:01.0077 0x1814  [ 78F7BB9F4924BE164294C59B8C3FC096 ] ServiceLayer    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

15:48:01.0090 0x1814  ServiceLayer - ok

15:48:01.0145 0x1814  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll

15:48:01.0148 0x1814  SessionEnv - ok

15:48:01.0169 0x1814  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

15:48:01.0170 0x1814  sffdisk - ok

15:48:01.0186 0x1814  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

15:48:01.0187 0x1814  sffp_mmc - ok

15:48:01.0197 0x1814  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

15:48:01.0198 0x1814  sffp_sd - ok

15:48:01.0226 0x1814  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

15:48:01.0227 0x1814  sfloppy - ok

15:48:01.0249 0x1814  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

15:48:01.0254 0x1814  SharedAccess - ok

15:48:01.0280 0x1814  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

15:48:01.0285 0x1814  ShellHWDetection - ok

15:48:01.0297 0x1814  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

15:48:01.0299 0x1814  SiSRaid2 - ok

15:48:01.0307 0x1814  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

15:48:01.0308 0x1814  SiSRaid4 - ok

15:48:01.0322 0x1814  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

15:48:01.0324 0x1814  Smb - ok

15:48:01.0370 0x1814  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

15:48:01.0376 0x1814  SNMPTRAP - ok

15:48:01.0390 0x1814  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys

15:48:01.0392 0x1814  spldr - ok

15:48:01.0426 0x1814  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe

15:48:01.0431 0x1814  Spooler - ok

15:48:01.0520 0x1814  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe

15:48:01.0576 0x1814  sppsvc - ok

15:48:01.0592 0x1814  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

15:48:01.0594 0x1814  sppuinotify - ok

15:48:01.0648 0x1814  [ D6AB7C13FCDD2E4CAC35244D2C172D9A ] sptd            C:\Windows\System32\Drivers\sptd.sys

15:48:01.0652 0x1814  sptd - ok

15:48:01.0680 0x1814  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys

15:48:01.0684 0x1814  srv - ok

15:48:01.0696 0x1814  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

15:48:01.0699 0x1814  srv2 - ok

15:48:01.0708 0x1814  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

15:48:01.0710 0x1814  srvnet - ok

15:48:01.0750 0x1814  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

15:48:01.0753 0x1814  SSDPSRV - ok

15:48:01.0761 0x1814  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

15:48:01.0764 0x1814  SstpSvc - ok

15:48:01.0791 0x1814  StarWindServiceAE - ok

15:48:01.0815 0x1814  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

15:48:01.0816 0x1814  stexstor - ok

15:48:01.0863 0x1814  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll

15:48:01.0869 0x1814  stisvc - ok

15:48:01.0895 0x1814  [ 7785DC213270D2FC066538DAF94087E7 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

15:48:01.0896 0x1814  storflt - ok

15:48:01.0918 0x1814  [ C40841817EF57D491F22EB103DA587CC ] StorSvc         C:\Windows\system32\storsvc.dll

15:48:01.0920 0x1814  StorSvc - ok

15:48:01.0929 0x1814  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc         C:\Windows\system32\drivers\storvsc.sys

15:48:01.0930 0x1814  storvsc - ok

15:48:01.0935 0x1814  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys

15:48:01.0936 0x1814  swenum - ok

15:48:01.0962 0x1814  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

15:48:01.0967 0x1814  swprv - ok

15:48:02.0005 0x1814  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll

15:48:02.0033 0x1814  SysMain - ok

15:48:02.0081 0x1814  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

15:48:02.0083 0x1814  TabletInputService - ok

15:48:02.0107 0x1814  [ F9BE29D5E097F03F81D3CD12B794CB66 ] tap0901         C:\Windows\system32\DRIVERS\tap0901.sys

15:48:02.0108 0x1814  tap0901 - ok

15:48:02.0134 0x1814  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll

15:48:02.0138 0x1814  TapiSrv - ok

15:48:02.0155 0x1814  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll

15:48:02.0157 0x1814  TBS - ok

15:48:02.0198 0x1814  [ DB74544B75566C974815E79A62433F29 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

15:48:02.0226 0x1814  Tcpip - ok

15:48:02.0260 0x1814  [ DB74544B75566C974815E79A62433F29 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

15:48:02.0269 0x1814  TCPIP6 - ok

15:48:02.0299 0x1814  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

15:48:02.0300 0x1814  tcpipreg - ok

15:48:02.0320 0x1814  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

15:48:02.0321 0x1814  TDPIPE - ok

15:48:02.0336 0x1814  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

15:48:02.0337 0x1814  TDTCP - ok

15:48:02.0376 0x1814  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

15:48:02.0378 0x1814  tdx - ok

15:48:02.0407 0x1814  [ 3183388DA27655085960A22B4B29CAA9 ] TEAM            C:\Windows\system32\DRIVERS\RtTeam60.sys

15:48:02.0409 0x1814  TEAM - ok

15:48:02.0440 0x1814  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys

15:48:02.0443 0x1814  TermDD - ok

15:48:02.0482 0x1814  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll

15:48:02.0500 0x1814  TermService - ok

15:48:02.0537 0x1814  [ 48D9D00C2E0E72C3D4F52772C80355F6 ] TFsExDisk       C:\Windows\System32\Drivers\TFsExDisk.sys

15:48:02.0538 0x1814  TFsExDisk - ok

15:48:02.0555 0x1814  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

15:48:02.0557 0x1814  Themes - ok

15:48:02.0578 0x1814  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

15:48:02.0579 0x1814  THREADORDER - ok

15:48:02.0596 0x1814  TomTomHOMEService - ok

15:48:02.0605 0x1814  TPkd - ok

15:48:02.0635 0x1814  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

15:48:02.0638 0x1814  TrkWks - ok

15:48:02.0672 0x1814  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

15:48:02.0674 0x1814  TrustedInstaller - ok

15:48:02.0700 0x1814  [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

15:48:02.0701 0x1814  tssecsrv - ok

15:48:02.0722 0x1814  [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

15:48:02.0723 0x1814  TsUsbFlt - ok

15:48:02.0757 0x1814  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

15:48:02.0758 0x1814  tunnel - ok

15:48:02.0785 0x1814  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

15:48:02.0786 0x1814  uagp35 - ok

15:48:02.0800 0x1814  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

15:48:02.0803 0x1814  udfs - ok

15:48:02.0824 0x1814  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

15:48:02.0826 0x1814  UI0Detect - ok

15:48:02.0860 0x1814  [ 34859D3801F4BD3DACFA131DD928455A ] UimBus          C:\Windows\system32\DRIVERS\uimx64.sys

15:48:02.0860 0x1814  UimBus - ok

15:48:02.0875 0x1814  [ D3CE4776E7FFB25E6935B1C797F4650C ] Uim_IM          C:\Windows\system32\Drivers\Uim_IMx64.sys

15:48:02.0878 0x1814  Uim_IM - ok

15:48:02.0894 0x1814  [ 532E4BED5C7803B2EE5681818B2528B7 ] Uim_VIM         C:\Windows\system32\Drivers\uim_vimx64.sys

15:48:02.0896 0x1814  Uim_VIM - ok

15:48:02.0923 0x1814  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

15:48:02.0924 0x1814  uliagpkx - ok

15:48:02.0962 0x1814  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

15:48:02.0964 0x1814  umbus - ok

15:48:03.0001 0x1814  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

15:48:03.0002 0x1814  UmPass - ok

15:48:03.0018 0x1814  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll

15:48:03.0022 0x1814  UmRdpService - ok

15:48:03.0033 0x1814  Update-Service - ok

15:48:03.0072 0x1814  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

15:48:03.0077 0x1814  upnphost - ok

15:48:03.0124 0x1814  [ 311C90F0767A63000AC35DD0A7078A30 ] upperdev        C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys

15:48:03.0125 0x1814  upperdev - ok

15:48:03.0153 0x1814  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

15:48:03.0154 0x1814  usbccgp - ok

15:48:03.0185 0x1814  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

15:48:03.0187 0x1814  usbcir - ok

15:48:03.0199 0x1814  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

15:48:03.0200 0x1814  usbehci - ok

15:48:03.0240 0x1814  [ 5AE9C87A1ED4B243942B3FDDD902134B ] usbfilter       C:\Windows\system32\DRIVERS\usbfilter.sys

15:48:03.0241 0x1814  usbfilter - ok

15:48:03.0277 0x1814  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

15:48:03.0284 0x1814  usbhub - ok

15:48:03.0297 0x1814  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

15:48:03.0298 0x1814  usbohci - ok

15:48:03.0343 0x1814  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

15:48:03.0344 0x1814  usbprint - ok

15:48:03.0380 0x1814  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

15:48:03.0381 0x1814  usbscan - ok

15:48:03.0435 0x1814  [ 4ACEE387FA8FD39F83564FCD2FC234F2 ] usbser          C:\Windows\system32\drivers\usbser.sys

15:48:03.0436 0x1814  usbser - ok

15:48:03.0472 0x1814  [ C03DA998E412D69D18DD11D835229AF0 ] UsbserFilt      C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys

15:48:03.0473 0x1814  UsbserFilt - ok

15:48:03.0499 0x1814  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

15:48:03.0501 0x1814  USBSTOR - ok

15:48:03.0519 0x1814  [ 81FB2216D3A60D1284455D511797DB3D ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

15:48:03.0521 0x1814  usbuhci - ok

15:48:03.0564 0x1814  [ 7B28E2FBE75115660FAB31079C0A9F29 ] usb_rndisx      C:\Windows\system32\drivers\usb8023x.sys

15:48:03.0565 0x1814  usb_rndisx - ok

15:48:03.0591 0x1814  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

15:48:03.0593 0x1814  UxSms - ok

15:48:03.0608 0x1814  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe

15:48:03.0609 0x1814  VaultSvc - ok

15:48:03.0647 0x1814  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

15:48:03.0647 0x1814  vdrvroot - ok

15:48:03.0682 0x1814  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe

15:48:03.0687 0x1814  vds - ok

15:48:03.0691 0x1814  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

15:48:03.0692 0x1814  vga - ok

15:48:03.0703 0x1814  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

15:48:03.0704 0x1814  VgaSave - ok

15:48:03.0727 0x1814  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

15:48:03.0729 0x1814  vhdmp - ok

15:48:03.0745 0x1814  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys

15:48:03.0746 0x1814  viaide - ok

15:48:03.0763 0x1814  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus           C:\Windows\system32\drivers\vmbus.sys

15:48:03.0765 0x1814  vmbus - ok

15:48:03.0777 0x1814  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

15:48:03.0778 0x1814  VMBusHID - ok

15:48:03.0788 0x1814  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

15:48:03.0789 0x1814  volmgr - ok

15:48:03.0812 0x1814  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

15:48:03.0815 0x1814  volmgrx - ok

15:48:03.0845 0x1814  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

15:48:03.0847 0x1814  volsnap - ok

15:48:03.0873 0x1814  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

15:48:03.0875 0x1814  vsmraid - ok

15:48:03.0918 0x1814  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe

15:48:03.0938 0x1814  VSS - ok

15:48:04.0085 0x1814  [ 8754BA5FCC85325C229ADCB72087706E ] vToolbarUpdater15.4.0 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe

15:48:04.0116 0x1814  vToolbarUpdater15.4.0 - ok

15:48:04.0131 0x1814  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

15:48:04.0132 0x1814  vwifibus - ok

15:48:04.0150 0x1814  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

15:48:04.0155 0x1814  W32Time - ok

15:48:04.0177 0x1814  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

15:48:04.0178 0x1814  WacomPen - ok

15:48:04.0211 0x1814  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

15:48:04.0213 0x1814  WANARP - ok

15:48:04.0226 0x1814  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

15:48:04.0227 0x1814  Wanarpv6 - ok

15:48:04.0292 0x1814  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

15:48:04.0303 0x1814  WatAdminSvc - ok

15:48:04.0346 0x1814  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe

15:48:04.0369 0x1814  wbengine - ok

15:48:04.0394 0x1814  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

15:48:04.0397 0x1814  WbioSrvc - ok

15:48:04.0435 0x1814  [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm        C:\Windows\WindowsMobile\wcescomm.dll

15:48:04.0439 0x1814  WcesComm - ok

15:48:04.0468 0x1814  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll

15:48:04.0473 0x1814  wcncsvc - ok

15:48:04.0480 0x1814  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

15:48:04.0483 0x1814  WcsPlugInService - ok

15:48:04.0506 0x1814  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys

15:48:04.0507 0x1814  Wd - ok

15:48:04.0540 0x1814  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

15:48:04.0547 0x1814  Wdf01000 - ok

15:48:04.0565 0x1814  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll

15:48:04.0568 0x1814  WdiServiceHost - ok

15:48:04.0571 0x1814  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll

15:48:04.0574 0x1814  WdiSystemHost - ok

15:48:04.0598 0x1814  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll

15:48:04.0603 0x1814  WebClient - ok

15:48:04.0621 0x1814  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

15:48:04.0625 0x1814  Wecsvc - ok

15:48:04.0630 0x1814  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

15:48:04.0633 0x1814  wercplsupport - ok

15:48:04.0661 0x1814  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

15:48:04.0664 0x1814  WerSvc - ok

15:48:04.0695 0x1814  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

15:48:04.0696 0x1814  WfpLwf - ok

15:48:04.0709 0x1814  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

15:48:04.0711 0x1814  WIMMount - ok

15:48:04.0731 0x1814  WinDefend - ok

15:48:04.0753 0x1814  WinHttpAutoProxySvc - ok

15:48:04.0806 0x1814  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

15:48:04.0808 0x1814  Winmgmt - ok

15:48:04.0857 0x1814  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll

15:48:04.0885 0x1814  WinRM - ok

15:48:04.0944 0x1814  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

15:48:04.0946 0x1814  WinUsb - ok

15:48:04.0976 0x1814  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll

15:48:04.0985 0x1814  Wlansvc - ok

15:48:05.0001 0x1814  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

15:48:05.0002 0x1814  WmiAcpi - ok

15:48:05.0038 0x1814  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

15:48:05.0040 0x1814  wmiApSrv - ok

15:48:05.0076 0x1814  WMPNetworkSvc - ok

15:48:05.0087 0x1814  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

15:48:05.0090 0x1814  WPCSvc - ok

15:48:05.0118 0x1814  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

15:48:05.0121 0x1814  WPDBusEnum - ok

15:48:05.0140 0x1814  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

15:48:05.0141 0x1814  ws2ifsl - ok

15:48:05.0149 0x1814  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll

15:48:05.0152 0x1814  wscsvc - ok

15:48:05.0155 0x1814  WSearch - ok

15:48:05.0231 0x1814  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

15:48:05.0280 0x1814  wuauserv - ok

15:48:05.0302 0x1814  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

15:48:05.0303 0x1814  WudfPf - ok

15:48:05.0326 0x1814  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

15:48:05.0328 0x1814  WUDFRd - ok

15:48:05.0351 0x1814  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

15:48:05.0354 0x1814  wudfsvc - ok

15:48:05.0380 0x1814  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll

15:48:05.0384 0x1814  WwanSvc - ok

15:48:05.0411 0x1814  ================ Scan global ===============================

15:48:05.0433 0x1814  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

15:48:05.0456 0x1814  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

15:48:05.0463 0x1814  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

15:48:05.0482 0x1814  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

15:48:05.0516 0x1814  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

15:48:05.0520 0x1814  [Global] - ok

15:48:05.0520 0x1814  ================ Scan MBR ==================================

15:48:05.0525 0x1814  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

15:48:05.0756 0x1814  \Device\Harddisk0\DR0 - ok

15:48:05.0783 0x1814  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1

15:48:05.0791 0x1814  \Device\Harddisk1\DR1 - ok

15:48:05.0795 0x1814  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk2\DR2

15:48:05.0802 0x1814  \Device\Harddisk2\DR2 - ok

15:48:05.0808 0x1814  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk4\DR4

15:48:05.0840 0x1814  \Device\Harddisk4\DR4 - ok

15:48:05.0841 0x1814  ================ Scan VBR ==================================

15:48:05.0844 0x1814  [ 6F69E5D8684287108C89046EBFCDDCFB ] \Device\Harddisk0\DR0\Partition1

15:48:05.0846 0x1814  \Device\Harddisk0\DR0\Partition1 - ok

15:48:05.0850 0x1814  [ 6905A7941A427EBBF4462515BF494A81 ] \Device\Harddisk1\DR1\Partition1

15:48:05.0852 0x1814  \Device\Harddisk1\DR1\Partition1 - ok

15:48:05.0858 0x1814  [ D59DC1BC55FFC27F7ECA062B5AD6F2E5 ] \Device\Harddisk2\DR2\Partition1

15:48:05.0860 0x1814  \Device\Harddisk2\DR2\Partition1 - ok

15:48:05.0865 0x1814  [ 287E60CEA469BCE4FCC533189F1C84A0 ] \Device\Harddisk4\DR4\Partition1

15:48:05.0866 0x1814  \Device\Harddisk4\DR4\Partition1 - ok

15:48:05.0867 0x1814  ============================================================

15:48:05.0867 0x1814  Scan finished

15:48:05.0867 0x1814  ============================================================

15:48:05.0876 0x1bac  Detected object count: 0

15:48:05.0876 0x1bac  Actual detected object count: 0

15:48:41.0199 0x18a0  ============================================================

15:48:41.0199 0x18a0  Scan started

15:48:41.0199 0x18a0  Mode: Manual; SigCheck; TDLFS; 

15:48:41.0199 0x18a0  ============================================================

15:48:41.0653 0x18a0  ================ Scan system memory ========================

15:48:41.0653 0x18a0  System memory - ok

15:48:41.0654 0x18a0  ================ Scan services =============================

15:48:41.0810 0x18a0  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys

15:48:41.0920 0x18a0  1394ohci - ok

15:48:41.0935 0x18a0  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

15:48:41.0946 0x18a0  ACPI - ok

15:48:41.0958 0x18a0  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

15:48:42.0005 0x18a0  AcpiPmi - ok

15:48:42.0050 0x18a0  [ 8B46D5A1D3EF08232C04D0EAFB871FB2 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

15:48:42.0075 0x18a0  Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning

15:48:42.0075 0x18a0  Adobe LM Service - detected UnsignedFile.Multi.Generic (1)

15:48:42.0079 0x18a0  AdobeActiveFileMonitor11.0 - ok

15:48:42.0112 0x18a0  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

15:48:42.0127 0x18a0  adp94xx - ok

15:48:42.0137 0x18a0  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

15:48:42.0148 0x18a0  adpahci - ok

15:48:42.0152 0x18a0  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

15:48:42.0162 0x18a0  adpu320 - ok

15:48:42.0186 0x18a0  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

15:48:42.0227 0x18a0  AeLookupSvc - ok

15:48:42.0266 0x18a0  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys

15:48:42.0305 0x18a0  AFD - ok

15:48:42.0321 0x18a0  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys

15:48:42.0329 0x18a0  agp440 - ok

15:48:42.0339 0x18a0  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

15:48:42.0368 0x18a0  ALG - ok

15:48:42.0383 0x18a0  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys

15:48:42.0391 0x18a0  aliide - ok

15:48:42.0417 0x18a0  [ 20C8A3E435A47F0408A1EA674AFA6194 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

15:48:42.0463 0x18a0  AMD External Events Utility - ok

15:48:42.0499 0x18a0  AMD FUEL Service - ok

15:48:42.0517 0x18a0  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys

15:48:42.0535 0x18a0  amdide - ok

15:48:42.0558 0x18a0  [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64        C:\Windows\system32\DRIVERS\amdiox64.sys

15:48:42.0590 0x18a0  amdiox64 - ok

15:48:42.0621 0x18a0  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

15:48:42.0671 0x18a0  AmdK8 - ok

15:48:42.0854 0x18a0  [ 0B45C18B0F3EE996D25BAA4E74884B83 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

15:48:43.0015 0x18a0  amdkmdag - ok

15:48:43.0039 0x18a0  [ 0E57258E5CC4CC7A9A9A877AFDF0CEC6 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

15:48:43.0068 0x18a0  amdkmdap - ok

15:48:43.0088 0x18a0  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

15:48:43.0114 0x18a0  AmdPPM - ok

15:48:43.0134 0x18a0  [ 53D8D46D51D390ABDB54ECA623165CB7 ] amdsata         C:\Windows\system32\DRIVERS\amdsata.sys

15:48:43.0143 0x18a0  amdsata - ok

15:48:43.0154 0x18a0  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

15:48:43.0164 0x18a0  amdsbs - ok

15:48:43.0175 0x18a0  [ 75C51148154E34EB3D7BB84749A758D5 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

15:48:43.0185 0x18a0  amdxata - ok

15:48:43.0206 0x18a0  [ EE4797DFEBBE8ACDB548DD8E80BE0A88 ] amd_sata        C:\Windows\system32\DRIVERS\amd_sata.sys

15:48:43.0215 0x18a0  amd_sata - ok

15:48:43.0227 0x18a0  [ D56EAD71A86FD2ACAE2DB47D0A6A3A41 ] amd_xata        C:\Windows\system32\DRIVERS\amd_xata.sys

15:48:43.0236 0x18a0  amd_xata - ok

15:48:43.0269 0x18a0  AODDriver4.01 - ok

15:48:43.0294 0x18a0  [ 5B25D1A753CC3A3EDB909BB759AC1098 ] AODDriver4.1    C:\ATI\ATI.ACE\Fuel\amd64\AODDriver2.sys

15:48:43.0302 0x18a0  AODDriver4.1 - ok

15:48:43.0333 0x18a0  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys

15:48:43.0370 0x18a0  AppID - ok

15:48:43.0393 0x18a0  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

15:48:43.0440 0x18a0  AppIDSvc - ok

15:48:43.0466 0x18a0  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll

15:48:43.0511 0x18a0  Appinfo - ok

15:48:43.0532 0x18a0  [ BA957E7ACD2B44FA3B01FAA64F6A9060 ] AppleCharger    C:\Windows\system32\DRIVERS\AppleCharger.sys

15:48:43.0541 0x18a0  AppleCharger - ok

15:48:43.0552 0x18a0  [ 95EF7247C50C7241FDAE39A9B3AFF4AE ] AppleChargerSrv C:\Windows\system32\AppleChargerSrv.exe

15:48:43.0561 0x18a0  AppleChargerSrv - ok

15:48:43.0584 0x18a0  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt         C:\Windows\System32\appmgmts.dll

15:48:43.0620 0x18a0  AppMgmt - ok

15:48:43.0638 0x18a0  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys

15:48:43.0647 0x18a0  arc - ok

15:48:43.0651 0x18a0  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

15:48:43.0659 0x18a0  arcsas - ok

15:48:43.0746 0x18a0  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

15:48:43.0762 0x18a0  aspnet_state - ok

15:48:43.0768 0x18a0  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

15:48:43.0828 0x18a0  AsyncMac - ok

15:48:43.0866 0x18a0  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys

15:48:43.0874 0x18a0  atapi - ok

15:48:43.0903 0x18a0  [ B0790FF0E25B7A2674296052F2162C1A ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys

15:48:43.0912 0x18a0  AtiHDAudioService - ok

15:48:43.0936 0x18a0  atillk64 - ok

15:48:43.0953 0x18a0  [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie         C:\Windows\system32\DRIVERS\AtiPcie.sys

15:48:43.0962 0x18a0  AtiPcie - ok

15:48:43.0991 0x18a0  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

15:48:44.0039 0x18a0  AudioEndpointBuilder - ok

15:48:44.0046 0x18a0  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

15:48:44.0078 0x18a0  AudioSrv - ok

15:48:44.0100 0x18a0  [ 18AAAC7ED383C465E319B5DD07D0A0B6 ] avgtp           C:\Windows\system32\drivers\avgtpx64.sys

15:48:44.0111 0x18a0  avgtp - ok

15:48:44.0231 0x18a0  [ F1CA8ED683D6945EFDC4492AB60B1460 ] AVP             C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe

15:48:44.0252 0x18a0  AVP - ok

15:48:44.0279 0x18a0  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll

15:48:44.0330 0x18a0  AxInstSV - ok

15:48:44.0358 0x18a0  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

15:48:44.0376 0x18a0  b06bdrv - ok

15:48:44.0397 0x18a0  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

15:48:44.0427 0x18a0  b57nd60a - ok

15:48:44.0449 0x18a0  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

15:48:44.0481 0x18a0  BDESVC - ok

15:48:44.0487 0x18a0  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

15:48:44.0525 0x18a0  Beep - ok

15:48:44.0556 0x18a0  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll

15:48:44.0588 0x18a0  BFE - ok

15:48:44.0623 0x18a0  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll

15:48:44.0667 0x18a0  BITS - ok

15:48:44.0681 0x18a0  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

15:48:44.0707 0x18a0  blbdrive - ok

15:48:44.0731 0x18a0  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

15:48:44.0764 0x18a0  bowser - ok

15:48:44.0799 0x18a0  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

15:48:44.0879 0x18a0  BrFiltLo - ok

15:48:44.0888 0x18a0  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

15:48:44.0911 0x18a0  BrFiltUp - ok

15:48:44.0938 0x18a0  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll

15:48:44.0965 0x18a0  Browser - ok

15:48:44.0982 0x18a0  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

15:48:45.0026 0x18a0  Brserid - ok

15:48:45.0033 0x18a0  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

15:48:45.0057 0x18a0  BrSerWdm - ok

15:48:45.0061 0x18a0  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

15:48:45.0094 0x18a0  BrUsbMdm - ok

15:48:45.0098 0x18a0  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

15:48:45.0108 0x18a0  BrUsbSer - ok

15:48:45.0136 0x18a0  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys

15:48:45.0190 0x18a0  BthEnum - ok

15:48:45.0199 0x18a0  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

15:48:45.0224 0x18a0  BTHMODEM - ok

15:48:45.0247 0x18a0  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

15:48:45.0271 0x18a0  BthPan - ok

15:48:45.0299 0x18a0  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys

15:48:45.0345 0x18a0  BTHPORT - ok

15:48:45.0366 0x18a0  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

15:48:45.0402 0x18a0  bthserv - ok

15:48:45.0422 0x18a0  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys

15:48:45.0439 0x18a0  BTHUSB - ok

15:48:45.0458 0x18a0  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

15:48:45.0498 0x18a0  cdfs - ok

15:48:45.0528 0x18a0  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

15:48:45.0538 0x18a0  cdrom - ok

15:48:45.0562 0x18a0  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll

15:48:45.0604 0x18a0  CertPropSvc - ok

15:48:45.0664 0x18a0  [ 213B6EC3DE19E35373A1906397588429 ] CGVPNCliSrvc    C:\Program Files\CyberGhost VPN\CGVPNCliService.exe

15:48:45.0692 0x18a0  CGVPNCliSrvc - ok

15:48:45.0706 0x18a0  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

15:48:45.0730 0x18a0  circlass - ok

15:48:45.0758 0x18a0  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys

15:48:45.0769 0x18a0  CLFS - ok

15:48:45.0817 0x18a0  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

15:48:45.0826 0x18a0  clr_optimization_v2.0.50727_32 - ok

15:48:45.0868 0x18a0  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

15:48:45.0877 0x18a0  clr_optimization_v2.0.50727_64 - ok

15:48:45.0933 0x18a0  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

15:48:45.0964 0x18a0  clr_optimization_v4.0.30319_32 - ok

15:48:45.0982 0x18a0  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

15:48:45.0999 0x18a0  clr_optimization_v4.0.30319_64 - ok

15:48:46.0030 0x18a0  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

15:48:46.0052 0x18a0  CmBatt - ok

15:48:46.0069 0x18a0  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys

15:48:46.0080 0x18a0  cmdide - ok

15:48:46.0109 0x18a0  [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG             C:\Windows\system32\Drivers\cng.sys

15:48:46.0130 0x18a0  CNG - ok

15:48:46.0139 0x18a0  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

15:48:46.0147 0x18a0  Compbatt - ok

15:48:46.0168 0x18a0  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

15:48:46.0190 0x18a0  CompositeBus - ok

15:48:46.0194 0x18a0  COMSysApp - ok

15:48:46.0220 0x18a0  [ C08063F052308B6F5882482615387F30 ] cpuz135         C:\Windows\system32\drivers\cpuz135_x64.sys

15:48:46.0229 0x18a0  cpuz135 - ok

15:48:46.0240 0x18a0  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

15:48:46.0248 0x18a0  crcdisk - ok

15:48:46.0265 0x18a0  [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

15:48:46.0300 0x18a0  CryptSvc - ok

15:48:46.0327 0x18a0  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC             C:\Windows\system32\drivers\csc.sys

15:48:46.0382 0x18a0  CSC - ok

15:48:46.0417 0x18a0  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll

15:48:46.0455 0x18a0  CscService - ok

15:48:46.0488 0x18a0  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll

15:48:46.0531 0x18a0  DcomLaunch - ok

15:48:46.0566 0x18a0  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

15:48:46.0611 0x18a0  defragsvc - ok

15:48:46.0633 0x18a0  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

15:48:46.0672 0x18a0  DfsC - ok

15:48:46.0674 0x18a0  DfSdkS - ok

15:48:46.0705 0x18a0  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll

15:48:46.0737 0x18a0  Dhcp - ok

15:48:46.0756 0x18a0  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

15:48:46.0783 0x18a0  discache - ok

15:48:46.0799 0x18a0  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys

15:48:46.0808 0x18a0  Disk - ok

15:48:46.0830 0x18a0  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

15:48:46.0865 0x18a0  Dnscache - ok

15:48:46.0888 0x18a0  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll

15:48:46.0930 0x18a0  dot3svc - ok

15:48:46.0953 0x18a0  [ B42ED0320C6E41102FDE0005154849BB ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

15:48:46.0978 0x18a0  Dot4 - ok

15:48:46.0997 0x18a0  [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys

15:48:47.0020 0x18a0  Dot4Print - ok

15:48:47.0033 0x18a0  [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

15:48:47.0056 0x18a0  dot4usb - ok

15:48:47.0085 0x18a0  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll

15:48:47.0122 0x18a0  DPS - ok

15:48:47.0147 0x18a0  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

15:48:47.0169 0x18a0  drmkaud - ok

15:48:47.0212 0x18a0  [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

15:48:47.0246 0x18a0  DXGKrnl - ok

15:48:47.0276 0x18a0  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

15:48:47.0308 0x18a0  EapHost - ok

15:48:47.0390 0x18a0  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

15:48:47.0440 0x18a0  ebdrv - ok

15:48:47.0461 0x18a0  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe

15:48:47.0496 0x18a0  EFS - ok

15:48:47.0546 0x18a0  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

15:48:47.0614 0x18a0  ehRecvr - ok

15:48:47.0637 0x18a0  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

15:48:47.0682 0x18a0  ehSched - ok

15:48:47.0714 0x18a0  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

15:48:47.0730 0x18a0  elxstor - ok

15:48:47.0758 0x18a0  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys

15:48:47.0785 0x18a0  ErrDev - ok

15:48:47.0815 0x18a0  [ 84486624268E078255BC7AA47F0960BC ] etdrv           C:\Windows\etdrv.sys

15:48:47.0826 0x18a0  etdrv - ok

15:48:47.0856 0x18a0  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

15:48:47.0904 0x18a0  EventSystem - ok

15:48:47.0928 0x18a0  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys

15:48:47.0956 0x18a0  exfat - ok

15:48:47.0987 0x18a0  Fabs - ok

15:48:48.0001 0x18a0  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys

15:48:48.0043 0x18a0  fastfat - ok

15:48:48.0085 0x18a0  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe

15:48:48.0126 0x18a0  Fax - ok

15:48:48.0132 0x18a0  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

15:48:48.0156 0x18a0  fdc - ok

15:48:48.0178 0x18a0  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

15:48:48.0217 0x18a0  fdPHost - ok

15:48:48.0230 0x18a0  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

15:48:48.0265 0x18a0  FDResPub - ok

15:48:48.0279 0x18a0  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

15:48:48.0288 0x18a0  FileInfo - ok

15:48:48.0292 0x18a0  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

15:48:48.0328 0x18a0  Filetrace - ok

15:48:48.0406 0x18a0  [ 5BD96D8C5411ACE71A7EAACAF0EF2903 ] FirebirdServerMAGIXInstance C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe

15:48:48.0455 0x18a0  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - warning

15:48:48.0455 0x18a0  FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic (1)

15:48:48.0482 0x18a0  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

15:48:48.0491 0x18a0  flpydisk - ok

15:48:48.0513 0x18a0  [ CF145A57AEBA71B82B1C6F103461F6FA ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

15:48:48.0523 0x18a0  FltMgr - ok

15:48:48.0571 0x18a0  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll

15:48:48.0628 0x18a0  FontCache - ok

15:48:48.0681 0x18a0  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

15:48:48.0689 0x18a0  FontCache3.0.0.0 - ok

15:48:48.0696 0x18a0  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

15:48:48.0705 0x18a0  FsDepends - ok

15:48:48.0728 0x18a0  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

15:48:48.0736 0x18a0  Fs_Rec - ok

15:48:48.0764 0x18a0  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

15:48:48.0776 0x18a0  fvevol - ok

15:48:48.0788 0x18a0  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

15:48:48.0796 0x18a0  gagp30kx - ok

15:48:48.0818 0x18a0  [ 7907E14F9BCF3A4689C9A74A1A873CB6 ] gdrv            C:\Windows\gdrv.sys

15:48:48.0827 0x18a0  gdrv - ok

15:48:48.0852 0x18a0  [ B93252C4C5A3733ECD5522CAF88DE02D ] GigasetGenericUSB_x64 C:\Windows\system32\DRIVERS\GigasetGenericUSB_x64.sys

15:48:48.0865 0x18a0  GigasetGenericUSB_x64 - ok

15:48:48.0892 0x18a0  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll

15:48:48.0941 0x18a0  gpsvc - ok

15:48:48.0980 0x18a0  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:48:49.0007 0x18a0  gupdate - ok

15:48:49.0010 0x18a0  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:48:49.0019 0x18a0  gupdatem - ok

15:48:49.0041 0x18a0  [ 8126331FBD4ED29EB3B356F9C905064D ] GVTDrv64        C:\Windows\GVTDrv64.sys

15:48:49.0050 0x18a0  GVTDrv64 - ok

15:48:49.0070 0x18a0  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

15:48:49.0121 0x18a0  hcw85cir - ok

15:48:49.0149 0x18a0  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

15:48:49.0180 0x18a0  HdAudAddService - ok

15:48:49.0195 0x18a0  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

15:48:49.0217 0x18a0  HDAudBus - ok

15:48:49.0221 0x18a0  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

15:48:49.0238 0x18a0  HidBatt - ok

15:48:49.0242 0x18a0  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

15:48:49.0261 0x18a0  HidBth - ok

15:48:49.0277 0x18a0  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

15:48:49.0298 0x18a0  HidIr - ok

15:48:49.0320 0x18a0  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll

15:48:49.0362 0x18a0  hidserv - ok

15:48:49.0374 0x18a0  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

15:48:49.0382 0x18a0  HidUsb - ok

15:48:49.0408 0x18a0  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll

15:48:49.0443 0x18a0  hkmsvc - ok

15:48:49.0467 0x18a0  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

15:48:49.0501 0x18a0  HomeGroupListener - ok

15:48:49.0530 0x18a0  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

15:48:49.0561 0x18a0  HomeGroupProvider - ok

15:48:49.0579 0x18a0  [ 5DB012836189C25241701B99E72B2745 ] hotcore3        C:\Windows\system32\DRIVERS\hotcore3.sys

15:48:49.0597 0x18a0  hotcore3 - ok

15:48:49.0671 0x18a0  [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05 ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll

15:48:49.0700 0x18a0  hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning

15:48:49.0700 0x18a0  hpqcxs08 - detected UnsignedFile.Multi.Generic (1)

15:48:49.0730 0x18a0  [ 99E8EEF42FE2F4AF29B08C3355DD7685 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll

15:48:49.0736 0x18a0  hpqddsvc ( UnsignedFile.Multi.Generic ) - warning

15:48:49.0736 0x18a0  hpqddsvc - detected UnsignedFile.Multi.Generic (1)

15:48:49.0758 0x18a0  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

15:48:49.0769 0x18a0  HpSAMD - ok

15:48:49.0803 0x18a0  [ 7F57926169C1B8ABA9274EA7D4B70F18 ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL

15:48:49.0822 0x18a0  HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning

15:48:49.0822 0x18a0  HPSLPSVC - detected UnsignedFile.Multi.Generic (1)

15:48:49.0853 0x18a0  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

15:48:49.0902 0x18a0  HTTP - ok

15:48:49.0924 0x18a0  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

15:48:49.0932 0x18a0  hwpolicy - ok

15:48:49.0960 0x18a0  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

15:48:49.0970 0x18a0  i8042prt - ok

15:48:49.0991 0x18a0  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

15:48:50.0002 0x18a0  iaStorV - ok

15:48:50.0043 0x18a0  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

15:48:50.0063 0x18a0  IDriverT ( UnsignedFile.Multi.Generic ) - warning

15:48:50.0063 0x18a0  IDriverT - detected UnsignedFile.Multi.Generic (1)

15:48:50.0100 0x18a0  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

15:48:50.0114 0x18a0  idsvc - ok

15:48:50.0138 0x18a0  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

15:48:50.0147 0x18a0  iirsp - ok

15:48:50.0176 0x18a0  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll

15:48:50.0225 0x18a0  IKEEXT - ok

15:48:50.0300 0x18a0  [ C2F868881D48A568B525255F084EF063 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

15:48:50.0342 0x18a0  IntcAzAudAddService - ok

15:48:50.0368 0x18a0  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys

15:48:50.0377 0x18a0  intelide - ok

15:48:50.0387 0x18a0  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

15:48:50.0404 0x18a0  intelppm - ok

15:48:50.0435 0x18a0  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

15:48:50.0462 0x18a0  IPBusEnum - ok

15:48:50.0490 0x18a0  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

15:48:50.0527 0x18a0  IpFilterDriver - ok

15:48:50.0562 0x18a0  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

15:48:50.0584 0x18a0  iphlpsvc - ok

15:48:50.0606 0x18a0  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

15:48:50.0631 0x18a0  IPMIDRV - ok

15:48:50.0635 0x18a0  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

15:48:50.0671 0x18a0  IPNAT - ok

15:48:50.0688 0x18a0  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

15:48:50.0738 0x18a0  IRENUM - ok

15:48:50.0751 0x18a0  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

15:48:50.0759 0x18a0  isapnp - ok

15:48:50.0774 0x18a0  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

15:48:50.0784 0x18a0  iScsiPrt - ok

15:48:50.0794 0x18a0  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

15:48:50.0802 0x18a0  kbdclass - ok

15:48:50.0806 0x18a0  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

15:48:50.0825 0x18a0  kbdhid - ok

15:48:50.0844 0x18a0  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe

15:48:50.0853 0x18a0  KeyIso - ok

15:48:50.0879 0x18a0  [ 8B5219318DF5895ABD230C373F2DF18A ] kl1             C:\Windows\system32\DRIVERS\kl1.sys

15:48:50.0892 0x18a0  kl1 - ok

15:48:50.0923 0x18a0  [ 8191BB24F61EBCAF84719993C7F7B5C6 ] KLIF            C:\Windows\system32\DRIVERS\klif.sys

15:48:50.0937 0x18a0  KLIF - ok

15:48:50.0951 0x18a0  [ 9BD99E1AB3F664120AB95C35F9EC1EB0 ] KLIM6           C:\Windows\system32\DRIVERS\klim6.sys

15:48:50.0961 0x18a0  KLIM6 - ok

15:48:50.0969 0x18a0  [ 2C43FD500522EF3B8C283A5846B7FC41 ] klkbdflt        C:\Windows\system32\DRIVERS\klkbdflt.sys

15:48:50.0978 0x18a0  klkbdflt - ok

15:48:50.0991 0x18a0  [ 70A6D2E292017EC47949696F51ABE18D ] klmouflt        C:\Windows\system32\DRIVERS\klmouflt.sys

15:48:51.0000 0x18a0  klmouflt - ok

15:48:51.0008 0x18a0  [ FFC0501A1EA742406F1904A0CFE3BFE2 ] kltdi           C:\Windows\system32\DRIVERS\kltdi.sys

15:48:51.0018 0x18a0  kltdi - ok

15:48:51.0037 0x18a0  [ 185D21CB8F10CFB351FF65DA88C18BC9 ] kneps           C:\Windows\system32\DRIVERS\kneps.sys

15:48:51.0047 0x18a0  kneps - ok

15:48:51.0069 0x18a0  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

15:48:51.0077 0x18a0  KSecDD - ok

15:48:51.0093 0x18a0  [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

15:48:51.0102 0x18a0  KSecPkg - ok

15:48:51.0122 0x18a0  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

15:48:51.0162 0x18a0  ksthunk - ok

15:48:51.0189 0x18a0  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

15:48:51.0235 0x18a0  KtmRm - ok

15:48:51.0261 0x18a0  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll

15:48:51.0300 0x18a0  LanmanServer - ok

15:48:51.0378 0x18a0  [ 7772DFAB22611050B79504E671B06E6E ] LBTServ         C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe

15:48:51.0401 0x18a0  LBTServ - ok

15:48:51.0429 0x18a0  [ ED7EC050CD6C20E1A93A4DAFB7EFD14D ] LEqdUsb         C:\Windows\system32\DRIVERS\LEqdUsb.Sys

15:48:51.0439 0x18a0  LEqdUsb - ok

15:48:51.0453 0x18a0  [ 3267BC698E29474A8381E68904EB0390 ] LHidEqd         C:\Windows\system32\DRIVERS\LHidEqd.Sys

15:48:51.0462 0x18a0  LHidEqd - ok

15:48:51.0472 0x18a0  [ 241F2648ADF090E2A10095BD6D6F5DCB ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys

15:48:51.0481 0x18a0  LHidFilt - ok

15:48:51.0506 0x18a0  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

15:48:51.0545 0x18a0  lltdio - ok

15:48:51.0578 0x18a0  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

15:48:51.0608 0x18a0  lltdsvc - ok

15:48:51.0621 0x18a0  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

15:48:51.0648 0x18a0  lmhosts - ok

15:48:51.0661 0x18a0  [ 342ED5A4B3326014438F36D22D803737 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys

15:48:51.0670 0x18a0  LMouFilt - ok

15:48:51.0692 0x18a0  [ 5DCD36FC4A6ECBF6E7F9B3BF7E0D0F55 ] LPDSVC          C:\Windows\system32\lpdsvc.dll

15:48:51.0737 0x18a0  LPDSVC - ok

15:48:51.0746 0x18a0  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

15:48:51.0762 0x18a0  LSI_FC - ok

15:48:51.0767 0x18a0  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

15:48:51.0776 0x18a0  LSI_SAS - ok

15:48:51.0780 0x18a0  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

15:48:51.0789 0x18a0  LSI_SAS2 - ok

15:48:51.0793 0x18a0  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

15:48:51.0802 0x18a0  LSI_SCSI - ok

15:48:51.0811 0x18a0  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys

15:48:51.0851 0x18a0  luafv - ok

15:48:51.0879 0x18a0  [ 29C733E1DE824670DC9315CFC9BDBCD3 ] LUsbFilt        C:\Windows\system32\Drivers\LUsbFilt.Sys

15:48:51.0889 0x18a0  LUsbFilt - ok

15:48:51.0891 0x18a0  McComponentHostService - ok

15:48:51.0895 0x18a0  MCSWASVR - ok

15:48:51.0918 0x18a0  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

15:48:51.0937 0x18a0  Mcx2Svc - ok

15:48:51.0941 0x18a0  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

15:48:51.0950 0x18a0  megasas - ok

15:48:51.0954 0x18a0  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

15:48:51.0965 0x18a0  MegaSR - ok

15:48:52.0003 0x18a0  [ 6F62B8758B0C164E6D9BA7CACF9476C6 ] MemeoBackgroundService C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

15:48:52.0027 0x18a0  MemeoBackgroundService - ok

15:48:52.0048 0x18a0  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

15:48:52.0079 0x18a0  MMCSS - ok

15:48:52.0091 0x18a0  [ 800BA92F7010378B09F9ED9270F07137 ] Modem

mk72	04.09.2013 18:47

Das hier gehört noch zum log des vorigen Beitrages!

Code:

C:\Windows\system32\drivers\modem.sys

15:48:52.0127 0x18a0  Modem - ok

15:48:52.0146 0x18a0  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

15:48:52.0173 0x18a0  monitor - ok

15:48:52.0184 0x18a0  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

15:48:52.0192 0x18a0  mouclass - ok

15:48:52.0205 0x18a0  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

15:48:52.0230 0x18a0  mouhid - ok

15:48:52.0249 0x18a0  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

15:48:52.0258 0x18a0  mountmgr - ok

15:48:52.0294 0x18a0  [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

15:48:52.0304 0x18a0  MozillaMaintenance - ok

15:48:52.0315 0x18a0  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys

15:48:52.0325 0x18a0  mpio - ok

15:48:52.0337 0x18a0  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

15:48:52.0364 0x18a0  mpsdrv - ok

15:48:52.0400 0x18a0  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll

15:48:52.0461 0x18a0  MpsSvc - ok

15:48:52.0482 0x18a0  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

15:48:52.0508 0x18a0  MRxDAV - ok

15:48:52.0539 0x18a0  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

15:48:52.0571 0x18a0  mrxsmb - ok

15:48:52.0582 0x18a0  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

15:48:52.0606 0x18a0  mrxsmb10 - ok

15:48:52.0625 0x18a0  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

15:48:52.0634 0x18a0  mrxsmb20 - ok

15:48:52.0655 0x18a0  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys

15:48:52.0663 0x18a0  msahci - ok

15:48:52.0690 0x18a0  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

15:48:52.0699 0x18a0  msdsm - ok

15:48:52.0710 0x18a0  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

15:48:52.0731 0x18a0  MSDTC - ok

15:48:52.0756 0x18a0  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

15:48:52.0782 0x18a0  Msfs - ok

15:48:52.0791 0x18a0  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

15:48:52.0825 0x18a0  mshidkmdf - ok

15:48:52.0842 0x18a0  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

15:48:52.0850 0x18a0  msisadrv - ok

15:48:52.0871 0x18a0  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

15:48:52.0915 0x18a0  MSiSCSI - ok

15:48:52.0919 0x18a0  msiserver - ok

15:48:52.0936 0x18a0  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

15:48:52.0978 0x18a0  MSKSSRV - ok

15:48:52.0981 0x18a0  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

15:48:53.0014 0x18a0  MSPCLOCK - ok

15:48:53.0017 0x18a0  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

15:48:53.0052 0x18a0  MSPQM - ok

15:48:53.0083 0x18a0  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

15:48:53.0094 0x18a0  MsRPC - ok

15:48:53.0100 0x18a0  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

15:48:53.0108 0x18a0  mssmbios - ok

15:48:53.0117 0x18a0  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

15:48:53.0158 0x18a0  MSTEE - ok

15:48:53.0161 0x18a0  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

15:48:53.0178 0x18a0  MTConfig - ok

15:48:53.0198 0x18a0  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

15:48:53.0207 0x18a0  Mup - ok

15:48:53.0235 0x18a0  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll

15:48:53.0278 0x18a0  napagent - ok

15:48:53.0301 0x18a0  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

15:48:53.0328 0x18a0  NativeWifiP - ok

15:48:53.0364 0x18a0  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys

15:48:53.0379 0x18a0  NDIS - ok

15:48:53.0392 0x18a0  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

15:48:53.0419 0x18a0  NdisCap - ok

15:48:53.0422 0x18a0  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

15:48:53.0459 0x18a0  NdisTapi - ok

15:48:53.0488 0x18a0  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

15:48:53.0525 0x18a0  Ndisuio - ok

15:48:53.0538 0x18a0  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

15:48:53.0575 0x18a0  NdisWan - ok

15:48:53.0599 0x18a0  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

15:48:53.0625 0x18a0  NDProxy - ok

15:48:53.0627 0x18a0  Nero BackItUp Scheduler 3 - ok

15:48:53.0653 0x18a0  [ 2C723E42FC8D7B0209492828F921FB50 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll

15:48:53.0669 0x18a0  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

15:48:53.0669 0x18a0  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

15:48:53.0681 0x18a0  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

15:48:53.0720 0x18a0  NetBIOS - ok

15:48:53.0750 0x18a0  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

15:48:53.0778 0x18a0  NetBT - ok

15:48:53.0793 0x18a0  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe

15:48:53.0802 0x18a0  Netlogon - ok

15:48:53.0820 0x18a0  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

15:48:53.0865 0x18a0  Netman - ok

15:48:53.0892 0x18a0  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:48:53.0901 0x18a0  NetMsmqActivator - ok

15:48:53.0904 0x18a0  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:48:53.0912 0x18a0  NetPipeActivator - ok

15:48:53.0919 0x18a0  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

15:48:53.0963 0x18a0  netprofm - ok

15:48:53.0966 0x18a0  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:48:53.0975 0x18a0  NetTcpActivator - ok

15:48:53.0978 0x18a0  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

15:48:53.0987 0x18a0  NetTcpPortSharing - ok

15:48:53.0991 0x18a0  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

15:48:53.0999 0x18a0  nfrd960 - ok

15:48:54.0019 0x18a0  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll

15:48:54.0041 0x18a0  NlaSvc - ok

15:48:54.0087 0x18a0  [ CB992AE1506985D9167E85883B4C3240 ] NMIndexingService C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe

15:48:54.0112 0x18a0  NMIndexingService - ok

15:48:54.0130 0x18a0  [ 1381E95D4E0F94F22DD484B5F8C1D61D ] nmwcd           C:\Windows\system32\drivers\ccdcmbx64.sys

15:48:54.0173 0x18a0  nmwcd - ok

15:48:54.0196 0x18a0  [ 205510CDB7B6084BF31760B5D06F9242 ] nmwcdc          C:\Windows\system32\drivers\ccdcmbox64.sys

15:48:54.0228 0x18a0  nmwcdc - ok

15:48:54.0232 0x18a0  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

15:48:54.0259 0x18a0  Npfs - ok

15:48:54.0285 0x18a0  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll

15:48:54.0324 0x18a0  nsi - ok

15:48:54.0339 0x18a0  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

15:48:54.0381 0x18a0  nsiproxy - ok

15:48:54.0432 0x18a0  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

15:48:54.0454 0x18a0  Ntfs - ok

15:48:54.0466 0x18a0  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

15:48:54.0501 0x18a0  Null - ok

15:48:54.0519 0x18a0  [ B01C1E6D7477961D6D1CBDCD44AF3E67 ] nusb3hub        C:\Windows\system32\DRIVERS\nusb3hub.sys

15:48:54.0530 0x18a0  nusb3hub - ok

15:48:54.0554 0x18a0  [ 796BAE22DD827DB8AD7AE7C3F775E92F ] nusb3xhc        C:\Windows\system32\DRIVERS\nusb3xhc.sys

15:48:54.0565 0x18a0  nusb3xhc - ok

15:48:54.0587 0x18a0  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys

15:48:54.0596 0x18a0  nvraid - ok

15:48:54.0606 0x18a0  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys

15:48:54.0615 0x18a0  nvstor - ok

15:48:54.0638 0x18a0  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

15:48:54.0647 0x18a0  nv_agp - ok

15:48:54.0649 0x18a0  ocster_backup - ok

15:48:54.0745 0x18a0  [ 5239571EC40C990C6FC4B03685D56777 ] OfficeSvc       C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

15:48:54.0778 0x18a0  OfficeSvc - ok

15:48:54.0803 0x18a0  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

15:48:54.0813 0x18a0  ohci1394 - ok

15:48:54.0828 0x18a0  [ 17553AE5699D2BFE46C746B9C059C0C1 ] oodrvled        C:\Windows\system32\DRIVERS\oodrvled.sys

15:48:54.0837 0x18a0  oodrvled - ok

15:48:54.0885 0x18a0  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

15:48:54.0917 0x18a0  ose - ok

15:48:55.0046 0x18a0  [ FE9C0029E1AF26350D9985D00520E5C8 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

15:48:55.0101 0x18a0  osppsvc - ok

15:48:55.0123 0x18a0  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

15:48:55.0158 0x18a0  p2pimsvc - ok

15:48:55.0172 0x18a0  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

15:48:55.0186 0x18a0  p2psvc - ok

15:48:55.0209 0x18a0  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

15:48:55.0219 0x18a0  Parport - ok

15:48:55.0241 0x18a0  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys

15:48:55.0250 0x18a0  partmgr - ok

15:48:55.0265 0x18a0  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll

15:48:55.0281 0x18a0  PcaSvc - ok

15:48:55.0299 0x18a0  [ 3FDE033DFB0D07F8B7D5C9A3044AA121 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfdx64.sys

15:48:55.0334 0x18a0  pccsmcfd - ok

15:48:55.0351 0x18a0  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys

15:48:55.0361 0x18a0  pci - ok

15:48:55.0377 0x18a0  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys

15:48:55.0385 0x18a0  pciide - ok

15:48:55.0409 0x18a0  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

15:48:55.0419 0x18a0  pcmcia - ok

15:48:55.0435 0x18a0  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

15:48:55.0443 0x18a0  pcw - ok

15:48:55.0458 0x18a0  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

15:48:55.0491 0x18a0  PEAUTH - ok

15:48:55.0531 0x18a0  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

15:48:55.0582 0x18a0  PeerDistSvc - ok

15:48:55.0639 0x18a0  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

15:48:55.0665 0x18a0  PerfHost - ok

15:48:55.0722 0x18a0  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll

15:48:55.0777 0x18a0  pla - ok

15:48:55.0802 0x18a0  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

15:48:55.0840 0x18a0  PlugPlay - ok

15:48:55.0858 0x18a0  [ 171E6D91A20AAC8D02172A64E82CE90B ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll

15:48:55.0877 0x18a0  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning

15:48:55.0877 0x18a0  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)

15:48:55.0902 0x18a0  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

15:48:55.0925 0x18a0  PNRPAutoReg - ok

15:48:55.0940 0x18a0  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

15:48:55.0953 0x18a0  PNRPsvc - ok

15:48:55.0991 0x18a0  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

15:48:56.0037 0x18a0  PolicyAgent - ok

15:48:56.0058 0x18a0  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll

15:48:56.0095 0x18a0  Power - ok

15:48:56.0125 0x18a0  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

15:48:56.0161 0x18a0  PptpMiniport - ok

15:48:56.0183 0x18a0  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys

15:48:56.0207 0x18a0  Processor - ok

15:48:56.0229 0x18a0  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll

15:48:56.0259 0x18a0  ProfSvc - ok

15:48:56.0269 0x18a0  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

15:48:56.0279 0x18a0  ProtectedStorage - ok

15:48:56.0294 0x18a0  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

15:48:56.0331 0x18a0  Psched - ok

15:48:56.0352 0x18a0  [ 07D57B890DD5693A6AB660CBAE8F91B4 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys

15:48:56.0361 0x18a0  PxHlpa64 - ok

15:48:56.0392 0x18a0  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

15:48:56.0413 0x18a0  ql2300 - ok

15:48:56.0437 0x18a0  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

15:48:56.0446 0x18a0  ql40xx - ok

15:48:56.0466 0x18a0  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

15:48:56.0490 0x18a0  QWAVE - ok

15:48:56.0493 0x18a0  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

15:48:56.0513 0x18a0  QWAVEdrv - ok

15:48:56.0563 0x18a0  [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr         C:\Windows\WindowsMobile\rapimgr.dll

15:48:56.0574 0x18a0  RapiMgr - ok

15:48:56.0585 0x18a0  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

15:48:56.0620 0x18a0  RasAcd - ok

15:48:56.0644 0x18a0  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

15:48:56.0671 0x18a0  RasAgileVpn - ok

15:48:56.0688 0x18a0  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

15:48:56.0717 0x18a0  RasAuto - ok

15:48:56.0735 0x18a0  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

15:48:56.0777 0x18a0  Rasl2tp - ok

15:48:56.0800 0x18a0  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll

15:48:56.0830 0x18a0  RasMan - ok

15:48:56.0851 0x18a0  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

15:48:56.0895 0x18a0  RasPppoe - ok

15:48:56.0908 0x18a0  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

15:48:56.0943 0x18a0  RasSstp - ok

15:48:56.0948 0x18a0  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

15:48:56.0984 0x18a0  rdbss - ok

15:48:57.0003 0x18a0  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

15:48:57.0015 0x18a0  rdpbus - ok

15:48:57.0021 0x18a0  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

15:48:57.0059 0x18a0  RDPCDD - ok

15:48:57.0089 0x18a0  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

15:48:57.0112 0x18a0  RDPDR - ok

15:48:57.0116 0x18a0  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

15:48:57.0150 0x18a0  RDPENCDD - ok

15:48:57.0170 0x18a0  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

15:48:57.0196 0x18a0  RDPREFMP - ok

15:48:57.0217 0x18a0  [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

15:48:57.0251 0x18a0  RdpVideoMiniport - ok

15:48:57.0275 0x18a0  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

15:48:57.0312 0x18a0  RDPWD - ok

15:48:57.0340 0x18a0  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

15:48:57.0350 0x18a0  rdyboost - ok

15:48:57.0371 0x18a0  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

15:48:57.0411 0x18a0  RemoteAccess - ok

15:48:57.0425 0x18a0  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

15:48:57.0463 0x18a0  RemoteRegistry - ok

15:48:57.0490 0x18a0  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

15:48:57.0519 0x18a0  RFCOMM - ok

15:48:57.0572 0x18a0  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

15:48:57.0652 0x18a0  RpcEptMapper - ok

15:48:57.0680 0x18a0  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

15:48:57.0705 0x18a0  RpcLocator - ok

15:48:57.0737 0x18a0  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll

15:48:57.0769 0x18a0  RpcSs - ok

15:48:57.0800 0x18a0  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

15:48:57.0827 0x18a0  rspndr - ok

15:48:57.0853 0x18a0  [ BE29B0A3AC1E8BD02FFAB8CEE86BADFA ] RSUSBSTOR       C:\Windows\system32\Drivers\RtsUStor.sys

15:48:57.0864 0x18a0  RSUSBSTOR - ok

15:48:57.0884 0x18a0  [ C435AC77704EB16E85C9D630F4D4B4F7 ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys

15:48:57.0895 0x18a0  RTHDMIAzAudService - ok

15:48:57.0924 0x18a0  [ BD9BA262CF26EFE9A9867EBE32D12164 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

15:48:57.0939 0x18a0  RTL8167 - ok

15:48:57.0964 0x18a0  [ 2B38C905492F36FE42B59DA52D6B4EB7 ] RtNdPt60        C:\Windows\system32\DRIVERS\RtNdPt60.sys

15:48:58.0001 0x18a0  RtNdPt60 - ok

15:48:58.0010 0x18a0  [ 3183388DA27655085960A22B4B29CAA9 ] RTTEAMPT        C:\Windows\system32\DRIVERS\RtTeam60.sys

15:48:58.0028 0x18a0  RTTEAMPT ( UnsignedFile.Multi.Generic ) - warning

15:48:58.0028 0x18a0  RTTEAMPT - detected UnsignedFile.Multi.Generic (1)

15:48:58.0042 0x18a0  [ 8B6B42D782202363A562F82B0E13B1C0 ] RTVLANPT        C:\Windows\system32\DRIVERS\RtVlan60.sys

15:48:58.0065 0x18a0  RTVLANPT - ok

15:48:58.0083 0x18a0  [ E60C0A09F997826C7627B244195AB581 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

15:48:58.0119 0x18a0  s3cap - ok

15:48:58.0135 0x18a0  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe

15:48:58.0145 0x18a0  SamSs - ok

15:48:58.0147 0x18a0  SANDRA - ok

15:48:58.0151 0x18a0  SandraAgentSrv - ok

15:48:58.0166 0x18a0  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

15:48:58.0175 0x18a0  sbp2port - ok

15:48:58.0199 0x18a0  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

15:48:58.0237 0x18a0  SCardSvr - ok

15:48:58.0261 0x18a0  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

15:48:58.0297 0x18a0  scfilter - ok

15:48:58.0336 0x18a0  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll

15:48:58.0374 0x18a0  Schedule - ok

15:48:58.0395 0x18a0  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll

15:48:58.0420 0x18a0  SCPolicySvc - ok

15:48:58.0436 0x18a0  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

15:48:58.0476 0x18a0  SDRSVC - ok

15:48:58.0495 0x18a0  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

15:48:58.0534 0x18a0  secdrv - ok

15:48:58.0550 0x18a0  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll

15:48:58.0577 0x18a0  seclogon - ok

15:48:58.0601 0x18a0  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll

15:48:58.0637 0x18a0  SENS - ok

15:48:58.0651 0x18a0  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

15:48:58.0680 0x18a0  SensrSvc - ok

15:48:58.0697 0x18a0  [ 2437720D4480523562360B2B6B5864A7 ] Ser2pl          C:\Windows\system32\DRIVERS\ser2pl64.sys

15:48:58.0721 0x18a0  Ser2pl - ok

15:48:58.0725 0x18a0  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

15:48:58.0749 0x18a0  Serenum - ok

15:48:58.0776 0x18a0  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys

15:48:58.0785 0x18a0  Serial - ok

15:48:58.0806 0x18a0  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

15:48:58.0831 0x18a0  sermouse - ok

15:48:58.0881 0x18a0  [ 78F7BB9F4924BE164294C59B8C3FC096 ] ServiceLayer    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

15:48:58.0896 0x18a0  ServiceLayer - ok

15:48:58.0931 0x18a0  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll

15:48:58.0972 0x18a0  SessionEnv - ok

15:48:58.0997 0x18a0  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

15:48:59.0017 0x18a0  sffdisk - ok

15:48:59.0030 0x18a0  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

15:48:59.0051 0x18a0  sffp_mmc - ok

15:48:59.0066 0x18a0  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

15:48:59.0090 0x18a0  sffp_sd - ok

15:48:59.0112 0x18a0  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

15:48:59.0121 0x18a0  sfloppy - ok

15:48:59.0160 0x18a0  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

15:48:59.0199 0x18a0  SharedAccess - ok

15:48:59.0224 0x18a0  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

15:48:59.0265 0x18a0  ShellHWDetection - ok

15:48:59.0283 0x18a0  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

15:48:59.0291 0x18a0  SiSRaid2 - ok

15:48:59.0301 0x18a0  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

15:48:59.0310 0x18a0  SiSRaid4 - ok

15:48:59.0315 0x18a0  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

15:48:59.0342 0x18a0  Smb - ok

15:48:59.0373 0x18a0  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

15:48:59.0397 0x18a0  SNMPTRAP - ok

15:48:59.0401 0x18a0  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys

15:48:59.0410 0x18a0  spldr - ok

15:48:59.0437 0x18a0  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe

15:48:59.0466 0x18a0  Spooler - ok

15:48:59.0551 0x18a0  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe

15:48:59.0632 0x18a0  sppsvc - ok

15:48:59.0661 0x18a0  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

15:48:59.0705 0x18a0  sppuinotify - ok

15:48:59.0734 0x18a0  [ D6AB7C13FCDD2E4CAC35244D2C172D9A ] sptd            C:\Windows\System32\Drivers\sptd.sys

15:48:59.0747 0x18a0  sptd - ok

15:48:59.0775 0x18a0  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys

15:48:59.0805 0x18a0  srv - ok

15:48:59.0824 0x18a0  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

15:48:59.0846 0x18a0  srv2 - ok

15:48:59.0861 0x18a0  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

15:48:59.0885 0x18a0  srvnet - ok

15:48:59.0911 0x18a0  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

15:48:59.0955 0x18a0  SSDPSRV - ok

15:48:59.0980 0x18a0  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

15:49:00.0009 0x18a0  SstpSvc - ok

15:49:00.0011 0x18a0  StarWindServiceAE - ok

15:49:00.0034 0x18a0  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

15:49:00.0042 0x18a0  stexstor - ok

15:49:00.0066 0x18a0  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll

15:49:00.0086 0x18a0  stisvc - ok

15:49:00.0114 0x18a0  [ 7785DC213270D2FC066538DAF94087E7 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

15:49:00.0123 0x18a0  storflt - ok

15:49:00.0145 0x18a0  [ C40841817EF57D491F22EB103DA587CC ] StorSvc         C:\Windows\system32\storsvc.dll

15:49:00.0178 0x18a0  StorSvc - ok

15:49:00.0189 0x18a0  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc         C:\Windows\system32\drivers\storvsc.sys

15:49:00.0198 0x18a0  storvsc - ok

15:49:00.0205 0x18a0  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys

15:49:00.0213 0x18a0  swenum - ok

15:49:00.0239 0x18a0  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

15:49:00.0283 0x18a0  swprv - ok

15:49:00.0325 0x18a0  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll

15:49:00.0373 0x18a0  SysMain - ok

15:49:00.0400 0x18a0  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

15:49:00.0415 0x18a0  TabletInputService - ok

15:49:00.0435 0x18a0  [ F9BE29D5E097F03F81D3CD12B794CB66 ] tap0901         C:\Windows\system32\DRIVERS\tap0901.sys

15:49:00.0486 0x18a0  tap0901 - ok

15:49:00.0531 0x18a0  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll

15:49:00.0598 0x18a0  TapiSrv - ok

15:49:00.0624 0x18a0  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll

15:49:00.0669 0x18a0  TBS - ok

15:49:00.0734 0x18a0  [ DB74544B75566C974815E79A62433F29 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

15:49:00.0764 0x18a0  Tcpip - ok

15:49:00.0801 0x18a0  [ DB74544B75566C974815E79A62433F29 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

15:49:00.0824 0x18a0  TCPIP6 - ok

15:49:00.0851 0x18a0  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

15:49:00.0860 0x18a0  tcpipreg - ok

15:49:00.0881 0x18a0  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

15:49:00.0915 0x18a0  TDPIPE - ok

15:49:00.0930 0x18a0  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

15:49:00.0947 0x18a0  TDTCP - ok

15:49:00.0971 0x18a0  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

15:49:01.0011 0x18a0  tdx - ok

15:49:01.0026 0x18a0  [ 3183388DA27655085960A22B4B29CAA9 ] TEAM            C:\Windows\system32\DRIVERS\RtTeam60.sys

15:49:01.0032 0x18a0  TEAM ( UnsignedFile.Multi.Generic ) - warning

15:49:01.0032 0x18a0  TEAM - detected UnsignedFile.Multi.Generic (1)

15:49:01.0051 0x18a0  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys

15:49:01.0059 0x18a0  TermDD - ok

15:49:01.0087 0x18a0  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll

15:49:01.0121 0x18a0  TermService - ok

15:49:01.0139 0x18a0  [ 48D9D00C2E0E72C3D4F52772C80355F6 ] TFsExDisk       C:\Windows\System32\Drivers\TFsExDisk.sys

15:49:01.0148 0x18a0  TFsExDisk - ok

15:49:01.0165 0x18a0  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

15:49:01.0179 0x18a0  Themes - ok

15:49:01.0205 0x18a0  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

15:49:01.0234 0x18a0  THREADORDER - ok

15:49:01.0237 0x18a0  TomTomHOMEService - ok

15:49:01.0242 0x18a0  TPkd - ok

15:49:01.0254 0x18a0  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

15:49:01.0297 0x18a0  TrkWks - ok

15:49:01.0333 0x18a0  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

15:49:01.0375 0x18a0  TrustedInstaller - ok

15:49:01.0403 0x18a0  [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

15:49:01.0438 0x18a0  tssecsrv - ok

15:49:01.0450 0x18a0  [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

15:49:01.0480 0x18a0  TsUsbFlt - ok

15:49:01.0493 0x18a0  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

15:49:01.0519 0x18a0  tunnel - ok

15:49:01.0538 0x18a0  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

15:49:01.0546 0x18a0  uagp35 - ok

15:49:01.0561 0x18a0  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

15:49:01.0604 0x18a0  udfs - ok

15:49:01.0635 0x18a0  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

15:49:01.0646 0x18a0  UI0Detect - ok

15:49:01.0662 0x18a0  [ 34859D3801F4BD3DACFA131DD928455A ] UimBus          C:\Windows\system32\DRIVERS\uimx64.sys

15:49:01.0672 0x18a0  UimBus - ok

15:49:01.0686 0x18a0  [ D3CE4776E7FFB25E6935B1C797F4650C ] Uim_IM          C:\Windows\system32\Drivers\Uim_IMx64.sys

15:49:01.0700 0x18a0  Uim_IM - ok

15:49:01.0713 0x18a0  [ 532E4BED5C7803B2EE5681818B2528B7 ] Uim_VIM         C:\Windows\system32\Drivers\uim_vimx64.sys

15:49:01.0725 0x18a0  Uim_VIM - ok

15:49:01.0742 0x18a0  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

15:49:01.0751 0x18a0  uliagpkx - ok

15:49:01.0772 0x18a0  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

15:49:01.0796 0x18a0  umbus - ok

15:49:01.0820 0x18a0  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

15:49:01.0838 0x18a0  UmPass - ok

15:49:01.0862 0x18a0  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll

15:49:01.0886 0x18a0  UmRdpService - ok

15:49:01.0889 0x18a0  Update-Service - ok

15:49:01.0924 0x18a0  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

15:49:01.0955 0x18a0  upnphost - ok

15:49:01.0977 0x18a0  [ 311C90F0767A63000AC35DD0A7078A30 ] upperdev        C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys

15:49:01.0998 0x18a0  upperdev - ok

15:49:02.0022 0x18a0  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

15:49:02.0057 0x18a0  usbccgp - ok

15:49:02.0079 0x18a0  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

15:49:02.0091 0x18a0  usbcir - ok

15:49:02.0102 0x18a0  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

15:49:02.0124 0x18a0  usbehci - ok

15:49:02.0150 0x18a0  [ 5AE9C87A1ED4B243942B3FDDD902134B ] usbfilter       C:\Windows\system32\DRIVERS\usbfilter.sys

15:49:02.0160 0x18a0  usbfilter - ok

15:49:02.0176 0x18a0  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

15:49:02.0188 0x18a0  usbhub - ok

15:49:02.0208 0x18a0  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

15:49:02.0227 0x18a0  usbohci - ok

15:49:02.0245 0x18a0  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

15:49:02.0270 0x18a0  usbprint - ok

15:49:02.0290 0x18a0  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

15:49:02.0316 0x18a0  usbscan - ok

15:49:02.0337 0x18a0  [ 4ACEE387FA8FD39F83564FCD2FC234F2 ] usbser          C:\Windows\system32\drivers\usbser.sys

15:49:02.0374 0x18a0  usbser - ok

15:49:02.0391 0x18a0  [ C03DA998E412D69D18DD11D835229AF0 ] UsbserFilt      C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys

15:49:02.0420 0x18a0  UsbserFilt - ok

15:49:02.0443 0x18a0  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

15:49:02.0457 0x18a0  USBSTOR - ok

15:49:02.0472 0x18a0  [ 81FB2216D3A60D1284455D511797DB3D ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

15:49:02.0495 0x18a0  usbuhci - ok

15:49:02.0524 0x18a0  [ 7B28E2FBE75115660FAB31079C0A9F29 ] usb_rndisx      C:\Windows\system32\drivers\usb8023x.sys

15:49:02.0540 0x18a0  usb_rndisx - ok

15:49:02.0559 0x18a0  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

15:49:02.0587 0x18a0  UxSms - ok

15:49:02.0593 0x18a0  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe

15:49:02.0602 0x18a0  VaultSvc - ok

15:49:02.0623 0x18a0  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

15:49:02.0632 0x18a0  vdrvroot - ok

15:49:02.0658 0x18a0  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe

15:49:02.0702 0x18a0  vds - ok

15:49:02.0723 0x18a0  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

15:49:02.0734 0x18a0  vga - ok

15:49:02.0746 0x18a0  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

15:49:02.0782 0x18a0  VgaSave - ok

15:49:02.0804 0x18a0  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

15:49:02.0813 0x18a0  vhdmp - ok

15:49:02.0817 0x18a0  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys

15:49:02.0826 0x18a0  viaide - ok

15:49:02.0839 0x18a0  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus           C:\Windows\system32\drivers\vmbus.sys

15:49:02.0849 0x18a0  vmbus - ok

15:49:02.0862 0x18a0  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

15:49:02.0883 0x18a0  VMBusHID - ok

15:49:02.0887 0x18a0  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

15:49:02.0896 0x18a0  volmgr - ok

15:49:02.0922 0x18a0  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

15:49:02.0932 0x18a0  volmgrx - ok

15:49:02.0955 0x18a0  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

15:49:02.0965 0x18a0  volsnap - ok

15:49:02.0991 0x18a0  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

15:49:03.0000 0x18a0  vsmraid - ok

15:49:03.0044 0x18a0  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe

15:49:03.0101 0x18a0  VSS - ok

15:49:03.0212 0x18a0  [ 8754BA5FCC85325C229ADCB72087706E ] vToolbarUpdater15.4.0 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe

15:49:03.0248 0x18a0  vToolbarUpdater15.4.0 - ok

15:49:03.0253 0x18a0  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

15:49:03.0275 0x18a0  vwifibus - ok

15:49:03.0301 0x18a0  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

15:49:03.0357 0x18a0  W32Time - ok

15:49:03.0378 0x18a0  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

15:49:03.0403 0x18a0  WacomPen - ok

15:49:03.0429 0x18a0  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

15:49:03.0466 0x18a0  WANARP - ok

15:49:03.0469 0x18a0  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

15:49:03.0495 0x18a0  Wanarpv6 - ok

15:49:03.0542 0x18a0  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

15:49:03.0562 0x18a0  WatAdminSvc - ok

15:49:03.0605 0x18a0  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe

15:49:03.0693 0x18a0  wbengine - ok

15:49:03.0720 0x18a0  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

15:49:03.0740 0x18a0  WbioSrvc - ok

15:49:03.0770 0x18a0  [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm        C:\Windows\WindowsMobile\wcescomm.dll

15:49:03.0786 0x18a0  WcesComm - ok

15:49:03.0819 0x18a0  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll

15:49:03.0844 0x18a0  wcncsvc - ok

15:49:03.0857 0x18a0  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

15:49:03.0874 0x18a0  WcsPlugInService - ok

15:49:03.0899 0x18a0  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys

15:49:03.0908 0x18a0  Wd - ok

15:49:03.0941 0x18a0  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

15:49:03.0957 0x18a0  Wdf01000 - ok

15:49:03.0974 0x18a0  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll

15:49:04.0027 0x18a0  WdiServiceHost - ok

15:49:04.0030 0x18a0  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll

15:49:04.0044 0x18a0  WdiSystemHost - ok

15:49:04.0066 0x18a0  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll

15:49:04.0091 0x18a0  WebClient - ok

15:49:04.0132 0x18a0  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

15:49:04.0189 0x18a0  Wecsvc - ok

15:49:04.0194 0x18a0  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

15:49:04.0234 0x18a0  wercplsupport - ok

15:49:04.0254 0x18a0  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

15:49:04.0282 0x18a0  WerSvc - ok

15:49:04.0313 0x18a0  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

15:49:04.0339 0x18a0  WfpLwf - ok

15:49:04.0352 0x18a0  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

15:49:04.0361 0x18a0  WIMMount - ok

15:49:04.0383 0x18a0  WinDefend - ok

15:49:04.0389 0x18a0  WinHttpAutoProxySvc - ok

15:49:04.0434 0x18a0  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

15:49:04.0490 0x18a0  Winmgmt - ok

15:49:04.0531 0x18a0  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll

15:49:04.0593 0x18a0  WinRM - ok

15:49:04.0621 0x18a0  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

15:49:04.0645 0x18a0  WinUsb - ok

15:49:04.0676 0x18a0  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll

15:49:04.0699 0x18a0  Wlansvc - ok

15:49:04.0719 0x18a0  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

15:49:04.0728 0x18a0  WmiAcpi - ok

15:49:04.0756 0x18a0  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

15:49:04.0779 0x18a0  wmiApSrv - ok

15:49:04.0802 0x18a0  WMPNetworkSvc - ok

15:49:04.0814 0x18a0  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

15:49:04.0848 0x18a0  WPCSvc - ok

15:49:04.0869 0x18a0  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

15:49:04.0881 0x18a0  WPDBusEnum - ok

15:49:04.0899 0x18a0  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

15:49:04.0938 0x18a0  ws2ifsl - ok

15:49:04.0958 0x18a0  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll

15:49:04.0986 0x18a0  wscsvc - ok

15:49:04.0989 0x18a0  WSearch - ok

15:49:05.0056 0x18a0  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

15:49:05.0085 0x18a0  wuauserv - ok

15:49:05.0111 0x18a0  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

15:49:05.0164 0x18a0  WudfPf - ok

15:49:05.0186 0x18a0  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

15:49:05.0196 0x18a0  WUDFRd - ok

15:49:05.0219 0x18a0  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

15:49:05.0242 0x18a0  wudfsvc - ok

15:49:05.0265 0x18a0  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll

15:49:05.0302 0x18a0  WwanSvc - ok

15:49:05.0321 0x18a0  ================ Scan global 

===============================

15:49:05.0343 0x18a0  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

15:49:05.0376 0x18a0  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

15:49:05.0393 0x18a0  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

15:49:05.0425 0x18a0  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

15:49:05.0459 0x18a0  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

15:49:05.0463 0x18a0  [Global] - ok

15:49:05.0463 0x18a0  ================ Scan MBR ==================================

15:49:05.0468 0x18a0  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

15:49:05.0799 0x18a0  \Device\Harddisk0\DR0 - ok

15:49:05.0826 0x18a0  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1

15:49:05.0895 0x18a0  \Device\Harddisk1\DR1 - ok

15:49:05.0903 0x18a0  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk2\DR2

15:49:06.0384 0x18a0  \Device\Harddisk2\DR2 - ok

15:49:06.0390 0x18a0  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk4\DR4

15:49:06.0778 0x18a0  \Device\Harddisk4\DR4 - ok

15:49:06.0779 0x18a0  ================ Scan VBR ==================================

15:49:06.0786 0x18a0  [ 6F69E5D8684287108C89046EBFCDDCFB ] \Device\Harddisk0\DR0\Partition1

15:49:06.0789 0x18a0  \Device\Harddisk0\DR0\Partition1 - ok

15:49:06.0798 0x18a0  [ 6905A7941A427EBBF4462515BF494A81 ] \Device\Harddisk1\DR1\Partition1

15:49:06.0801 0x18a0  \Device\Harddisk1\DR1\Partition1 - ok

15:49:06.0811 0x18a0  [ D59DC1BC55FFC27F7ECA062B5AD6F2E5 ] \Device\Harddisk2\DR2\Partition1

15:49:06.0814 0x18a0  \Device\Harddisk2\DR2\Partition1 - ok

15:49:06.0825 0x18a0  [ 287E60CEA469BCE4FCC533189F1C84A0 ] \Device\Harddisk4\DR4\Partition1

15:49:06.0826 0x18a0  \Device\Harddisk4\DR4\Partition1 - ok

15:49:06.0827 0x18a0  ============================================================

15:49:06.0827 0x18a0  Scan finished

15:49:06.0827 0x18a0  ============================================================

15:49:06.0835 0x13f4  Detected object count: 10

15:49:06.0835 0x13f4  Actual detected object count: 10

15:54:32.0157 0x13f4  Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0157 0x13f4  Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0159 0x13f4  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0159 0x13f4  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0162 0x13f4  hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0162 0x13f4  hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0164 0x13f4  hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0164 0x13f4  hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0166 0x13f4  HPSLPSVC ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0167 0x13f4  HPSLPSVC ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0169 0x13f4  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0169 0x13f4  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0171 0x13f4  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0171 0x13f4  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0173 0x13f4  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0173 0x13f4  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0175 0x13f4  RTTEAMPT ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0175 0x13f4  RTTEAMPT ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:32.0176 0x13f4  TEAM ( UnsignedFile.Multi.Generic ) - skipped by user

15:54:32.0176 0x13f4  TEAM ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:54:39.0422 0x119c  Deinitialize success

schrauber

05.09.2013 07:58

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

mk72	05.09.2013 15:39

Hallo,
habe das Programm durchlaufen lassen. Ich finde es nur seltsam und nicht unbedingt in Ordnung, das das Tool meine ganzen Desktop-Apps und diverse Progammeinstellungen, z. B. des Win-Explorers(u.a. die Classic Shell Anzeige und der gleichen) einfach entfernt hat. Ich hoffe, es schadet der weiteren Fehlersuche nicht, wenn ich mir das alles wieder so einrichte, das ich wieder komfortabel arbeiten kann.

Code:

ComboFix 13-09-04.04 - Marko 05.09.2013  15:27:54.1.6 - x64

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.8189.6057 [GMT 2:00]

ausgeführt von:: c:\users\Marko\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\ntuser.dat

c:\users\Marko\AppData\Local\assembly\tmp

c:\users\Marko\AppData\Local\Microsoft\Windows\Temporary Internet Files\{8E9890CE-DA01-4D2A-9207-D8ABBD388A84}.xps

c:\users\Marko\AppData\Roaming\CoreXPSP.dll

c:\users\Marko\AppData\Roaming\XnView

c:\users\Marko\AppData\Roaming\XnView\iptc.def

c:\windows\wininit.ini

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-08-05 bis 2013-09-05  ))))))))))))))))))))))))))))))

.

.

2013-09-05 13:37 . 2013-09-05 13:38        --------        d-----w-        c:\users\_ocster_backup_\AppData\Local\temp

2013-09-05 13:37 . 2013-09-05 13:37        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-09-04 12:22 . 2013-09-04 12:22        --------        d-----w-        C:\FRST

2013-08-28 14:21 . 2013-08-28 14:21        --------        d-----w-        c:\users\Marko\AppData\Roaming\Avira

2013-08-28 14:18 . 2013-09-04 09:36        81112        ----a-w-        c:\windows\system32\drivers\avnetflt.sys

2013-08-28 14:17 . 2013-09-04 09:36        132088        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2013-08-28 14:17 . 2013-09-04 09:36        105344        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2013-08-28 14:17 . 2013-08-28 14:17        --------        d-----w-        c:\programdata\Avira

2013-08-28 14:17 . 2013-03-06 14:13        28600        ----a-w-        c:\windows\system32\drivers\avkmgr.sys

2013-08-27 11:32 . 2013-08-06 08:58        9515512        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{A4F27BEE-B845-4887-8581-DEE8894A717A}\mpengine.dll

2013-08-25 16:15 . 2013-08-27 20:03        --------        d-----w-        c:\users\Marko\AppData\Local\BewerbungsMaster

2013-08-25 16:07 . 2013-08-25 16:14        335872        ------w-        c:\windows\Setup1.exe

2013-08-25 16:07 . 2013-08-25 16:14        74752        ----a-w-        c:\windows\ST6UNST.EXE

2013-08-22 13:01 . 2013-08-22 13:01        --------        d-----w-        c:\users\Marko\AppData\Roaming\dvdcss

2013-08-22 12:58 . 2013-08-22 12:58        --------        d-----w-        c:\users\Marko\AppData\Roaming\Broad Intelligence

2013-08-19 12:10 . 2013-08-25 19:41        --------        d-----w-        c:\users\Marko\MEDION NAS TOOL

2013-08-19 12:00 . 2013-08-19 12:00        --------        d-----w-        c:\users\Marko\AppData\Roaming\Memeo

2013-08-19 12:00 . 2013-08-19 12:00        --------        d-----w-        c:\program files (x86)\Common Files\Memeo

2013-08-19 12:00 . 2013-08-19 12:00        --------        d-----w-        c:\program files (x86)\Memeo

2013-08-14 20:27 . 2013-07-26 06:23        775256        ----a-w-        c:\program files\Internet Explorer\iexplore.exe

2013-08-14 20:17 . 2013-07-09 05:03        3968960        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-08-14 20:26 . 2013-02-03 14:57        564432        ----a-w-        c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe

2013-08-14 20:18 . 2011-12-06 12:35        78161360        ----a-w-        c:\windows\system32\MRT.exe

2013-07-29 12:31 . 2013-07-29 12:31        45856        ----a-w-        c:\windows\system32\drivers\avgtpx64.sys

2013-07-10 10:34 . 2012-04-02 09:46        692104        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-07-10 10:34 . 2011-12-05 20:08        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-07-09 04:45 . 2013-08-14 20:17        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2013-06-24 14:22 . 2013-03-05 16:02        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-06-24 14:22 . 2012-06-27 17:22        867240        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll

2013-06-24 14:22 . 2011-12-12 10:56        789416        ----a-w-        c:\windows\SysWow64\deployJava1.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

2013-02-03 15:06        220632        ----a-w-        c:\users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

2013-02-03 15:06        220632        ----a-w-        c:\users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

2013-02-03 15:06        220632        ----a-w-        c:\users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]

@="{594D4122-1F87-41E2-96C7-825FB4796516}"

[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]

2013-06-29 08:49        594432        ----a-w-        e:\programme\Classic Shell\ClassicExplorer32.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DeskDriveStartup"="e:\programme\Blue Onion Software\Desk Drive\DeskDrive.exe" [2009-12-06 66048]

"BrowserMask"="e:\programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe" [2011-06-21 101280]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]

"AmazonMP3DownloaderHelper"="c:\users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe" [2013-05-22 400704]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]

"DivXMediaServer"="e:\programme\DivX\DivX Media Server\DivXMediaServer.exe" [2013-05-20 450560]

"vspdfprsrv.exe"="e:\programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe" [2012-04-23 6082560]

"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-09-16 115048]

"StartCCC"="c:\ati\ATI.ACE\Core-Static\CLIStart.exe" [2012-08-06 642216]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-02-13 1263952]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]

"Memeo Instant Backup"="c:\program files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe" [2011-09-15 136416]

"avgnt"="e:\programme\Antivir\Avira\AntiVir Desktop\avgnt.exe" [2013-09-04 347192]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]

.

c:\users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

An OneNote senden.lnk - c:\program files\Microsoft Office 15\root\office15\ONENOTEM.EXE /tsr [2013-8-14 158896]

Mediencenter.lnk - c:\users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe [2013-8-22 557376]

Rainmeter.lnk - e:\programme\Rainmeter\Rainmeter.exe [2012-11-4 41160]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

FileBox eXtender.lnk - e:\programme\FileBX\FileBX.exe [2011-2-23 614400]

MadAppLauncher.lnk - e:\programme\MadAppLauncher\MadAppLauncher.exe [2012-5-22 483328]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 0 (0x0)

"NoFileAssociate"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="userinit.exe"

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux3"=wdmaud.drv

.

R2 AODDriver4.01;AODDriver4.01;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]

R3 atillk64;atillk64;c:\program files (x86)\AMD\System Monitor\atillk64.sys;c:\program files (x86)\AMD\System Monitor\atillk64.sys [x]

R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe;c:\program files\CyberGhost VPN\CGVPNCliService.exe [x]

R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]

R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]

R3 GigasetGenericUSB_x64;GigasetGenericUSB_x64;c:\windows\system32\DRIVERS\GigasetGenericUSB_x64.sys;c:\windows\SYSNATIVE\DRIVERS\GigasetGenericUSB_x64.sys [x]

R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

R3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0);c:\windows\system32\DRIVERS\RtTeam60.sys;c:\windows\SYSNATIVE\DRIVERS\RtTeam60.sys [x]

R3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtVlan60.sys;c:\windows\SYSNATIVE\DRIVERS\RtVlan60.sys [x]

R3 SandraAgentSrv;SiSoftware Deployment Agent Service;e:\programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe;e:\programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe [x]

R3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.0);c:\windows\system32\DRIVERS\RtTeam60.sys;c:\windows\SYSNATIVE\DRIVERS\RtTeam60.sys [x]

R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

R4 AntiVirWebService;Avira Browser-Schutz;e:\programme\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE;e:\programme\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]

R4 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [x]

R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]

R4 vToolbarUpdater15.4.0;vToolbarUpdater15.4.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [x]

S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]

S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]

S0 hotcore3;hc3ServiceName;c:\windows\system32\DRIVERS\hotcore3.sys;c:\windows\SYSNATIVE\DRIVERS\hotcore3.sys [x]

S0 oodrvled;oodrvled;c:\windows\system32\DRIVERS\oodrvled.sys;c:\windows\SYSNATIVE\DRIVERS\oodrvled.sys [x]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]

S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x]

S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

S1 Uim_VIM;UIM Virtual Image Plugin;c:\windows\system32\Drivers\uim_vimx64.sys;c:\windows\SYSNATIVE\Drivers\uim_vimx64.sys [x]

S2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11;e:\programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe;e:\programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 AMD FUEL Service;AMD FUEL Service;c:\ati\ATI.ACE\Fuel\Fuel.Service.exe;c:\ati\ATI.ACE\Fuel\Fuel.Service.exe [x]

S2 AntiVirSchedulerService;Avira Planer;e:\programme\Antivir\Avira\AntiVir Desktop\sched.exe;e:\programme\Antivir\Avira\AntiVir Desktop\sched.exe [x]

S2 AODDriver4.1;AODDriver4.1;c:\ati\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\ati\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys;c:\windows\SYSNATIVE\drivers\cpuz135_x64.sys [x]

S2 DfSdkS;Defragmentation-Service;e:\programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe;e:\programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [x]

S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]

S2 MCSWASVR;Mediencenter Service;e:\programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe;e:\programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe [x]

S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [x]

S2 ocster_backup;Ocster Backup;e:\programme\Ocster Backup\bin\backupService-ox.exe;e:\programme\Ocster Backup\bin\backupService-ox.exe [x]

S2 OfficeSvc;Microsoft Office-Dienst;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe [x]

S2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\DRIVERS\RtNdPt60.sys;c:\windows\SYSNATIVE\DRIVERS\RtNdPt60.sys [x]

S2 TomTomHOMEService;TomTomHOMEService;e:\programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe;e:\programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe [x]

S2 Update-Service;Update-Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]

S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]

S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys;c:\windows\SYSNATIVE\DRIVERS\LEqdUsb.Sys [x]

S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys;c:\windows\SYSNATIVE\DRIVERS\LHidEqd.Sys [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]

S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

hpdevmgmt        REG_MULTI_SZ           hpqcxs08 hpqddsvc

Update-Service-Installer-Service        REG_MULTI_SZ           Update-Service-Installer-Service

Update-Service        REG_MULTI_SZ           Update-Service

.

Inhalt des "geplante Tasks" Ordners

.

2013-09-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-21 14:30]

.

2013-09-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-21 14:30]

.

2013-09-05 c:\windows\Tasks\HP Photo Creations Communicator.job

- c:\programdata\HP Photo Creations\Communicator.exe [2011-08-23 09:11]

.

2013-08-23 c:\windows\Tasks\One-Click Optimizer.job

- e:\programme\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-07-29 13:22]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

2013-02-03 15:06        244696        ----a-w-        c:\users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

2013-02-03 15:06        244696        ----a-w-        c:\users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

2013-02-03 15:06        244696        ----a-w-        c:\users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2013-08-14 20:28        2328776        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2013-08-14 20:28        2328776        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2013-08-14 20:28        2328776        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\01Mediencenter_InSync]

@="{77BC4082-DB5F-439A-8DC8-F9E24A63B0DE}"

"ReferenceCount"=dword:00000001

[HKEY_CLASSES_ROOT\CLSID\{77BC4082-DB5F-439A-8DC8-F9E24A63B0DE}]

2013-04-04 08:22        558592        ----a-w-        c:\users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\02Mediencenter_ToSync]

@="{528EE335-5034-4EFC-834E-63E5F02D2BC2}"

"ReferenceCount"=dword:00000001

[HKEY_CLASSES_ROOT\CLSID\{528EE335-5034-4EFC-834E-63E5F02D2BC2}]

2013-04-04 08:22        558592        ----a-w-        c:\users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\03Mediencenter_Failed]

@="{6066ADF0-9EB0-43E5-ADB6-990F5A3B979C}"

"ReferenceCount"=dword:00000001

[HKEY_CLASSES_ROOT\CLSID\{6066ADF0-9EB0-43E5-ADB6-990F5A3B979C}]

2013-04-04 08:22        558592        ----a-w-        c:\users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]

@="{594D4122-1F87-41E2-96C7-825FB4796516}"

[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]

2013-06-29 08:50        724992        ----a-w-        e:\programme\Classic Shell\ClassicExplorer64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]

"LogiScrollApp"="c:\program files\Logitech\FlowScroll\KhalScroll.exe" [2012-02-08 166680]

"EvtMgr6"="e:\programme\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2000-01-01 12503184]

"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]

"Ocster Backup"="e:\programme\Ocster Backup\bin\backupClient-ox.exe" [2013-07-02 312488]

"Classic Start Menu"="e:\programme\Classic Shell\ClassicStartMenu.exe" [2013-06-29 151552]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.jan-records.de/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = fritz.box;192.168.178.1

IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000

IE: Nach Microsoft &Excel exportieren - e:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000

IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105

LSP: e:\programme\Antivir\Avira\AntiVir Desktop\avsda.dll

TCP: DhcpNameServer = 192.168.178.1

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.4.0\ViProtocol.dll

FF - ProfilePath - c:\users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\s0d1rked.default\

FF - ExtSQL: 2013-07-10 11:09; {9AA46F4F-4DC7-4c06-97AF-5035170634FE}; c:\users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\s0d1rked.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi

FF - ExtSQL: !HIDDEN! 2012-09-14 09:48; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF - user.js: browser.blink_allowed - true

FF - user.js: network.prefetch-next - true

FF - user.js: nglayout.initialpaint.delay - 250

FF - user.js: layout.spellcheckDefault - 1

FF - user.js: browser.urlbar.autoFill - false

FF - user.js: browser.search.openintab - false

FF - user.js: browser.tabs.closeButtons - 1

FF - user.js: browser.tabs.opentabfor.middleclick - true

FF - user.js: browser.tabs.tabMinWidth - 100

FF - user.js: browser.urlbar.hideGoButton - false

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

BHO-{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)

Toolbar-{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)

Wow6432Node-HKLM-Run-<NO NAME> - (no file)

Wow6432Node-HKLM-Run-NPSStartup - (no file)

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

AddRemove-FileBox eXtender - c:\programdata\{7A94EF79-C34B-444E-BECC-25AB7D77AA78}\Fbx64Setup.exe

AddRemove-FileZilla Client - e:\programme\FileZilla FTP Client\uninstall.exe

AddRemove-{23236FC2-648D-4ACF-AD16-68492D0F0AC9} - c:\programdata\{7A94EF79-C34B-444E-BECC-25AB7D77AA78}\Fbx64Setup.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ú**]

"7040110900063D11C8EF10054038389C"="C?\\Windows\\SysWOW64\\FM20ENU.DLL"

.

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]

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

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

e:\programme\Antivir\Avira\AntiVir Desktop\avguard.exe

e:\programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-09-05  15:51:40 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2013-09-05 13:51

.

Vor Suchlauf: 13 Verzeichnis(se), 26.302.726.144 Bytes frei

Nach Suchlauf: 19 Verzeichnis(se), 28.501.110.784 Bytes frei

.

- - End Of File - - C2D750BBB615B4C7590699A8C2B3143A

A36C5E4F47E84449FF07ED3517B43A31

schrauber

05.09.2013 20:04

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

mk72	06.09.2013 11:52

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.09.06.04
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16660

Marko :: KOBOLT [Administrator]
 

06.09.2013 11:12:55

mbam-log-2013-09-06 (11-12-55).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 275721

Laufzeit: 5 Minute(n), 21 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Code:

# AdwCleaner v3.002 - Bericht erstellt am 06/09/2013 um 11:44:46

# Updated 01/09/2013 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzername : Marko - KOBOLT

# Gestartet von : C:\Users\Marko\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Program Files (x86)\Red Sky

Ordner Gelöscht : C:\Program Files (x86)\Common Files\AVG Secure Search

Ordner Gelöscht : C:\Users\Marko\IECompatCache

Ordner Gelöscht : C:\Users\Marko\AppData\Local\AVG Secure Search

Ordner Gelöscht : C:\Users\Marko\AppData\Local\DownTango

Ordner Gelöscht : C:\Users\Marko\AppData\LocalLow\AVG Secure Search

Ordner Gelöscht : C:\Users\Marko\AppData\LocalLow\boost_interprocess

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\s0d1rked.default\user.js
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Schlüssel Gelöscht : HKCU\Software\AVG Secure Search

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
 

***** [ Browser ] *****
 

-\\ Internet Explorer v10.0.9200.16660
 
 

-\\ Mozilla Firefox v18.0.1 (de)
 

[ Datei : C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\s0d1rked.default\prefs.js ]
 
 

*************************
 

AdwCleaner[R0].txt - [6066 octets] - [06/09/2013 11:32:20]

AdwCleaner[S0].txt - [5825 octets] - [06/09/2013 11:44:46]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5885 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 5.5.8 (09.05.2013:1)

OS: Windows 7 Professional x64

Ran by Marko on 06.09.2013 at 12:18:11,19

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 06.09.2013 at 12:22:55,27

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-09-2013

Ran by Marko (administrator) on KOBOLT on 06-09-2013 12:44:41

Running from C:\Users\Marko\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avshadow.exe

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe

(Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe

(mst software GmbH, Germany) E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Deutsche Telekom AG) E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe

(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

(StarWind Software) e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Logitech, Inc.) C:\Program Files\Logitech\FlowScroll\KhalScroll.exe

(Logitech, Inc.) E:\Programme\Logitech\SetPointP\SetPoint.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE

() E:\Programme\Ocster Backup\bin\backupClient-ox.exe

(IvoSoft) E:\Programme\Classic Shell\ClassicStartMenu.exe

(Blue Onion Software) E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

() C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

(Hyperionics Technology LLC) E:\Programme\FileBX\FileBX.exe

() E:\Programme\MadAppLauncher\MadAppLauncher.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE

(Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe

() E:\Programme\Rainmeter\Rainmeter.exe

() e:\Programme\Ocster Backup\bin\oxHelper.exe

(Visagesoft) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe

() E:\Programme\FileBX\Fbx32helper.exe

(Adobe Systems Incorporated) E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

() C:\Program Files (x86)\Memeo\AutoBackup\InstantBackup.exe

(Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\MemeoUpdater.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

() e:\Programme\Ocster Backup\bin\backupService-ox.exe

() e:\Programme\Ocster Backup\bin\oxHelper.exe

(TomTom) E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe

(Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)

HKLM\...\Run: [LogiScrollApp] - C:\Program Files\Logitech\FlowScroll\KhalScroll.exe [166680 2012-02-08] (Logitech, Inc.)

HKLM\...\Run: [EvtMgr6] - E:\Programme\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)

HKLM\...\Run: [Ocster Backup] - E:\Programme\Ocster Backup\bin\backupClient-ox.exe [312488 2013-07-02] ()

HKLM\...\Run: [Classic Start Menu] - E:\Programme\Classic Shell\ClassicStartMenu.exe [151552 2013-06-29] (IvoSoft)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKLM\...\Policies\Explorer: [NoDriveTypeAutoRun] 60

HKLM\...\Policies\Explorer: [NoDrives] 0

HKCU\...\Run: [DeskDriveStartup] - E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe [66048 2009-12-06] (Blue Onion Software)

HKCU\...\Run: [BrowserMask] - E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe [101280 2011-06-21] (Microsoft)

HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKCU\...\Policies\Explorer: [NoCDBurning] 0

HKCU\...\Policies\Explorer: [NoDrives] 0

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-01-31] ()

HKLM-x32\...\Run: [DivXMediaServer] - e:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)

HKLM-x32\...\Run: [vspdfprsrv.exe] - e:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe [6082560 2012-04-23] (Visagesoft)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [StartCCC] - C:\ATI\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Memeo Instant Backup] - C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2011-09-16] (Memeo Inc.)

HKLM-x32\...\Run: [avgnt] - E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FileBox eXtender.lnk

ShortcutTarget: FileBox eXtender.lnk -> E:\Programme\FileBX\FileBX.exe (Hyperionics Technology LLC)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MadAppLauncher.lnk

ShortcutTarget: MadAppLauncher.lnk -> E:\Programme\MadAppLauncher\MadAppLauncher.exe ()

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk

ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk

ShortcutTarget: Mediencenter.lnk -> C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk

ShortcutTarget: Rainmeter.lnk -> E:\Programme\Rainmeter\Rainmeter.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.jan-records.de/

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {B8043587-EBE9-4754-9E02-4BD5899FE7BA} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=971163&p={searchTerms}

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll (Logitech, Inc.)

BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - e:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programme\Java\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Programme\Java\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll (Logitech, Inc.)

BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Winsock: Catalog9 01 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 20 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 01 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 02 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 03 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 04 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 05 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 06 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 07 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 08 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 20 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Path=C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-812850846-3816870413-364722810-1001\FireFox

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()

FF Plugin-x32: @canon.com/MycameraPlugin - E:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)

FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - e:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - e:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - E:\Programme\Java\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}] C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt

FF Extension: Logitech Flow Scroll - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt

FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF StartMenuInternet: FIREFOX.EXE - e:\Programme\Mozilla Firefox\firefox.exe
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-07-17] (Adobe Systems)

R2 AdobeActiveFileMonitor11.0; E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)

R2 AMD FUEL Service; C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.)

R2 AntiVirSchedulerService; E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; E:\Programme\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()

S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)

R2 DfSdkS; E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)

S2 LanmanWorkstation; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation)

R2 MCSWASVR; E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe [12800 2011-11-23] (Deutsche Telekom AG)

S4 Nero BackItUp Scheduler 3; E:\Programme\Nero\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)

S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)

R2 ocster_backup; e:\Programme\Ocster Backup\bin\backupService-ox.exe [23720 2013-07-02] ()

R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)

S3 SandraAgentSrv; E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe [68760 2008-09-05] (SiSoftware)

R2 StarWindServiceAE; e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)

R2 TomTomHOMEService; E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe [92632 2012-08-28] (TomTom)

S4 McComponentHostService; "C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe" [x]

R2 Update-Service; %SystemRoot%\System32\UpdSvc.dll [x]

S4 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 AODDriver4.1; C:\ATI\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)

R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)

S3 etdrv; C:\Windows\etdrv.sys [25640 2012-02-01] (Windows (R) Server 2003 DDK provider)

S3 etdrv; C:\Windows\etdrv.sys [25640 2012-02-01] (Windows (R) Server 2003 DDK provider)

S3 gdrv; C:\Windows\gdrv.sys [25640 2012-10-09] (Windows (R) Server 2003 DDK provider)

S3 gdrv; C:\Windows\gdrv.sys [25640 2012-10-09] (Windows (R) Server 2003 DDK provider)

S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG)

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-02-01] ()

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-02-01] ()

R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39728 2011-11-04] (Paragon Software Group)

R0 oodrvled; C:\Windows\System32\DRIVERS\oodrvled.sys [30800 2011-03-02] (O&O Software GmbH)

R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)

S3 SANDRA; E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\Sandra.sys [23112 2009-08-08] (SiSoftware)

S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-11-07] (Duplex Secure Ltd.)

R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-04] (Windows (R) 2000 DDK provider)

R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-04] (Paragon)

R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-04] (Paragon)

S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [x]

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S0 TPkd; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-06 12:18 - 2013-09-06 12:18 - 00000000 ____D C:\Windows\ERUNT

2013-09-06 11:32 - 2013-09-06 11:44 - 00000000 ____D C:\AdwCleaner

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-06 11:00 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-06 10:59 - 2013-09-06 10:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Marko\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-05 15:26 - 2013-09-05 15:52 - 00000000 ____D C:\Qoobox

2013-09-05 15:26 - 2013-09-05 15:48 - 00000000 ____D C:\Windows\erdnt

2013-09-05 15:26 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2013-09-05 15:26 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2013-09-05 15:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2013-09-05 15:22 - 2013-09-06 12:37 - 00000000 ____D C:\Users\Marko\Desktop\Trojaner-Board

2013-09-04 14:43 - 2013-09-04 14:43 - 00276496 _____ C:\Windows\Minidump\090413-21590-01.dmp

2013-09-04 14:22 - 2013-09-04 14:22 - 00000000 ____D C:\FRST

2013-09-04 14:08 - 2013-09-04 14:08 - 00000344 _____ C:\Users\Marko\defogger_reenable

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(3).exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(2).exe

2013-09-04 13:51 - 2013-09-04 13:51 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(1).exe

2013-09-02 17:15 - 2013-09-02 17:15 - 00000787 _____ C:\Users\Marko\Desktop\DivX Movies.lnk

2013-09-02 17:15 - 2013-09-02 17:15 - 00000754 _____ C:\Users\Public\Desktop\DivX Plus Player.lnk

2013-08-29 08:59 - 2013-08-29 08:59 - 05192704 _____ (Geza Kovacs) C:\Users\Marko\Downloads\unetbootin-windows-585.exe

2013-08-29 08:53 - 2013-08-29 08:53 - 00000000 ____D C:\Users\Marko\Desktop\Hausbau

2013-08-28 19:23 - 2013-08-28 19:23 - 616382464 _____ C:\Users\Marko\Downloads\rescue-system.iso

2013-08-28 16:21 - 2013-08-28 16:21 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Avira

2013-08-28 16:18 - 2013-09-04 11:36 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-08-28 16:17 - 2013-09-04 11:36 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-08-28 16:17 - 2013-09-04 11:36 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-28 16:17 - 2013-08-28 16:17 - 00000000 ____D C:\ProgramData\Avira

2013-08-28 16:17 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-08-28 15:58 - 2013-08-28 15:59 - 110344048 _____ C:\Users\Marko\Downloads\avira_free4045_antivirus_de.exe

2013-08-28 15:46 - 2013-08-28 15:46 - 02733958 _____ C:\Users\Marko\Downloads\tdsskiller.zip

2013-08-28 15:40 - 2013-08-28 15:40 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck.exe

2013-08-27 13:39 - 2013-09-05 15:39 - 00096166 _____ C:\Windows\PFRO.log

2013-08-26 14:38 - 2013-08-26 15:04 - 00000000 ____D C:\Users\Marko\Desktop\Kaspersky

2013-08-25 18:15 - 2013-08-27 22:03 - 00000000 ____D C:\Users\Marko\AppData\Local\BewerbungsMaster

2013-08-25 18:14 - 2013-08-27 23:00 - 00000000 ____D C:\Users\Marko\Documents\BewerbungsMaster

2013-08-25 18:13 - 2013-08-25 18:13 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2013-08-25 18:07 - 2013-08-25 18:14 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2013-08-25 18:07 - 2013-08-25 18:14 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2013-08-25 18:06 - 2013-08-25 18:06 - 11616256 _____ C:\Users\Marko\Downloads\master71.exe

2013-08-25 17:23 - 2013-09-02 17:00 - 00000000 ____D C:\Users\Marko\Desktop\Nick_Ausbildung

2013-08-24 11:32 - 2013-09-06 12:02 - 00002027 _____ C:\Windows\setupact.log

2013-08-24 11:32 - 2013-08-24 11:32 - 00000000 _____ C:\Windows\setuperr.log

2013-08-22 15:01 - 2013-08-22 15:01 - 00000000 ____D C:\Users\Marko\AppData\Roaming\dvdcss

2013-08-22 14:58 - 2013-08-22 14:58 - 00000687 _____ C:\Users\Marko\Desktop\MediaCoder x64.lnk

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Broad Intelligence

2013-08-22 14:55 - 2013-08-22 14:57 - 68913986 _____ C:\Users\Marko\Downloads\MediaCoder-x64-0.8.25.5553.exe

2013-08-19 14:10 - 2013-08-25 21:41 - 00000000 ____D C:\Users\Marko\MEDION NAS TOOL

2013-08-19 14:00 - 2013-08-19 14:00 - 00001168 _____ C:\Users\Public\Desktop\Memeo Instant Backup.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000954 _____ C:\Users\Public\Desktop\MEDION NAS TOOL.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Memeo

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Program Files (x86)\Memeo

2013-08-18 13:50 - 2013-08-18 13:50 - 02899663 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.cab

2013-08-18 13:50 - 2013-08-18 13:50 - 02427392 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.exe

2013-08-15 11:34 - 2013-08-28 15:47 - 00000000 ____D C:\Users\Marko\Downloads\tdsskiller

2013-08-14 22:28 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-08-14 22:28 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-08-14 22:28 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-08-14 22:28 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-08-14 22:28 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-08-14 22:28 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-08-14 22:28 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-08-14 22:28 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-08-14 22:28 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-08-14 22:28 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-08-14 22:28 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-08-14 22:28 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-08-14 22:28 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-08-14 22:28 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-08-14 22:28 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-08-14 22:27 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-08-14 22:27 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-08-14 22:27 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-08-14 22:27 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-08-14 22:27 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-08-14 22:27 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-08-14 22:27 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-08-14 22:24 - 2013-08-14 22:24 - 02224290 _____ C:\Users\Marko\Downloads\tdsskiller.rar

2013-08-14 22:23 - 2013-08-14 22:26 - 176212264 _____ (Kaspersky Lab) C:\Users\Marko\Downloads\kis13.0.1.4190de-de(2).exe

2013-08-14 22:22 - 2013-08-14 22:25 - 181393840 _____ C:\Users\Marko\Downloads\setup_11.0.0.1245.x01_2013_08_14_23_13.exe

2013-08-14 22:17 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-08-14 22:17 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-08-14 22:17 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-08-14 22:17 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-08-14 22:17 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-08-14 22:17 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-08-14 22:17 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-08-14 22:17 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-08-14 22:17 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-08-14 22:17 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-08-14 22:17 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-08-14 22:17 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-08-14 22:17 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-08-14 22:17 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-08-14 22:17 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-08-14 22:17 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-08-14 22:17 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-08-14 22:17 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-08-14 22:17 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-08-14 22:17 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-08-14 22:17 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-08-14 22:17 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-08-14 22:17 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-08-14 22:17 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-08-14 22:17 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-08-14 22:17 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-08-14 22:17 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-08-13 15:34 - 2013-08-13 15:34 - 09143640 _____ (Abelssoft                                                   ) C:\Users\Marko\Downloads\6773_2_ABS_2014_CB.exe

2013-08-13 15:31 - 2013-08-13 15:32 - 21991048 _____ (abylonsoft                                                  ) C:\Users\Marko\Downloads\6219_2_Cryptdrive_CB.exe

2013-08-09 15:16 - 2013-08-09 15:16 - 03128152 _____ C:\Users\Marko\Downloads\org.geometerplus.zlibrary.ui.android_106042.apk

2013-08-09 15:16 - 2013-08-09 15:16 - 00230586 _____ C:\Users\Marko\Downloads\org.fdroid.fdroid_40.apk

2013-08-09 15:15 - 2013-08-09 15:15 - 06113402 _____ C:\Users\Marko\Downloads\mapfactor_navigator_0_12_x.apk
 

==================== One Month Modified Files and Folders =======
 

2013-09-06 12:37 - 2013-09-06 12:37 - 01948360 _____ (Farbar) C:\Users\Marko\Desktop\FRST64.exe

2013-09-06 12:37 - 2013-09-05 15:22 - 00000000 ____D C:\Users\Marko\Desktop\Trojaner-Board

2013-09-06 12:18 - 2013-09-06 12:18 - 00000000 ____D C:\Windows\ERUNT

2013-09-06 12:17 - 2012-09-14 10:49 - 00000338 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job

2013-09-06 12:15 - 2012-03-21 16:30 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-06 12:12 - 2009-07-14 06:45 - 00015856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-06 12:12 - 2009-07-14 06:45 - 00015856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-06 12:03 - 2012-03-21 16:30 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-06 12:02 - 2013-08-24 11:32 - 00002027 _____ C:\Windows\setupact.log

2013-09-06 12:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-06 12:01 - 2012-01-16 23:34 - 01355586 _____ C:\Windows\WindowsUpdate.log

2013-09-06 11:44 - 2013-09-06 11:32 - 00000000 ____D C:\AdwCleaner

2013-09-06 11:44 - 2011-12-05 17:51 - 00000000 ____D C:\Users\Marko

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-06 10:59 - 2013-09-06 10:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Marko\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-05 17:01 - 2012-03-29 22:15 - 00071363 _____ C:\Windows\system32\log.xml

2013-09-05 17:01 - 2012-03-29 22:15 - 00000008 _____ C:\Windows\system32\log-suffix.xml

2013-09-05 16:46 - 2012-04-26 22:27 - 00003234 _____ C:\Windows\System32\Tasks\SidebarExecute

2013-09-05 15:52 - 2013-09-05 15:26 - 00000000 ____D C:\Qoobox

2013-09-05 15:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2013-09-05 15:48 - 2013-09-05 15:26 - 00000000 ____D C:\Windows\erdnt

2013-09-05 15:40 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2013-09-05 15:39 - 2013-08-27 13:39 - 00096166 _____ C:\Windows\PFRO.log

2013-09-05 15:14 - 2012-08-03 17:25 - 00000000 ____D C:\Users\Marko\AppData\Local\Adobe

2013-09-04 14:43 - 2013-09-04 14:43 - 00276496 _____ C:\Windows\Minidump\090413-21590-01.dmp

2013-09-04 14:43 - 2012-04-19 20:27 - 00000000 ____D C:\Windows\Minidump

2013-09-04 14:22 - 2013-09-04 14:22 - 00000000 ____D C:\FRST

2013-09-04 14:08 - 2013-09-04 14:08 - 00000344 _____ C:\Users\Marko\defogger_reenable

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(3).exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(2).exe

2013-09-04 13:51 - 2013-09-04 13:51 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(1).exe

2013-09-04 11:36 - 2013-08-28 16:18 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-04 11:36 - 2013-08-28 16:17 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-04 11:36 - 2013-08-28 16:17 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-02 17:43 - 2012-04-04 12:07 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Mp3tag

2013-09-02 17:16 - 2012-03-19 17:27 - 00000000 ____D C:\Users\Marko\Desktop\Auto

2013-09-02 17:15 - 2013-09-02 17:15 - 00000787 _____ C:\Users\Marko\Desktop\DivX Movies.lnk

2013-09-02 17:15 - 2013-09-02 17:15 - 00000754 _____ C:\Users\Public\Desktop\DivX Plus Player.lnk

2013-09-02 17:15 - 2012-08-21 13:36 - 00000000 ____D C:\ProgramData\DivX

2013-09-02 17:00 - 2013-08-25 17:23 - 00000000 ____D C:\Users\Marko\Desktop\Nick_Ausbildung

2013-09-02 15:12 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-08-29 20:08 - 2011-12-05 17:51 - 00000000 ___RD C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-08-29 19:31 - 2009-07-14 19:58 - 00700370 _____ C:\Windows\system32\perfh007.dat

2013-08-29 19:31 - 2009-07-14 19:58 - 00149184 _____ C:\Windows\system32\perfc007.dat

2013-08-29 19:31 - 2009-07-14 07:13 - 01622098 _____ C:\Windows\system32\PerfStringBackup.INI

2013-08-29 17:02 - 2013-02-03 18:03 - 00000000 ____D C:\Users\Marko\AppData\Local\Microsoft Help

2013-08-29 16:39 - 2013-07-19 13:45 - 00000000 ____D C:\Users\Marko\AppData\Roaming\onOne Software

2013-08-29 08:59 - 2013-08-29 08:59 - 05192704 _____ (Geza Kovacs) C:\Users\Marko\Downloads\unetbootin-windows-585.exe

2013-08-29 08:53 - 2013-08-29 08:53 - 00000000 ____D C:\Users\Marko\Desktop\Hausbau

2013-08-28 19:23 - 2013-08-28 19:23 - 616382464 _____ C:\Users\Marko\Downloads\rescue-system.iso

2013-08-28 16:21 - 2013-08-28 16:21 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Avira

2013-08-28 16:17 - 2013-08-28 16:17 - 00000000 ____D C:\ProgramData\Avira

2013-08-28 15:59 - 2013-08-28 15:58 - 110344048 _____ C:\Users\Marko\Downloads\avira_free4045_antivirus_de.exe

2013-08-28 15:47 - 2013-08-15 11:34 - 00000000 ____D C:\Users\Marko\Downloads\tdsskiller

2013-08-28 15:46 - 2013-08-28 15:46 - 02733958 _____ C:\Users\Marko\Downloads\tdsskiller.zip

2013-08-28 15:40 - 2013-08-28 15:40 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck.exe

2013-08-27 23:00 - 2013-08-25 18:14 - 00000000 ____D C:\Users\Marko\Documents\BewerbungsMaster

2013-08-27 22:03 - 2013-08-25 18:15 - 00000000 ____D C:\Users\Marko\AppData\Local\BewerbungsMaster

2013-08-26 16:55 - 2012-03-23 11:34 - 00000000 ____D C:\ProgramData\firebird

2013-08-26 15:04 - 2013-08-26 14:38 - 00000000 ____D C:\Users\Marko\Desktop\Kaspersky

2013-08-26 14:53 - 2013-05-24 12:28 - 00002453 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk

2013-08-25 21:41 - 2013-08-19 14:10 - 00000000 ____D C:\Users\Marko\MEDION NAS TOOL

2013-08-25 18:14 - 2013-08-25 18:07 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2013-08-25 18:14 - 2013-08-25 18:07 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2013-08-25 18:13 - 2013-08-25 18:13 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2013-08-25 18:06 - 2013-08-25 18:06 - 11616256 _____ C:\Users\Marko\Downloads\master71.exe

2013-08-24 11:32 - 2013-08-24 11:32 - 00000000 _____ C:\Windows\setuperr.log

2013-08-23 20:20 - 2013-07-29 14:57 - 00000370 _____ C:\Windows\Tasks\One-Click Optimizer.job

2013-08-23 20:18 - 2011-12-05 17:31 - 00000000 ____D C:\Windows\Panther

2013-08-23 13:05 - 2013-04-21 20:07 - 00001147 _____ C:\Users\Marko\Desktop\Mediencenter.lnk

2013-08-23 13:05 - 2013-04-21 20:07 - 00001133 _____ C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk

2013-08-22 15:01 - 2013-08-22 15:01 - 00000000 ____D C:\Users\Marko\AppData\Roaming\dvdcss

2013-08-22 14:58 - 2013-08-22 14:58 - 00000687 _____ C:\Users\Marko\Desktop\MediaCoder x64.lnk

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Broad Intelligence

2013-08-22 14:57 - 2013-08-22 14:55 - 68913986 _____ C:\Users\Marko\Downloads\MediaCoder-x64-0.8.25.5553.exe

2013-08-22 14:33 - 2012-01-03 18:30 - 00018944 _____ C:\Users\Marko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-08-22 14:31 - 2012-08-21 13:39 - 00000000 ____D C:\Users\Marko\AppData\Roaming\DivX

2013-08-22 14:30 - 2012-02-28 17:45 - 00000124 _____ C:\Users\Marko\Documents\ax_files.xml

2013-08-21 12:09 - 2011-12-06 19:45 - 00000000 ____D C:\ProgramData\ashampoo

2013-08-19 14:00 - 2013-08-19 14:00 - 00001168 _____ C:\Users\Public\Desktop\Memeo Instant Backup.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000954 _____ C:\Users\Public\Desktop\MEDION NAS TOOL.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Memeo

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Program Files (x86)\Memeo

2013-08-18 13:50 - 2013-08-18 13:50 - 02899663 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.cab

2013-08-18 13:50 - 2013-08-18 13:50 - 02427392 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.exe

2013-08-15 14:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-08-15 11:42 - 2013-03-01 12:06 - 00000000 ____D C:\Program Files\Microsoft Office 15

2013-08-14 22:26 - 2013-08-14 22:23 - 176212264 _____ (Kaspersky Lab) C:\Users\Marko\Downloads\kis13.0.1.4190de-de(2).exe

2013-08-14 22:25 - 2013-08-14 22:22 - 181393840 _____ C:\Users\Marko\Downloads\setup_11.0.0.1245.x01_2013_08_14_23_13.exe

2013-08-14 22:24 - 2013-08-14 22:24 - 02224290 _____ C:\Users\Marko\Downloads\tdsskiller.rar

2013-08-14 22:24 - 2013-07-11 11:28 - 00000000 ____D C:\Windows\system32\MRT

2013-08-14 22:18 - 2011-12-06 14:35 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-13 15:34 - 2013-08-13 15:34 - 09143640 _____ (Abelssoft                                                   ) C:\Users\Marko\Downloads\6773_2_ABS_2014_CB.exe

2013-08-13 15:32 - 2013-08-13 15:31 - 21991048 _____ (abylonsoft                                                  ) C:\Users\Marko\Downloads\6219_2_Cryptdrive_CB.exe

2013-08-12 11:28 - 2013-07-10 10:20 - 00000000 ____D C:\Users\_ocster_backup_

2013-08-09 15:16 - 2013-08-09 15:16 - 03128152 _____ C:\Users\Marko\Downloads\org.geometerplus.zlibrary.ui.android_106042.apk

2013-08-09 15:16 - 2013-08-09 15:16 - 00230586 _____ C:\Users\Marko\Downloads\org.fdroid.fdroid_40.apk

2013-08-09 15:15 - 2013-08-09 15:15 - 06113402 _____ C:\Users\Marko\Downloads\mapfactor_navigator_0_12_x.apk
 

Files to move or delete:

====================

C:\Users\Marko\AppData\Local\Temp\Quarantine.exe

C:\Users\Marko\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-02 12:29
 

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber

06.09.2013 17:21

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

mk72	09.09.2013 21:53

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=3f04cb9835762d468f9925e0357fe8f3

# engine=15061

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-09-09 08:07:16

# local_time=2013-09-09 10:07:16 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=1799 16775165 100 94 33165 244180526 25951 0

# compatibility_mode=5893 16776573 100 94 291704 130387086 0 0

# scanned=367954

# found=1

# cleaned=0

# scan_time=23893

sh=70A06FA361E2579DFFE87487EB51647F32193D1F ft=1 fh=a37171a2ff105d8e vn="Win32/Adware.Yontoo application" ac=I fn="D:\Sicherung_von_C\Marko\Downloads\BestVideoDownloaderSetup-TurboUpgrade.exe"

Code:

 Results of screen317's Security Check version 0.99.72  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 10  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop   

 Antivirus up to date!  (On Access scanning disabled!) 
 `````````Anti-malware/Other Utilities Check:````````` 

 AntiBrowserSpy     

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 JavaFX 2.1.1    

 Java(TM) 6 Update 31  

 Java 7 Update 25  

 Adobe Flash Player 11.8.800.94  

 Mozilla Firefox 18.0.1 Firefox out of Date!  
 ````````Process Check: objlist.exe by Laurent````````  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Kannst du mir bitte noch mal den Link für die FRST.exe einstellen, ist mir irgendwie abhanden gekommen

schrauber

10.09.2013 08:24

Zitat:

D:\Sicherung_von_C\Marko\Downloads\BestVideoDownloaderSetup-TurboUpgrade.exe

von hand löschen

Firefox bitte updaten.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

mk72	16.09.2013 16:48

Hallo,

hat leider ein paar Tage gedauert, da ich verreist war- aber hier nun der log:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-09-2013 01

Ran by Marko (administrator) on KOBOLT on 16-09-2013 17:41:19

Running from C:\Users\Marko\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avshadow.exe

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe

(Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe

(mst software GmbH, Germany) E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Deutsche Telekom AG) E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe

(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

(StarWind Software) e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Adobe Systems Incorporated) E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

() e:\Programme\Ocster Backup\bin\backupService-ox.exe

() e:\Programme\Ocster Backup\bin\oxHelper.exe

(TomTom) E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe

(Logitech, Inc.) C:\Program Files\Logitech\FlowScroll\KhalScroll.exe

(Logitech, Inc.) E:\Programme\Logitech\SetPointP\SetPoint.exe

(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() E:\Programme\Ocster Backup\bin\backupClient-ox.exe

(IvoSoft) E:\Programme\Classic Shell\ClassicStartMenu.exe

(Blue Onion Software) E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe

(Microsoft) E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

() C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

(Hyperionics Technology LLC) E:\Programme\FileBX\FileBX.exe

() E:\Programme\MadAppLauncher\MadAppLauncher.exe

() e:\Programme\Ocster Backup\bin\oxHelper.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE

(Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe

() E:\Programme\Rainmeter\Rainmeter.exe

(Visagesoft) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe

() E:\Programme\FileBX\Fbx32helper.exe

() C:\Program Files (x86)\Memeo\AutoBackup\InstantBackup.exe

(Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\OUTLOOK.EXE

(Mozilla Corporation) E:\Programme\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

HKLM\...\Run: [LogiScrollApp] - C:\Program Files\Logitech\FlowScroll\KhalScroll.exe [166680 2012-02-08] (Logitech, Inc.)

HKLM\...\Run: [EvtMgr6] - E:\Programme\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)

HKLM\...\Run: [Ocster Backup] - E:\Programme\Ocster Backup\bin\backupClient-ox.exe [312488 2013-07-02] ()

HKLM\...\Run: [Classic Start Menu] - E:\Programme\Classic Shell\ClassicStartMenu.exe [151552 2013-06-29] (IvoSoft)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKCU\...\Run: [DeskDriveStartup] - E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe [66048 2009-12-06] (Blue Onion Software)

HKCU\...\Run: [BrowserMask] - E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe [101280 2011-06-21] (Microsoft)

HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-01-31] ()

HKLM-x32\...\Run: [DivXMediaServer] - e:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)

HKLM-x32\...\Run: [vspdfprsrv.exe] - e:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe [6082560 2012-04-23] (Visagesoft)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [StartCCC] - C:\ATI\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Memeo Instant Backup] - C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2011-09-16] (Memeo Inc.)

HKLM-x32\...\Run: [avgnt] - E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk

ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk

ShortcutTarget: Mediencenter.lnk -> C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk

ShortcutTarget: Rainmeter.lnk -> E:\Programme\Rainmeter\Rainmeter.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.jan-records.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x10F897CE9304CA01

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {B8043587-EBE9-4754-9E02-4BD5899FE7BA} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=971163&p={searchTerms}

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll (Logitech, Inc.)

BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - e:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programme\Java\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Programme\Java\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll (Logitech, Inc.)

BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Winsock: Catalog9 01 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 20 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 01 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 02 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 03 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 04 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 05 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 06 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 07 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 08 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 20 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Path=C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-812850846-3816870413-364722810-1001\FireFox

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @canon.com/MycameraPlugin - E:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)

FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - e:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - e:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - E:\Programme\Java\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}] - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt

FF Extension: Logitech Flow Scroll - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt

FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF StartMenuInternet: FIREFOX.EXE - e:\Programme\Mozilla Firefox\firefox.exe
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-07-17] (Adobe Systems)

R2 AdobeActiveFileMonitor11.0; E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)

R2 AMD FUEL Service; C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.)

R2 AntiVirSchedulerService; E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; E:\Programme\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()

S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)

R2 DfSdkS; E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)

S2 LanmanWorkstation; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation)

R2 MCSWASVR; E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe [12800 2011-11-23] (Deutsche Telekom AG)

S4 Nero BackItUp Scheduler 3; E:\Programme\Nero\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)

S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)

R2 ocster_backup; e:\Programme\Ocster Backup\bin\backupService-ox.exe [23720 2013-07-02] ()

R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)

S3 SandraAgentSrv; E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe [68760 2008-09-05] (SiSoftware)

R2 StarWindServiceAE; e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)

R2 TomTomHOMEService; E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe [92632 2012-08-28] (TomTom)

S4 McComponentHostService; "C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe" [x]

R2 Update-Service; %SystemRoot%\System32\UpdSvc.dll [x]

S4 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 AODDriver4.1; C:\ATI\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)

R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)

S3 etdrv; C:\Windows\etdrv.sys [25640 2012-02-01] (Windows (R) Server 2003 DDK provider)

S3 etdrv; C:\Windows\etdrv.sys [25640 2012-02-01] (Windows (R) Server 2003 DDK provider)

S3 gdrv; C:\Windows\gdrv.sys [25640 2012-10-09] (Windows (R) Server 2003 DDK provider)

S3 gdrv; C:\Windows\gdrv.sys [25640 2012-10-09] (Windows (R) Server 2003 DDK provider)

S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG)

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-02-01] ()

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-02-01] ()

R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39728 2011-11-04] (Paragon Software Group)

R0 oodrvled; C:\Windows\System32\DRIVERS\oodrvled.sys [30800 2011-03-02] (O&O Software GmbH)

R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)

S3 SANDRA; E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\Sandra.sys [23112 2009-08-08] (SiSoftware)

S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-11-07] (Duplex Secure Ltd.)

R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-04] (Windows (R) 2000 DDK provider)

R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-04] (Paragon)

R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-04] (Paragon)

S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [x]

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S0 TPkd; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-16 17:25 - 2013-09-16 17:26 - 01951150 _____ (Farbar) C:\Users\Marko\Desktop\FRST64.exe

2013-09-16 13:24 - 2013-09-16 13:24 - 97757658 _____ C:\Windows\SysWOW64\ἵ뻼‘

2013-09-11 10:01 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-11 10:01 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-11 10:01 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-11 10:01 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-11 10:01 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-11 10:01 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-11 10:01 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-11 10:01 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-11 10:01 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-11 10:01 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-11 10:01 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-11 10:01 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-11 09:41 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-11 09:41 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-11 09:41 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-11 09:41 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-11 09:41 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-11 09:41 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-11 09:41 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-11 09:41 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-11 09:41 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-11 09:41 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-11 09:41 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-11 09:41 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-11 09:41 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-11 09:41 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-11 09:41 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-11 09:41 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-11 09:41 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-11 09:41 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-11 09:41 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-11 09:41 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-11 09:41 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-11 09:41 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-11 09:41 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-11 09:41 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-11 09:41 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-11 09:41 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-09-09 15:22 - 2013-09-09 15:22 - 02347384 _____ (ESET) C:\Users\Marko\Downloads\esetsmartinstaller_enu.exe

2013-09-09 15:00 - 2013-09-09 15:00 - 00000000 ____D C:\Users\Marko\Desktop\Polli

2013-09-06 15:13 - 2013-09-06 15:13 - 09999832 _____ C:\Users\Marko\Downloads\FreeFileSync_5.21_Windows_Setup.exe

2013-09-06 15:05 - 2013-09-06 15:05 - 04410648 _____ C:\Users\Marko\Downloads\CloudConnectforOffice1.1.0.exe

2013-09-06 15:05 - 2013-09-06 15:05 - 04138776 _____ C:\Users\Marko\Downloads\CloudConnectforOutlook1.0.0.exe

2013-09-06 15:04 - 2013-09-06 15:04 - 00836632 _____ C:\Users\Marko\Downloads\ASUSWebStorageRemoteDrive1.0.0.171.exe

2013-09-06 12:18 - 2013-09-06 12:18 - 00000000 ____D C:\Windows\ERUNT

2013-09-06 11:32 - 2013-09-06 11:44 - 00000000 ____D C:\AdwCleaner

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-06 11:00 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-06 10:59 - 2013-09-06 10:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Marko\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-05 15:26 - 2013-09-05 15:52 - 00000000 ____D C:\Qoobox

2013-09-05 15:26 - 2013-09-05 15:48 - 00000000 ____D C:\Windows\erdnt

2013-09-05 15:26 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2013-09-05 15:26 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2013-09-05 15:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2013-09-05 15:22 - 2013-09-16 17:40 - 00000000 ____D C:\Users\Marko\Desktop\Trojaner-Board

2013-09-04 14:43 - 2013-09-04 14:43 - 00276496 _____ C:\Windows\Minidump\090413-21590-01.dmp

2013-09-04 14:22 - 2013-09-04 14:22 - 00000000 ____D C:\FRST

2013-09-04 14:08 - 2013-09-04 14:08 - 00000344 _____ C:\Users\Marko\defogger_reenable

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(3).exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(2).exe

2013-09-04 13:51 - 2013-09-04 13:51 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(1).exe

2013-09-02 17:15 - 2013-09-02 17:15 - 00000787 _____ C:\Users\Marko\Desktop\DivX Movies.lnk

2013-09-02 17:15 - 2013-09-02 17:15 - 00000754 _____ C:\Users\Public\Desktop\DivX Plus Player.lnk

2013-08-29 08:59 - 2013-08-29 08:59 - 05192704 _____ (Geza Kovacs) C:\Users\Marko\Downloads\unetbootin-windows-585.exe

2013-08-29 08:53 - 2013-08-29 08:53 - 00000000 ____D C:\Users\Marko\Desktop\Hausbau

2013-08-28 19:23 - 2013-08-28 19:23 - 616382464 _____ C:\Users\Marko\Downloads\rescue-system.iso

2013-08-28 16:21 - 2013-08-28 16:21 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Avira

2013-08-28 16:18 - 2013-09-04 11:36 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-08-28 16:17 - 2013-09-04 11:36 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-08-28 16:17 - 2013-09-04 11:36 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-28 16:17 - 2013-08-28 16:17 - 00000000 ____D C:\ProgramData\Avira

2013-08-28 16:17 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-08-28 15:58 - 2013-08-28 15:59 - 110344048 _____ C:\Users\Marko\Downloads\avira_free4045_antivirus_de.exe

2013-08-28 15:46 - 2013-08-28 15:46 - 02733958 _____ C:\Users\Marko\Downloads\tdsskiller.zip

2013-08-28 15:40 - 2013-08-28 15:40 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck.exe

2013-08-27 13:39 - 2013-09-11 09:28 - 00098260 _____ C:\Windows\PFRO.log

2013-08-26 14:38 - 2013-08-26 15:04 - 00000000 ____D C:\Users\Marko\Desktop\Kaspersky

2013-08-25 18:15 - 2013-08-27 22:03 - 00000000 ____D C:\Users\Marko\AppData\Local\BewerbungsMaster

2013-08-25 18:14 - 2013-08-27 23:00 - 00000000 ____D C:\Users\Marko\Documents\BewerbungsMaster

2013-08-25 18:13 - 2013-08-25 18:13 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2013-08-25 18:07 - 2013-08-25 18:14 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2013-08-25 18:07 - 2013-08-25 18:14 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2013-08-25 18:06 - 2013-08-25 18:06 - 11616256 _____ C:\Users\Marko\Downloads\master71.exe

2013-08-25 17:23 - 2013-09-02 17:00 - 00000000 ____D C:\Users\Marko\Desktop\Nick_Ausbildung

2013-08-24 11:32 - 2013-09-16 13:23 - 00002397 _____ C:\Windows\setupact.log

2013-08-24 11:32 - 2013-08-24 11:32 - 00000000 _____ C:\Windows\setuperr.log

2013-08-22 15:01 - 2013-08-22 15:01 - 00000000 ____D C:\Users\Marko\AppData\Roaming\dvdcss

2013-08-22 14:58 - 2013-08-22 14:58 - 00000687 _____ C:\Users\Marko\Desktop\MediaCoder x64.lnk

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Broad Intelligence

2013-08-22 14:55 - 2013-08-22 14:57 - 68913986 _____ C:\Users\Marko\Downloads\MediaCoder-x64-0.8.25.5553.exe

2013-08-19 14:10 - 2013-08-25 21:41 - 00000000 ____D C:\Users\Marko\MEDION NAS TOOL

2013-08-19 14:00 - 2013-08-19 14:00 - 00001168 _____ C:\Users\Public\Desktop\Memeo Instant Backup.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000954 _____ C:\Users\Public\Desktop\MEDION NAS TOOL.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Memeo

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Program Files (x86)\Memeo

2013-08-18 13:50 - 2013-08-18 13:50 - 02899663 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.cab

2013-08-18 13:50 - 2013-08-18 13:50 - 02427392 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.exe
 

==================== One Month Modified Files and Folders =======
 

2013-09-16 17:40 - 2013-09-05 15:22 - 00000000 ____D C:\Users\Marko\Desktop\Trojaner-Board

2013-09-16 17:26 - 2013-09-16 17:25 - 01951150 _____ (Farbar) C:\Users\Marko\Desktop\FRST64.exe

2013-09-16 17:17 - 2012-09-14 10:49 - 00000338 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job

2013-09-16 17:15 - 2012-03-21 16:30 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-16 14:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-16 13:48 - 2012-04-02 11:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-16 13:48 - 2012-01-16 23:34 - 01602639 _____ C:\Windows\WindowsUpdate.log

2013-09-16 13:48 - 2011-12-05 22:08 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-16 13:34 - 2012-08-03 17:25 - 00000000 ____D C:\Users\Marko\AppData\Local\Adobe

2013-09-16 13:33 - 2009-07-14 06:45 - 00015856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-16 13:33 - 2009-07-14 06:45 - 00015856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-16 13:31 - 2012-03-21 16:30 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-16 13:24 - 2013-09-16 13:24 - 97757658 _____ C:\Windows\SysWOW64\ἵ뻼‘

2013-09-16 13:23 - 2013-08-24 11:32 - 00002397 _____ C:\Windows\setupact.log

2013-09-16 13:23 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-15 13:25 - 2012-03-29 22:15 - 00075599 _____ C:\Windows\system32\log.xml

2013-09-15 13:25 - 2012-03-29 22:15 - 00000008 _____ C:\Windows\system32\log-suffix.xml

2013-09-15 11:27 - 2011-12-05 17:51 - 00000000 ___RD C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-15 11:27 - 2011-12-05 17:51 - 00000000 ___RD C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-11 10:37 - 2011-12-05 17:31 - 00000000 ____D C:\Windows\Panther

2013-09-11 10:37 - 2009-07-14 06:45 - 03584480 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-11 10:01 - 2013-07-11 11:28 - 00000000 ____D C:\Windows\system32\MRT

2013-09-11 09:48 - 2011-12-06 14:35 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-11 09:28 - 2013-08-27 13:39 - 00098260 _____ C:\Windows\PFRO.log

2013-09-09 15:25 - 2009-07-14 19:58 - 00700370 _____ C:\Windows\system32\perfh007.dat

2013-09-09 15:25 - 2009-07-14 19:58 - 00149184 _____ C:\Windows\system32\perfc007.dat

2013-09-09 15:25 - 2009-07-14 07:13 - 01622098 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-09 15:22 - 2013-09-09 15:22 - 02347384 _____ (ESET) C:\Users\Marko\Downloads\esetsmartinstaller_enu.exe

2013-09-09 15:00 - 2013-09-09 15:00 - 00000000 ____D C:\Users\Marko\Desktop\Polli

2013-09-06 15:13 - 2013-09-06 15:13 - 09999832 _____ C:\Users\Marko\Downloads\FreeFileSync_5.21_Windows_Setup.exe

2013-09-06 15:05 - 2013-09-06 15:05 - 04410648 _____ C:\Users\Marko\Downloads\CloudConnectforOffice1.1.0.exe

2013-09-06 15:05 - 2013-09-06 15:05 - 04138776 _____ C:\Users\Marko\Downloads\CloudConnectforOutlook1.0.0.exe

2013-09-06 15:04 - 2013-09-06 15:04 - 00836632 _____ C:\Users\Marko\Downloads\ASUSWebStorageRemoteDrive1.0.0.171.exe

2013-09-06 12:18 - 2013-09-06 12:18 - 00000000 ____D C:\Windows\ERUNT

2013-09-06 11:44 - 2013-09-06 11:32 - 00000000 ____D C:\AdwCleaner

2013-09-06 11:44 - 2011-12-05 17:51 - 00000000 ____D C:\Users\Marko

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-06 10:59 - 2013-09-06 10:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Marko\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-05 16:46 - 2012-04-26 22:27 - 00003234 _____ C:\Windows\System32\Tasks\SidebarExecute

2013-09-05 15:52 - 2013-09-05 15:26 - 00000000 ____D C:\Qoobox

2013-09-05 15:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2013-09-05 15:48 - 2013-09-05 15:26 - 00000000 ____D C:\Windows\erdnt

2013-09-05 15:40 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2013-09-04 14:43 - 2013-09-04 14:43 - 00276496 _____ C:\Windows\Minidump\090413-21590-01.dmp

2013-09-04 14:43 - 2012-04-19 20:27 - 00000000 ____D C:\Windows\Minidump

2013-09-04 14:22 - 2013-09-04 14:22 - 00000000 ____D C:\FRST

2013-09-04 14:08 - 2013-09-04 14:08 - 00000344 _____ C:\Users\Marko\defogger_reenable

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(3).exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(2).exe

2013-09-04 13:51 - 2013-09-04 13:51 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(1).exe

2013-09-04 11:36 - 2013-08-28 16:18 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-04 11:36 - 2013-08-28 16:17 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-04 11:36 - 2013-08-28 16:17 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-02 17:43 - 2012-04-04 12:07 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Mp3tag

2013-09-02 17:16 - 2012-03-19 17:27 - 00000000 ____D C:\Users\Marko\Desktop\Auto

2013-09-02 17:15 - 2013-09-02 17:15 - 00000787 _____ C:\Users\Marko\Desktop\DivX Movies.lnk

2013-09-02 17:15 - 2013-09-02 17:15 - 00000754 _____ C:\Users\Public\Desktop\DivX Plus Player.lnk

2013-09-02 17:15 - 2012-08-21 13:36 - 00000000 ____D C:\ProgramData\DivX

2013-09-02 17:00 - 2013-08-25 17:23 - 00000000 ____D C:\Users\Marko\Desktop\Nick_Ausbildung

2013-09-02 15:12 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-08-29 17:02 - 2013-02-03 18:03 - 00000000 ____D C:\Users\Marko\AppData\Local\Microsoft Help

2013-08-29 16:39 - 2013-07-19 13:45 - 00000000 ____D C:\Users\Marko\AppData\Roaming\onOne Software

2013-08-29 08:59 - 2013-08-29 08:59 - 05192704 _____ (Geza Kovacs) C:\Users\Marko\Downloads\unetbootin-windows-585.exe

2013-08-29 08:53 - 2013-08-29 08:53 - 00000000 ____D C:\Users\Marko\Desktop\Hausbau

2013-08-28 19:23 - 2013-08-28 19:23 - 616382464 _____ C:\Users\Marko\Downloads\rescue-system.iso

2013-08-28 16:21 - 2013-08-28 16:21 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Avira

2013-08-28 16:17 - 2013-08-28 16:17 - 00000000 ____D C:\ProgramData\Avira

2013-08-28 15:59 - 2013-08-28 15:58 - 110344048 _____ C:\Users\Marko\Downloads\avira_free4045_antivirus_de.exe

2013-08-28 15:47 - 2013-08-15 11:34 - 00000000 ____D C:\Users\Marko\Downloads\tdsskiller

2013-08-28 15:46 - 2013-08-28 15:46 - 02733958 _____ C:\Users\Marko\Downloads\tdsskiller.zip

2013-08-28 15:40 - 2013-08-28 15:40 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck.exe

2013-08-27 23:00 - 2013-08-25 18:14 - 00000000 ____D C:\Users\Marko\Documents\BewerbungsMaster

2013-08-27 22:03 - 2013-08-25 18:15 - 00000000 ____D C:\Users\Marko\AppData\Local\BewerbungsMaster

2013-08-26 16:55 - 2012-03-23 11:34 - 00000000 ____D C:\ProgramData\firebird

2013-08-26 15:04 - 2013-08-26 14:38 - 00000000 ____D C:\Users\Marko\Desktop\Kaspersky

2013-08-26 14:53 - 2013-05-24 12:28 - 00002453 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk

2013-08-25 21:41 - 2013-08-19 14:10 - 00000000 ____D C:\Users\Marko\MEDION NAS TOOL

2013-08-25 18:14 - 2013-08-25 18:07 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2013-08-25 18:14 - 2013-08-25 18:07 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2013-08-25 18:13 - 2013-08-25 18:13 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2013-08-25 18:06 - 2013-08-25 18:06 - 11616256 _____ C:\Users\Marko\Downloads\master71.exe

2013-08-24 11:32 - 2013-08-24 11:32 - 00000000 _____ C:\Windows\setuperr.log

2013-08-23 20:20 - 2013-07-29 14:57 - 00000370 _____ C:\Windows\Tasks\One-Click Optimizer.job

2013-08-23 13:05 - 2013-04-21 20:07 - 00001147 _____ C:\Users\Marko\Desktop\Mediencenter.lnk

2013-08-23 13:05 - 2013-04-21 20:07 - 00001133 _____ C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk

2013-08-22 15:01 - 2013-08-22 15:01 - 00000000 ____D C:\Users\Marko\AppData\Roaming\dvdcss

2013-08-22 14:58 - 2013-08-22 14:58 - 00000687 _____ C:\Users\Marko\Desktop\MediaCoder x64.lnk

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Broad Intelligence

2013-08-22 14:57 - 2013-08-22 14:55 - 68913986 _____ C:\Users\Marko\Downloads\MediaCoder-x64-0.8.25.5553.exe

2013-08-22 14:33 - 2012-01-03 18:30 - 00018944 _____ C:\Users\Marko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-08-22 14:31 - 2012-08-21 13:39 - 00000000 ____D C:\Users\Marko\AppData\Roaming\DivX

2013-08-22 14:30 - 2012-02-28 17:45 - 00000124 _____ C:\Users\Marko\Documents\ax_files.xml

2013-08-21 12:09 - 2011-12-06 19:45 - 00000000 ____D C:\ProgramData\ashampoo

2013-08-19 14:00 - 2013-08-19 14:00 - 00001168 _____ C:\Users\Public\Desktop\Memeo Instant Backup.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000954 _____ C:\Users\Public\Desktop\MEDION NAS TOOL.lnk

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Memeo

2013-08-19 14:00 - 2013-08-19 14:00 - 00000000 ____D C:\Program Files (x86)\Memeo

2013-08-18 13:50 - 2013-08-18 13:50 - 02899663 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.cab

2013-08-18 13:50 - 2013-08-18 13:50 - 02427392 _____ C:\Users\Marko\Downloads\WMWifiRouter-International.exe
 

Some content of TEMP:

====================

C:\Users\Marko\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-16 14:06
 

==================== End Of Log ============================

--- --- ---

mk72	16.09.2013 16:57

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2013 01

Ran by Marko at 2013-09-16 17:41:40

Running from C:\Users\Marko\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

64 Bit HP CIO Components Installer (Version: 8.2.2)

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)

AC3Filter 2.5b (x32 Version: 2.5b)

Adobe AIR (x32 Version: 3.7.0.1860)

Adobe Bridge 1.0 (x32 Version: 001.000.001)

Adobe Common File Installer (x32 Version: 1.00.001)

Adobe Community Help (x32 Version: 3.5.23)

Adobe Download Assistant (x32 Version: 1.2.3)

Adobe Flash Player 11 ActiveX 64-bit (Version: 11.2.202.235)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Adobe Help Center 1.0 (x32 Version: 1.0.1)

Adobe Photoshop CS2 (x32 Version: 9.0)

Adobe Photoshop Elements 11 (x32 Version: 11.0)

Adobe Photoshop Lightroom 5 64-bit (Version: 5.0.1)

Adobe Premiere Elements 11 (Version: 11.0)

Adobe Stock Photos 1.0 (x32 Version: 1.0.1)

Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)

AMD Accelerated Video Transcoding (Version: 2.00.0002)

AMD APP SDK Runtime (Version: 10.0.938.2)

AMD Catalyst Install Manager (Version: 8.0.881.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Fuel (Version: 2012.0806.1213.19931)

AMD Media Foundation Decoders (Version: 1.0.70405.2224)

AMD System Monitor (x32 Version: 1.0.8)

AMD USB Filter Driver (x32 Version: 1.0.15.94)

AMD VISION Engine Control Center (x32 Version: 2012.0806.1213.19931)

AntiBrowserSpy (x32 Version: 3.6.106)

Apple Application Support (x32 Version: 2.3.4)

Apple Software Update (x32 Version: 2.1.3.127)

Application Profiles (x32 Version: 2.0.4337.36028)

Application Profiles (x32 Version: 2.0.4365.36132)

Ashampoo Burning Studio 12 v.12.0.5 (x32 Version: 12.0.5)

Ashampoo Home Designer Pro v.1.0.1 (x32 Version: 1.0.1)

Ashampoo Internet Accelerator 3 v.3.20 (x32 Version: 3.1.1)

Ashampoo Music Studio 4 v.4.0.5 (x32 Version: 4.0.5)

Ashampoo Music Studio 4 v.4.1.0 (x32 Version: 4.1.0)

Ashampoo Photo Commander 10 v.10.1.1 (x32 Version: 10.1.1)

Ashampoo Snap 5 v.5.1.5 (x32 Version: 5.1.5)

Ashampoo Video Styler 2013 v.1.0.1 (x32 Version: 1.0.1)

Ashampoo WinOptimizer 10 v.10.2.5 (x32 Version: 10.02.05)

Audio 180% (x32 Version: Audio 180%)

Avira Free Antivirus (x32 Version: 13.0.0.4052)

Bewerbungsfoto-/Passbild-Generator v3.5b (x32)

BEWERBUNGSMASTER (e:\Programme\BEWERBUNGSMASTER\) (x32)

BEWERBUNGSMASTER (x32)

BufferChm (x32 Version: 130.0.331.000)

Bullzip PDF Printer 9.3.0.1516 (Version: 9.3.0.1516)

C4400 (x32 Version: 130.0.365.000)

C4500 (x32 Version: 130.0.365.000)

CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.7.2.11)

Canon Internet Library for ZoomBrowser EX (x32 Version: 1.6.3.9)

Canon MOV Decoder (x32 Version: 1.5.0.7)

Canon MOV Encoder (x32 Version: 1.3.1.3)

Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.4.1.9)

Canon Utilities Digital Photo Professional 3.8 (x32 Version: 3.8.0.0)

Canon Utilities EOS Utility (x32 Version: 2.8.1.0)

Canon Utilities PhotoStitch (x32 Version: 3.1.22.46)

Canon Utilities Picture Style Editor (x32 Version: 1.7.0.0)

Canon Utilities WFT Utility (x32 Version: 3.5.1.1)

Canon Utilities ZoomBrowser EX (x32 Version: 6.5.1.15)

Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.3.0.4)

Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1213.19931)

Catalyst Control Center Localization All (x32 Version: 2012.0806.1213.19931)

CCC Help Chinese Standard (x32 Version: 2012.0806.1212.19931)

CCC Help Chinese Traditional (x32 Version: 2012.0806.1212.19931)

CCC Help Czech (x32 Version: 2012.0806.1212.19931)

CCC Help Danish (x32 Version: 2012.0806.1212.19931)

CCC Help Dutch (x32 Version: 2012.0806.1212.19931)

CCC Help English (x32 Version: 2012.0806.1212.19931)

CCC Help Finnish (x32 Version: 2012.0806.1212.19931)

CCC Help French (x32 Version: 2012.0806.1212.19931)

CCC Help German (x32 Version: 2012.0806.1212.19931)

CCC Help Greek (x32 Version: 2012.0806.1212.19931)

CCC Help Hungarian (x32 Version: 2012.0806.1212.19931)

CCC Help Italian (x32 Version: 2012.0806.1212.19931)

CCC Help Japanese (x32 Version: 2012.0806.1212.19931)

CCC Help Korean (x32 Version: 2012.0806.1212.19931)

CCC Help Norwegian (x32 Version: 2012.0806.1212.19931)

CCC Help Polish (x32 Version: 2012.0806.1212.19931)

CCC Help Portuguese (x32 Version: 2012.0806.1212.19931)

CCC Help Russian (x32 Version: 2012.0806.1212.19931)

CCC Help Spanish (x32 Version: 2012.0806.1212.19931)

CCC Help Swedish (x32 Version: 2012.0806.1212.19931)

CCC Help Thai (x32 Version: 2012.0806.1212.19931)

CCC Help Turkish (x32 Version: 2012.0806.1212.19931)

ccc-utility64 (Version: 2012.0806.1213.19931)

Classic Shell (Version: 3.6.8)

Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)

COMPUTERBILD-Abzockschutz (x32 Version: 1.0.40)

Content Manager 2 (x32 Version: 3.10.0.52790)

Copy (x32 Version: 130.0.428.000)

CPUID CPU-Z 1.59

CyberGhost VPN

DAEMON Tools Lite (x32 Version: 4.46.1.0327)

Data Lifeguard Diagnostic for Windows 1.24 (x32)

DateiCommander13 Basic (x32)

Desk Drive (x32 Version: 1.8.2)

DeskDrive Version 1.8.5 (x32 Version: 1.8.5)

Destinations (x32 Version: 130.0.0.0)

DeviceDiscovery (x32 Version: 130.0.465.000)

Diagnostic Utility (x32 Version: 1.00.0000)

DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904)

DivX-Setup (x32 Version: 2.6.1.44)

DocProc (x32 Version: 13.0.0.0)

DxO FilmPack 2.0 (x32 Version: 2.0.0)

DxO Optics Pro 5.3.5 (x32 Version: 5.3.5)

DxO Optics Pro 6 (x32 Version: 6.6.0)

Elements 11 Organizer (x32 Version: 11.0)

eReg (x32 Version: 1.20.138.34)

erLT (x32 Version: 1.20.0137)

Fahrtenbuch professionell (x32)

FileBox eXtender (x32)

FileZilla Client 3.5.3 (x32 Version: 3.5.3)

Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0)

FolderVisualizer (x32 Version: 2012)

GeoSetter 3.4.16 (x32)

Gigaset QuickSync (Version: 7.2.0844.6)

Google Earth Plug-in (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.21.153)

GPBaseService2 (x32 Version: 130.0.371.000)

HP Customer Participation Program 13.0 (Version: 13.0)

HP Imaging Device Functions 13.0 (Version: 13.0)

HP Photo Creations (x32 Version: 1.0.0.9452)

HP Photosmart C4400 All-In-One Driver Software 13.0 Rel. 3 (Version: 13.0)

HP Photosmart C4500 All-In-One Driver Software 13.0 Rel. 4 (Version: 13.0)

HP Smart Web Printing 4.51 (Version: 4.51)

HP Solution Center 13.0 (Version: 13.0)

HP Update (x32 Version: 5.003.001.001)

HPDiagnosticAlert (x32 Version: 1.00.0000)

HPPhotoGadget (x32 Version: 130.0.282.000)

HPProductAssistant (x32 Version: 130.0.371.000)

Inpaint 3 Installation & Registrierung (x32)

Inpaint 3.0 (x32)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

Java(TM) 6 Update 31 (x32 Version: 6.0.310)

JavaFX 2.1.1 (x32 Version: 2.1.1)

KeePass Password Safe 2.21 (x32)

Logitech Flow Scroll 4.0 (Version: 4.00.33)

Logitech SetPoint 6.32 (Version: 6.32.20)

Logitech Unifying-Software 2.10 (Version: 2.10.37)

MadAppLauncher version 1.10.0.0 (x32 Version: 1.10.0.0)

MAGIX Foto Designer 7 (x32 Version: 7.0.1.1)

MAGIX Screenshare (x32 Version: 4.3.6.1987)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6)

MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

MarketResearch (x32 Version: 130.0.374.000)

MediaCoder x64 0.8.25.5553 (Version: 0.8.25.5553)

Mediencenter 3.8.1.2208 (HKCU Version: 3.8.1.2208)

Mediencenter Assistent (Version: 2.7.0.1451)

MEDION NAS TOOL (x32)

Memeo Instant Backup (x32 Version: 4.60.0.7939)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)

Microsoft Office Professional 2013 - de-de (Version: 15.0.4517.1509)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)

Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)

Miso 1.0 (x32 Version: 1.0)

Mozilla Firefox 18.0.1 (x86 de) (x32 Version: 18.0.1)

Mozilla Firefox 23.0.1 (x86 de) (HKCU Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 18.0.1)

Mp3tag v2.57 (x32 Version: v2.57)

MSVC80_x64_v2 (Version: 1.0.3.0)

MSVC80_x86_v2 (x32 Version: 1.0.3.0)

MSVC90_x64 (Version: 1.0.1.2)

MSVC90_x86 (x32 Version: 1.0.1.2)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)

Naviextras Toolbox Prerequesities (x32 Version: 1.0.0)

Nero 8 (x32 Version: 8.3.312)

neroxml (x32 Version: 1.0.0)

Network64 (Version: 130.0.572.000)

Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0)

Nokia Suite (x32 Version: 3.8.30.0)

NTRIP (x32)

O&O DriveLED Professional (Version: 4.2.157)

OCR Software by I.R.I.S. 13.0 (Version: 13.0)

Ocster Backup Pro (Version: 8.08)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4517.1509)

Office 15 Click-to-Run Licensing Component (Version: 15.0.4517.1509)

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4517.1509)

ON_OFF Charge B11.1102.1 (x32 Version: 1.00.0001)

Paragon Festplatten Manager™ 2011 Kompakt 2nd Edition (x32 Version: 90.00.0003)

PC Connectivity Solution (x32 Version: 12.0.109.0)

PDF Experte 8 Ultimate (x32 Version: 8.0.0140.0)

Perfect Effects 4.0.4 (x32 Version: 4.0.4)

PL-2303 USB-to-Serial (x32 Version: 1.7.0)

PRE11 STI 64Installer (x32 Version: 11.0)

PS_AIO_03_C4400_Software_Min (x32 Version: 130.0.365.000)

PS_AIO_04_C4500_Software_Min (x32 Version: 130.0.365.000)

PSE11 STI Installer (x32 Version: 11.0)

Q-Dir (x32)

QuickTime (x32 Version: 7.74.80.86)

Rainmeter (x32 Version: 2.4 r1678)

Realtek Ethernet Controller Driver (x32 Version: 7.58.411.2012)

Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6650)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)

Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.39.0)

Scan (x32 Version: 13.0.0.0)

SeaTools for Windows (x32 Version: 1.2.0.7)

Send To Toys v2.61

SiSoftware Sandra Lite 2012.SP5c (Version: 18.74.2012.10)

SmartTools Publishing • Excel AutoBackup (x32 Version: v2.50)

SmartTools Publishing • Outlook Adress-Assistent (x32 Version: v3.50)

SmartTools Publishing • Word Adressfenster-Assistent (x32 Version: v2.50)

SmartWebPrinting (x32 Version: 130.0.457.000)

SolutionCenter (x32 Version: 130.0.373.000)

Status (x32 Version: 130.0.469.000)

swMSM (x32 Version: 12.0.0.1)

TomTom HOME (x32 Version: 2.9.2)

TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)

Toolbox (x32 Version: 130.0.648.000)

TrayApp (x32 Version: 130.0.422.000)

Treiber-Studio 2013 (Version: 8.0.519)

Treiber-Studio 2013 (Version: 8.1.428)

Unknown Device Identifier 8.00

UnloadSupport (x32 Version: 11.0.0)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)

VCRedistSetup (x32 Version: 1.0.0)

WebReg (x32 Version: 130.0.132.017)

Windows Mobile-Gerätecenter (Version: 6.1.6965.0)

Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)

XnView Shell Extension 3.2.0 (64bits) (x32 Version: 3.2.0)
 

==================== Restore Points  =========================
 

11-09-2013 07:41:38 Windows Update

15-09-2013 09:37:46 Windows-Sicherung

15-09-2013 09:57:18 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2013-09-05 15:38 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started

Task: {07FD82E2-B526-4FC7-8798-FCA387122C0B} - System32\Tasks\One-Click Optimizer => E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-05-15] (Ashampoo Development GmbH & Co. KG)

Task: {18E87A3D-D345-46C8-83A0-765A4D34BF98} - System32\Tasks\{0DC1FC84-5EDB-4337-ABC3-B6DDCF71C3C2} => Firefox.exe 

Task: {479C03B9-CEC4-41F3-A69F-F81E31FC295D} - System32\Tasks\{485AAEC7-0CDC-4324-B369-6564E05046FA} => Firefox.exe 

Task: {55D08572-AF0D-4D79-B374-B2288E853937} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-21] (Google Inc.)

Task: {94E7BDC3-C5CF-4EFB-A69A-8C6218A52551} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {9D61BA86-511D-4EF2-9642-5A4E7FC5D66A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-06-09] (Microsoft Corporation)

Task: {9E55C402-A616-4ED1-B9A3-DDE6CCFFCF6A} - System32\Tasks\Microsoft\Windows\MemDiag => C:\Windows\system32\mdres.exe [2009-07-14] (Microsoft Corporation)

Task: {A00464E8-6BBC-4CE0-B494-EA214C5F7098} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)

Task: {B308AAA6-6861-4A1E-B7FE-4945F3AA459C} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {B5FF5D24-9746-49F5-9A08-EE16078E7451} - System32\Tasks\{68FCBDDC-F452-4549-97AD-356CC5E03486} => E:\Programme\Nero\Nero\Nero8\Nero Burning Rom\nero.exe [2008-06-24] (Nero AG)

Task: {BE32AC8B-F571-4959-965A-8CCC10A0E121} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-21] (Google Inc.)

Task: {C820FD4E-DC50-452F-A5E7-1350854F076E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)

Task: {E47767F2-BC3A-463D-8CBD-A409DEA7DCA3} - System32\Tasks\AdobeAAMUpdater-1.0-Kobolt-Marko => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)

Task: {F07079E8-DB7A-4819-8454-71FE70E5A687} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2011-08-23] ()

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

Task: C:\Windows\Tasks\One-Click Optimizer.job => E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-07-02 17:21 - 2013-07-02 17:21 - 04712104 _____ () e:\Programme\Ocster Backup\bin\ox.dll

2013-04-12 10:45 - 2013-04-12 10:45 - 00641024 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_xrc_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00622592 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_html_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 03663872 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_core_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 01488384 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00875520 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_adv_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00157696 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_xml_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 00152576 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_net_vc_ox.dll

2011-02-23 17:09 - 2011-02-23 17:09 - 00313344 _____ (Hyperionics Technology LLC) E:\Programme\FileBX\FileBXH.dll

2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm

2013-02-03 17:06 - 2013-02-03 17:06 - 00244696 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00661448 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\MSVCP110.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00828872 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\MSVCR110.dll

2013-04-04 10:22 - 2013-04-04 10:22 - 00558592 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll

2013-06-29 10:50 - 2013-06-29 10:50 - 00724992 _____ (IvoSoft) E:\Programme\Classic Shell\ClassicExplorer64.dll

2013-06-29 10:50 - 2013-06-29 10:50 - 01750528 _____ (IvoSoft) E:\Programme\Classic Shell\ClassicStartMenuDLL.dll

2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () e:\Programme\FileZilla FTP Client\fzshellext_64.dll

2013-07-29 14:57 - 2013-05-15 15:22 - 00117096 _____ (TODO: <Company name>) E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WinOptimizerContextHandler64.dll

2013-07-10 13:15 - 2011-02-01 20:09 - 00593788 _____ (Friedemann Schmidt) e:\Programme\GeoSetter\GeoSetterShellExt64.dll

2012-08-06 13:01 - 2012-08-06 13:01 - 00004608 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\atiamdeu.dll

2012-05-22 11:07 - 2011-05-18 17:47 - 00137216 _____ (Gabriele Ponti) e:\Programme\Send To Toys\SendToFolderShellExt.dll

2012-05-22 11:07 - 2011-05-18 17:47 - 00140800 _____ (Gabriele Ponti) e:\Programme\Send To Toys\SendToClipboardShellExt.dll

2013-04-24 15:25 - 2013-04-24 15:25 - 00402432 _____ (Florian Heidenreich) E:\Programme\MP3-Tag\Mp3tag\Mp3tagShell64.dll

2013-04-04 10:22 - 2013-04-04 10:22 - 00152064 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll

2012-08-15 11:55 - 2012-08-13 17:25 - 00149504 _____ (Deutsche Telekom AG) C:\Windows\system32\DTAG.Mediencenter.ShellExtension.dll

2012-05-22 11:01 - 2012-02-23 21:44 - 02409472 _____ () e:\Programme\XnView\ShellEx\XnViewShellExt64.dll

2011-10-07 11:39 - 2011-10-07 11:39 - 01304856 _____ () E:\Programme\Logitech\SetPointP\Macros\MacroCore.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 06088360 _____ () E:\Programme\Ocster Backup\bin\backupClientLib.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00388264 _____ () E:\Programme\Ocster Backup\bin\updateman.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00468648 _____ () E:\Programme\Ocster Backup\bin\twirl.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00343208 _____ () E:\Programme\Ocster Backup\bin\tomb.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 04712104 _____ () E:\Programme\Ocster Backup\bin\ox.dll

2013-04-12 10:45 - 2013-04-12 10:45 - 00641024 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxmsw28u_xrc_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00622592 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxmsw28u_html_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 03663872 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxmsw28u_core_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 01488384 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxbase28u_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00875520 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxmsw28u_adv_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00157696 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxbase28u_xml_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 00152576 _____ (wxWidgets development team) E:\Programme\Ocster Backup\bin\wxbase28u_net_vc_ox.dll

2013-04-12 10:30 - 2013-04-12 10:30 - 00076288 _____ () E:\Programme\Ocster Backup\bin\zdll.dll

2013-04-12 11:13 - 2013-04-12 11:13 - 00239104 _____ (The cURL library, hxxp://curl.haxx.se/) E:\Programme\Ocster Backup\bin\libcurl.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 10897576 _____ () E:\Programme\Ocster Backup\bin\backupCore.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00156328 _____ () E:\Programme\Ocster Backup\bin\deemon.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00491176 _____ () E:\Programme\Ocster Backup\bin\veem.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00060072 _____ () E:\Programme\Ocster Backup\bin\minizutil.dll

2013-06-27 07:56 - 2013-06-27 07:56 - 00020992 _____ () E:\Programme\Ocster Backup\bin\zlibutil.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00052392 _____ () E:\Programme\Ocster Backup\bin\lzmaUtil.dll

2013-06-27 07:58 - 2013-06-27 07:58 - 00049664 _____ () E:\Programme\Ocster Backup\bin\lzma.dll

2013-06-27 08:01 - 2013-06-27 08:01 - 00309248 _____ () E:\Programme\Ocster Backup\bin\party.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00112808 _____ () E:\Programme\Ocster Backup\bin\scoolite.dll

2013-06-27 07:56 - 2013-06-27 07:56 - 00626688 _____ () E:\Programme\Ocster Backup\bin\sqlite.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00204968 _____ () E:\Programme\Ocster Backup\bin\netutil.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 00147112 _____ () E:\Programme\Ocster Backup\bin\featback.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00035744 _____ (unknown) E:\Programme\AntiBrowserSpy\AbFlexTrans.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00037792 _____ () E:\Programme\AntiBrowserSpy\AbCommons.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 06362528 _____ () E:\Programme\AntiBrowserSpy\Commons.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 02648480 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.Data.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00173984 _____ () E:\Programme\AntiBrowserSpy\AbBrowserLibs.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 03414944 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.Utils.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00018336 _____ () E:\Programme\AntiBrowserSpy\VersionInfo.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00018848 _____ () E:\Programme\AntiBrowserSpy\AbSettingsKeeper.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 01750432 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.XtraEditors.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00012704 _____ () E:\Programme\AntiBrowserSpy\AbProcessManager.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00012520 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\CoreTempReader.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00015080 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\GetCoreTempInfoNET.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00014056 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\SystemInfo.dll

2011-02-23 17:04 - 2011-02-23 17:04 - 00080896 _____ () E:\Programme\FileBX\FbxRes.dll

2013-08-20 17:55 - 2013-08-20 17:55 - 00287232 _____ (The Apache Software Foundation) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\log4net.dll

2013-08-22 09:49 - 2013-08-22 09:49 - 00073728 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ProxyClient.dll

2013-08-22 09:49 - 2013-08-22 09:49 - 00008192 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.Common.dll

2013-08-22 09:49 - 2013-08-22 09:49 - 00881664 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\de-DE\Mediencenter.resources.dll

2013-08-22 09:49 - 2013-08-22 09:49 - 00030720 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ProxyContracts.dll

2012-11-04 16:25 - 2012-11-04 16:25 - 00736968 _____ () E:\Programme\Rainmeter\Rainmeter.dll

2012-11-04 16:23 - 2012-11-04 16:23 - 00056832 _____ () E:\Programme\Rainmeter\Plugins\WebParser.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00097280 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.Implementation.dll

2012-08-06 13:03 - 2012-08-06 13:03 - 00031232 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00025088 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00048128 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Implementation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Implementation.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00022016 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CCC.Implementation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00015360 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\NEWAEM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00061440 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00018432 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.XManifest.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00038400 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00029184 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\ATICCCom.dll

2012-07-17 09:58 - 2012-07-17 09:58 - 00175104 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ADL.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00034816 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006144 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Server.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00047616 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Source.Kit.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.CoreAudioAPI.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00006656 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.DPPE.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Hotkeys.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006144 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.WinMessages.Shared.dll

2009-04-22 13:13 - 2009-04-22 13:13 - 00045056 _____ (ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0601.dll

2010-03-04 02:27 - 2010-03-04 02:27 - 00016384 _____ (ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006656 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.dll

2010-10-07 14:07 - 2010-10-07 14:07 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I1010.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.REG.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00311296 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00196608 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll

2009-06-17 06:27 - 2009-06-17 06:27 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.GD.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005120 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Audio.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Actions.CCAA.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00008704 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ResourceManagement.Foundation.Private.dll

2008-04-03 17:29 - 2008-04-03 17:29 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0804.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00025600 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.Shared.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00028672 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00045056 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00053248 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.shared.dll

2009-12-08 08:49 - 2009-12-08 08:49 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0912.dll

2007-08-09 17:58 - 2007-08-09 17:58 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0706.dll

2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00049152 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00144384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceLCD.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00053248 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00028672 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CustomFormats.Graphics.Shared.dll

2008-12-30 13:04 - 2008-12-30 13:04 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0812.dll

2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0805.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00050688 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.OverDrive5.Graphics.shared.dll

2007-05-02 18:44 - 2007-05-02 18:44 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0703.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00110592 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00081920 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Shared.dll

2010-11-05 15:18 - 2010-11-05 15:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I1011.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00110592 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00081920 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Shared.dll

2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00045056 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.shared.dll

2009-01-20 15:51 - 2009-01-20 15:51 - 00007168 _____ ( ) C:\ATI\ATI.ACE\Core-Static\atixclib.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00008192 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00015872 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Runtime.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00012288 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00019968 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00010752 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013312 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\Fuel.Foundation.dll

2012-08-06 13:24 - 2012-08-06 13:24 - 00037376 _____ (AMD) C:\ATI\ATI.ACE\Fuel\FUEL.Implementation.dll

2012-08-06 13:24 - 2012-08-06 13:24 - 00103424 _____ () C:\ATI\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

2012-08-06 13:03 - 2012-08-06 13:03 - 00479232 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\Localization.Foundation.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00352256 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\Localization.Foundation.Implementation.de_Localization.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00071168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Fusion.Aspects.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00012800 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DPPE.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00011264 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Fets.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.WiFi.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUPStates.Fuel.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00018944 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00018944 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00011264 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00015360 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00012800 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00011776 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00066048 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\APM.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00024576 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\APM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Extension.EEU.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.EEU.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00380928 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00036352 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Client.Shared.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007680 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Client.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 01395200 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00413696 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Systemtray.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00175104 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ResourceManagement.Foundation.Implementation.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00172032 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 01007616 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00028160 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00057344 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 01406464 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects1.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00441344 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00369152 _____ () C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00393216 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 02400256 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00024576 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MultiVPU2.Graphics.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00237568 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00159744 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00100864 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.OverDrive5.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00021504 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00044544 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Audio.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 01260032 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.User.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00026112 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Fets.Fuel.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00021504 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.WiFi.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00048128 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DPPE.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00029696 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUPStates.Fuel.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00037376 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00007680 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00039936 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008192 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00307200 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.Client.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00060928 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.ProfileManager2.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00528384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.dll

2011-02-23 17:09 - 2011-02-23 17:09 - 00301568 _____ (Hyperionics Technology LLC) E:\Programme\FileBX\FileBXH32.dll

2013-07-10 10:19 - 2013-07-10 10:19 - 00313000 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll

2013-08-14 22:22 - 2013-08-14 22:22 - 00358056 _____ () C:\Program Files\Microsoft Office 15\root\office15\c2r32.dll

2013-01-15 19:16 - 2012-04-11 20:06 - 01186816 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\TMSlite160.bpl

2013-01-15 19:16 - 2012-03-13 14:50 - 03660800 _____ (Project JEDI) E:\Programme\Avanquest\PDF Experte 8 Ultimate\Jcl160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00087552 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspropsaver160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02478080 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsvector160.bpl

2013-01-15 19:16 - 2012-03-29 18:00 - 04119552 _____ (visagesoft) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsgdi.dll

2013-01-15 19:16 - 2012-04-11 20:06 - 04680704 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfcore160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02693120 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\BBlite160.bpl

2013-01-15 19:16 - 2012-02-23 16:11 - 00025088 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vstrees160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00064512 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsprinters160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00064512 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprinter160.bpl

2013-01-15 19:16 - 2011-09-30 19:10 - 00684032 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\js32.dll

2013-01-15 19:16 - 2012-04-11 20:06 - 00097280 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\expertpdfcore160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00253952 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndySystem160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 02506752 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndyProtocols160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00387584 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndyCore160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02253824 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\PKIECtrl160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00517120 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfeditor160.bpl

2013-01-15 19:16 - 2011-01-19 17:49 - 00156160 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\Snapu.dll

2013-01-15 19:16 - 2010-04-06 15:41 - 00316416 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\OLRegist.dll

2013-01-15 19:16 - 2010-08-05 10:57 - 00599296 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\bvrpctln.dll

2011-09-16 15:39 - 2011-09-16 15:39 - 00098664 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll

2013-02-13 04:38 - 2013-02-13 04:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 00230624 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 01660128 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Utility.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 00020704 _____ (Stan Schultes, VBNetExpert.com) C:\Program Files (x86)\Memeo\AutoBackup\XMLSettings.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 01557728 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00054496 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Interop.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 02888416 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.UI.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 00025824 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Memeo.Client.DriveDetection.dll

2011-09-16 01:17 - 2011-09-16 01:17 - 00015872 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Memeo.Client.resources.dll

2011-09-16 01:18 - 2011-09-16 01:18 - 00028672 _____ () C:\Program Files (x86)\Memeo\AutoBackup\de-DE\InstantBackup.resources.dll

2010-04-05 20:52 - 2010-04-05 20:52 - 00013824 _____ ( ) C:\Program Files (x86)\Memeo\AutoBackup\Interop.eWebControl.dll

2010-04-05 20:50 - 2010-04-05 20:50 - 00143360 _____ (Digital River, Inc.) C:\Program Files (x86)\Common Files\Memeo\eWebControl365.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00025824 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.Third-party.Security.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00296160 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.DataClad.DataAccess.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00067808 _____ (Newtonsoft) C:\Program Files (x86)\Memeo\AutoBackup\Newtonsoft.Json.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 02798816 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\Tanagra.BMU.dll

2011-09-16 01:18 - 2011-09-16 01:18 - 00057344 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.DataClad.resources.dll

2011-09-16 01:16 - 2011-09-16 01:16 - 00074976 _____ (Finisar Corporation) C:\Program Files (x86)\Memeo\AutoBackup\SQLite.NET.dll

2010-04-05 20:52 - 2010-04-05 20:52 - 00504293 _____ () C:\Program Files (x86)\Memeo\AutoBackup\sqlite3.DLL

2011-09-16 01:16 - 2011-09-16 01:16 - 00042208 _____ (Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoRemoteCore.dll

2011-09-16 01:18 - 2011-09-16 01:18 - 00036864 _____ (Memeo Inc.) C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Tanagra.Utility.resources.dll

2010-04-05 20:52 - 2010-04-05 20:52 - 00053248 _____ () C:\Program Files (x86)\Memeo\AutoBackup\Mono.Nat.dll

2011-09-16 01:18 - 2011-09-16 01:18 - 00114688 _____ () C:\Program Files (x86)\Memeo\AutoBackup\de-DE\Memeo.Client.UI.resources.dll

2013-08-14 22:23 - 2013-08-14 22:27 - 01026728 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\ADDINS\UmOutlookAddin.dll

2013-03-12 15:31 - 2013-03-12 15:31 - 00321088 _____ () C:\Program Files\Microsoft Office 15\root\office15\msfad.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00220632 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00534480 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\MSVCP110.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00862664 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\MSVCR110.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00537560 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\Telemetry.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00038360 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\logging.dll

2003-07-11 03:09 - 2003-07-11 03:09 - 00048192 _____ () C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1031\NSEXTINT.DLL

2009-07-14 02:07 - 2009-07-14 03:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\SysWOW64\l3codeca.acm

2013-08-18 14:19 - 2013-08-18 14:20 - 03551640 _____ () E:\Programme\Mozilla Firefox\mozjs.dll

2013-04-16 21:01 - 2013-04-16 21:01 - 00424960 _____ (AVM Berlin) C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\s0d1rked.default\extensions\fb_add_on@avm.de\components\windows\FB_AddOn4.dll

2013-04-16 21:01 - 2013-04-16 21:01 - 01085440 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\s0d1rked.default\extensions\fb_add_on@avm.de\components\windows\libeay32.dll

2013-03-12 15:29 - 2013-03-12 15:29 - 00121920 _____ () C:\Program Files\Microsoft Office 15\root\Office15\JitV.dll

2013-07-10 10:19 - 2013-07-10 10:19 - 00313000 _____ () C:\Program Files\Microsoft Office 15\root\Office15\AppVIsvStream32.dll

2013-08-14 22:22 - 2013-08-14 22:22 - 00358056 _____ () C:\Program Files\Microsoft Office 15\root\Office15\c2r32.dll
 

==================== Alternate Data Streams (whitelisted) ==========
 

AlternateDataStreams: C:\ProgramData\Microsoft:cJP8NoA3alrUCM20

AlternateDataStreams: C:\ProgramData\Microsoft:V6rvehwmRjYqRAkFBpLsBNz

AlternateDataStreams: C:\Users\Marko\Cookies:xfyRDFyvnvb5tEWMQke9kc

AlternateDataStreams: C:\Users\Marko\Lokale Einstellungen:ESx4L4fSedPdx1ERV9rqEL

AlternateDataStreams: C:\Users\Marko\AppData\Local:ESx4L4fSedPdx1ERV9rqEL

AlternateDataStreams: C:\Users\Marko\AppData\Local\Anwendungsdaten:ESx4L4fSedPdx1ERV9rqEL
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/16/2013 02:06:43 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (09/16/2013 02:06:43 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (09/16/2013 02:06:42 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/16/2013 01:23:29 PM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/15/2013 11:27:09 AM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/11/2013 10:37:48 AM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/11/2013 09:29:17 AM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/09/2013 10:32:41 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/09/2013 03:27:18 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/09/2013 03:27:16 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
 

System errors:

=============

Error: (09/16/2013 01:32:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/16/2013 01:32:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/16/2013 01:32:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/16/2013 01:32:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/16/2013 01:32:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/16/2013 01:32:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/16/2013 01:23:40 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/16/2013 01:23:40 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/16/2013 01:23:40 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/16/2013 01:23:40 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (09/16/2013 02:06:43 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Programme\Nero\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe
 

Error: (09/16/2013 02:06:43 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Programme\Nero\Nero\Nero8\Nero PhotoSnap\PhotoSnap.exe
 

Error: (09/16/2013 02:06:42 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Programme\Nero\Nero\Nero8\Nero Toolkit\DiscSpeed.exe
 

Error: (09/16/2013 01:23:29 PM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/15/2013 11:27:09 AM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/11/2013 10:37:48 AM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/11/2013 09:29:17 AM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/09/2013 10:32:41 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (09/09/2013 03:27:18 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Marko\Downloads\esetsmartinstaller_enu.exe
 

Error: (09/09/2013 03:27:16 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Marko\Downloads\esetsmartinstaller_enu.exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-09-05 15:33:31.315

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-05 15:33:31.185

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-28 13:37:59.118

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.117

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.114

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.100

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.099

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.096

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-05-08 11:24:41.256

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-05-08 11:24:41.254

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 31%

Total physical RAM: 8188.54 MB

Available physical RAM: 5609.3 MB

Total Pagefile: 16375.25 MB

Available Pagefile: 12990.07 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (Windows) (Fixed) (Total:104.75 GB) (Free:23.42 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (FreeAgent GoFlex Drive) (Fixed) (Total:465.76 GB) (Free:401.88 GB) NTFS

Drive e: (Programme) (Fixed) (Total:41.22 GB) (Free:12.24 GB) NTFS

Drive f: (Daten) (Fixed) (Total:180.27 GB) (Free:43.81 GB) NTFS

Drive g: (Backup) (Fixed) (Total:89.52 GB) (Free:16.88 GB) NTFS

Drive h: (Laufwerk) (Fixed) (Total:50 GB) (Free:27.1 GB) NTFS

Drive k: (Sicherung) (Fixed) (Total:931.51 GB) (Free:18.97 GB) NTFS

Drive p: (SEAGATE_EXP) (Fixed) (Total:1907.32 GB) (Free:1885.23 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C4086204)

Partition 1: (Active) - (Size=105 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=361 GB) - (Type=OF Extended)
 

========================================================

Disk: 1 (Size: 932 GB) (Disk ID: 56A6B2F7)

Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (Size: 466 GB) (Disk ID: 76942D58)

Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 3.
 

==================== End Of Log ============================

Kaspersky hat mal wieder geantwortet. Soll ich die beschriebenen Schritte ausführen oder ist von deiner Seite her noch was zu tun?

Zitat:

Code:

Sehr geehrte(r) Herr xxx,
 

führen Sie bitte zuerst die folgenden Schritte aus:
 

Für Windows Vista / Windows 7:
 

1. Klicken Sie auf "Start --> Systemsteuerung --> Netzwerk- und Freigabecenter" (Sollten Sie diese Punkte nicht direkt sehen, klicken Sie auf der linken Seite bitte auf "Klassische Ansicht"

2. Klicken Sie nun auf "Netzwerkverbindungen verwalten" (bzw. Win7: "Adaptereinstellungen ändern")sodass Ihnen alle LAN-Verbindungen angezeigt werden

3. Klicken Sie mit der rechten Maustaste auf Ihre Netzwerkkarte und wählen "Eigenschaften". Es erscheinen die Eigenschaften der LAN-Verbindung bei denen Sie verschiedene Dienste sehen, wählen Sie hier nun den Dienst "Client für Microsoft-Netzwerke" aus und klicken Sie nun auf "Deinstallieren" (Wenn dieser nicht vorhanden ist, können Sie diesen Schritt überspringen)

4. Klicken Sie nun auf "Installieren" -> "Client" klicken nun bitte "Hinzufügen" wählen bitte im nächsten Fenster "Client für Microsoft-Netzwerke" aus und klicken auf "OK"

5. Schliessen Sie nun alle Fenster (Sollte ein Neustart des Systems empfohlen werden, führen Sie dieses bitte durch)
 
 

Versuchen Sie anschließend nochmals die Aktivierung des Kaspersky Programms. Sollte diese wiederum fehlschlagen, führen Sie bitte zusätzlich folgende Schritte durch:
 

1. Drücken Sie die "Windows"-Taste und "R"-Taste gleichzeitig auf Ihrer Tastatur und geben im neuen Fenster "services.msc" (ohne ") ein. Bestätigen Sie dies bitte mit Enter 

2. Überprüfen Sie hier die auftauchende Liste, ob der "Arbeitsstationsdienst" vorhanden ist.
 
 

Ist dieser Arbeitsstationsdienst vorhanden, aber nicht gestartet, so versuchen Sie diesen zuerst durch einen Rechtsklick darauf und auswählen von "Starten" zu starten.
 
 

Erhalten Sie hierbei eine Fehlermeldung, gehen Sie bitte noch folgendermaßen vor:
 

Bei Windows Vista/Windows 7
 

Klicken Sie auf den Start-Button -> Alle Programme -> Zubehör, klicken die "Eingabeaufforderung" mit der rechten Maustaste an und wählen "Als Administrator ausführen"
 

Geben Sie bitte die folgenden Befehle der Reihe nach ein und bestätigen jeden mit der Enter-Taste:

(Sie können die Befehlszeile auch kopieren und mit einem Rechtsklick im CMD-Fenster und auswählen von "Einfügen" einfügen)
 

svchost.exe -k NetworkService 
 

reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters /v ServiceDLL /t REG_EXPAND_SZ /d %SystemRoot%\System32\wkssvc.dll
 

net start lanmanworkstation
 

Führen Sie zum Schluß die Aktivierung des Programms durch.
 

Mit freundlichen Grüßen,

xxx

schrauber

16.09.2013 19:54

Nee lass mal, ich hab da schon ne Idee.

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

Starte bitte die OTL.exe.
Kopiere nun den Inhalt aus der Codebox in die http://larusso.trojaner-board.de/Images/otlfix.jpg Textbox.

Code:

HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Telephony\Providers

HKEY_LOCAL_MACHINE\software\Wow6432Node\microsoft\Windows\CurrentVersion\Telephony\Providers

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation /S

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache /S

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost

HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost

HKEY_LOCAL_MACHINE\SOFTWARE\Joosoft.com

%SystemRoot%\system32\*.tsp

%SystemRoot%\system32\*.tsp /64

C:\Windows\system32\*.dll /600

C:\Windows\SysNative\*.dll /600

C:\Windows\SysWOW64\*.dll /600

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Kopiere nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

mk72	18.09.2013 15:54

Code:

OTL Extras logfile created on: 18.09.2013 15:08:33 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Marko\Desktop

64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16686)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

8,00 Gb Total Physical Memory | 5,68 Gb Available Physical Memory | 71,07% Memory free

15,99 Gb Paging File | 13,43 Gb Available in Paging File | 83,96% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 104,75 Gb Total Space | 24,29 Gb Free Space | 23,19% Space Free | Partition Type: NTFS

Drive D: | 465,76 Gb Total Space | 401,88 Gb Free Space | 86,28% Space Free | Partition Type: NTFS

Drive E: | 41,22 Gb Total Space | 11,65 Gb Free Space | 28,26% Space Free | Partition Type: NTFS

Drive F: | 180,27 Gb Total Space | 43,81 Gb Free Space | 24,30% Space Free | Partition Type: NTFS

Drive G: | 89,52 Gb Total Space | 16,88 Gb Free Space | 18,86% Space Free | Partition Type: NTFS

Drive H: | 50,00 Gb Total Space | 27,10 Gb Free Space | 54,20% Space Free | Partition Type: NTFS

Drive K: | 931,51 Gb Total Space | 21,68 Gb Free Space | 2,33% Space Free | Partition Type: NTFS

Drive P: | 1907,32 Gb Total Space | 1885,23 Gb Free Space | 98,84% Space Free | Partition Type: FAT32

 

Computer Name: KOBOLT | User Name: Marko | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- E:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- "E:\Programme\Microsoft Office\OFFICE11\WINWORD.EXE" /n /dde

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [Digital Photo Professional] -- E:\Programme\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [sendtotoys1add] -- e:\Programme\Send To Toys\SendToAdd.exe "%1" ()

Directory [sendtotoys1remove] -- e:\Programme\Send To Toys\SendToRemove.exe "%1" ()

Directory [sendtotoys2prompt] -- e:\Programme\Send To Toys\SendToCommandPrompt.exe "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- "E:\Programme\Microsoft Office\OFFICE11\WINWORD.EXE" /n /dde

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [Digital Photo Professional] -- E:\Programme\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [sendtotoys1add] -- e:\Programme\Send To Toys\SendToAdd.exe "%1" ()

Directory [sendtotoys1remove] -- e:\Programme\Send To Toys\SendToRemove.exe "%1" ()

Directory [sendtotoys2prompt] -- e:\Programme\Send To Toys\SendToCommandPrompt.exe "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

"FirewallDisableNotify" = 0

"AntiVirusDisableNotify" = 0

"UpdatesDisableNotify" = 0

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 
 ========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 
 ========== Firewall Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 0

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{013CEB0C-8CFE-4E64-8D61-8B0BB3377A6A}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{0294BB2F-6178-459D-8C46-8D1C40D6AD6B}" = rport=445 | protocol=6 | dir=out | app=system | 

"{03426208-B357-4C32-8AAE-0F640CB9E33A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{057550CC-1C7E-4C7B-A2F8-3A8DDC978C8C}" = lport=138 | protocol=17 | dir=in | app=system | 

"{08E024BB-596A-4DFF-A430-159062EB67CE}" = lport=10243 | protocol=6 | dir=in | app=system | 

"{125CFCEB-4A04-4192-9767-A653FDFBECE9}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 

"{19A5737B-0BEE-43C8-BCD3-3CC714AA4FD3}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{1F1083FB-5FE7-48EF-B923-DE87E8EF9596}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 | 

"{2055614F-CB3D-4B66-82CA-168558BD5716}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | 

"{24F4B23D-DD0A-4D3C-B140-92394132BCDF}" = lport=rpc | protocol=6 | dir=in | app=e:\programme\sisoftware\sisoftware sandra lite 2012.sp5c\rpcagentsrv.exe | 

"{25B9D31D-64EC-44F5-900B-17177C3E5D3C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{295EF879-34FC-4A05-A484-51AA1443280E}" = lport=445 | protocol=6 | dir=in | app=system | 

"{2D51A963-800D-4D4D-9C16-97043938F2CE}" = rport=139 | protocol=6 | dir=out | app=system | 

"{2FA65B31-3A9D-4C20-AFC6-469495F0EF44}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{37938B21-D3CD-418C-B77D-B5BEB8B38147}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{3E359C95-D0CC-4A93-8C45-14AE4E71B0E4}" = rport=138 | protocol=17 | dir=out | app=system | 

"{3ED796B9-5C5D-4CE8-BFD0-0E2E00ADDB2C}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 

"{4084E937-EAAA-47EE-9520-7BE7CE434C09}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{44E454F3-CCCB-411A-841A-A08DB43B16E5}" = lport=10243 | protocol=6 | dir=in | app=system | 

"{4BF5EB07-06A2-40E2-B5B6-244EF5C49A0F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{4DBF4A5F-D235-4E5F-90A9-E0E10CAF3FE3}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe | 

"{5456EA1E-AF45-48BD-9C96-AB99A6CCF1D9}" = lport=139 | protocol=6 | dir=in | app=system | 

"{5B6E381F-F971-4246-A7F6-1A615C63BC34}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 

"{6364B77A-8796-4078-B3CC-5963A3E70B4F}" = rport=139 | protocol=6 | dir=out | app=system | 

"{6EFD3216-D4DB-448C-81DA-E8838C66FFD2}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{771A9BCB-A081-42B6-B170-2F4F7E7DF4C7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{7A35F951-21EE-45B7-9B49-50E36638E3B6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{7C7BD74E-D59D-40F9-8481-A74C4729E9DD}" = rport=138 | protocol=17 | dir=out | app=system | 

"{7E7B3BAA-E87E-4029-B98D-D7154DA0EA82}" = lport=137 | protocol=17 | dir=in | app=system | 

"{86444BB3-291D-4D31-A046-BB4AA3243C28}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{8DA630A9-2CBE-48D1-BF43-B22B3151773D}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{95409DAE-8D3B-4FC8-8214-856BB664F4F6}" = lport=445 | protocol=6 | dir=in | app=system | 

"{9CAD0659-89C7-49F7-83BC-7284AB2AEDB2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{9DF463EE-C066-4FF3-A975-A2CE0DF45948}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{AC476CF1-7BEA-42E4-A5C6-BDBB30237989}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{AF8150A9-8B4A-4262-900E-D368942052B3}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{BBBAB6A3-9D8C-48D3-A2E3-E9844A408E86}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{BE10AB93-C4A6-464B-BE93-069E778BFF99}" = rport=10243 | protocol=6 | dir=out | app=system | 

"{BE7AD158-B1FB-4F05-99B4-73E435FDE26A}" = lport=139 | protocol=6 | dir=in | app=system | 

"{C1C1D706-C38F-4D43-AABB-2D527BF071E3}" = rport=10243 | protocol=6 | dir=out | app=system | 

"{C232D951-55E7-4D04-9346-F88A07FC0B22}" = lport=137 | protocol=17 | dir=in | app=system | 

"{C267381F-CF42-4D9D-B527-3054131752DE}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{C428A183-FD79-40B5-990D-895328F43AC8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{C936918A-E48E-4207-8D40-A4F226A03CB8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{CC6F96AB-CACB-4823-BC08-3A286D318BFF}" = lport=rpc | protocol=6 | dir=in | app=e:\programme\sisoftware\sisoftware sandra lite 2012.sp5c\wnt500x64\rpcsandrasrv.exe | 

"{CF0676E6-E2EC-438A-9741-7029DEBD00CE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{D32AC71C-66F6-4D26-BC89-4BEE2B4467B1}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\outlook.exe | 

"{E2549E13-81F7-4B0B-9E7C-E06CD6666C65}" = rport=137 | protocol=17 | dir=out | app=system | 

"{E3DDA491-14C4-4293-9BE9-912775740658}" = rport=445 | protocol=6 | dir=out | app=system | 

"{F534D21D-02A4-4E48-A237-A3745ED5E6D3}" = rport=137 | protocol=17 | dir=out | app=system | 

"{F6E6DD5E-B88A-43B3-A3DC-5FDD6DF08177}" = lport=138 | protocol=17 | dir=in | app=system | 

"{F88056F6-7012-4476-A4FF-4740761EE601}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{F9C1EEE5-72B7-40C6-BC7C-64E9DF7DEB39}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{003C7A18-60D9-4C89-94D8-DE42C1AA1D76}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{02A4D600-582A-4C14-ADFE-C125CF0CB18F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{039D486B-A362-45CE-BB15-B76187A535B5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe | 

"{069ACC7B-8D22-48ED-9ABB-4B45B022F759}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{12F7D6EF-82A4-4487-BE3C-1DE93B91872C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{1473D86F-6F04-46A3-9153-CD04272511DC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{27BF1A5D-F64B-45EF-BE24-E5C74F6DFFE6}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe | 

"{2BB41996-4B1C-4152-950A-524F98F5EE06}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 

"{3598C31E-BC70-4251-9895-8558362D30A8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{368204CF-C783-45F4-BAB4-0130A68B7F69}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 

"{3920C4C8-05BE-45CE-BFB4-52109A583944}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{3CB5E709-125E-4D6A-A444-449390B67494}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{44EB28EE-5793-4F19-AC62-FF4298160AD7}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe | 

"{4849799C-D8E9-4360-8F9A-6B5F2BCC7EA4}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{4E8A529B-3D02-4A68-8792-F672673F3254}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 

"{5240730F-FDBC-4D44-B8E3-1FDBD302ADC5}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{56E808A1-BFD0-4B79-B567-B9FA848D697F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{605D2778-9FAA-4956-9AB6-DD110C672C78}" = protocol=1 | dir=in | name=sisoftware sandra agent service (icmp-in) | 

"{60617173-AA68-492B-8813-0D5476C0A558}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{61FB8AD2-C831-45AB-9DFB-D685C3A8300D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{62F27534-2769-4D2F-B42F-E96E62F64F44}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{65901CFC-D156-4C8F-90EA-C26D256CA195}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{66DD31F7-0DEB-4739-84CC-616869EC65DC}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe | 

"{680F54D7-029A-4E6D-A823-476F1158863B}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe | 

"{68F6992D-6E9D-4F14-88EC-3E0B8BEC7EFF}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{6DD9BE23-4602-456C-8379-64E381654467}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe | 

"{726F7159-FCF9-40B5-BE8E-C31FF9A9F882}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{73757FBC-BE93-4FA4-B7DB-90D5FEBA535D}" = protocol=6 | dir=out | app=system | 

"{7D214110-9E61-43D1-BD7C-40D6E9028C87}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe | 

"{80C7DB17-8BF7-42FE-B1F8-F2A83B04CE7C}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 

"{8126EE0A-75C5-4A84-A5E0-E84B5CECD48C}" = protocol=1 | dir=in | name=sisoftware deployment agent service (icmp-in) | 

"{81C62302-9E38-4C08-9ADE-AF76E7E48218}" = protocol=1 | dir=in | name=sisoftware sandra agent service (icmp-in) | 

"{8642AF85-31DC-4BB3-8E9D-1E478C224084}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{887F6C44-D5A0-4F96-8924-4298C220C996}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{8CBC39CA-F810-4E56-AF13-9789EA4E1ED3}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{9BE3C49E-D163-41F5-9BEE-74BF93E6244A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{A1B9D165-31E5-41FF-8ACB-A12FAB9B9EC5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe | 

"{A5589677-56C4-46C1-A86B-1F0B5425786F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{AB3FBA72-52C3-4476-9A38-230DBE05659B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{B0C45C1F-614F-4901-B0B9-C7A1A7C1FF50}" = protocol=1 | dir=in | name=sisoftware deployment agent service (icmp-in) | 

"{B442BAB4-04D6-4E7D-AD32-9DE447D4E1EA}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 

"{B91164AB-C260-4829-A92E-5AC1D0DF27B2}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe | 

"{BC7833D1-AE4B-4CAB-BDD5-6EA587E5C763}" = protocol=6 | dir=out | app=system | 

"{C032E776-CD84-4B03-A493-C9203FAC1099}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe | 

"{C1F1AC57-2101-476C-8EC6-9EACF212DFFE}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe | 

"{C30A7248-25E8-41C6-A663-70F126727C5D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{C5108E15-7603-43FB-A7CC-153F10554072}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe | 

"{C75978A5-EB21-421E-9017-F2316B1B109A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{C9CE749B-8FB1-47E3-BF08-C9678E97203C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{CA299679-025F-4F66-AF5F-00EC1E27C47D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{CE504808-152F-4073-8BB9-0F8E7C4D30C6}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{D3648D1D-2BA3-4973-9B7E-EDC907B6E342}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{D7D27612-8814-4130-B5FE-B1586F253F7A}" = protocol=1 | dir=in | name=sisoftware sandra agent service (icmp-in) | 

"{DA479BC0-6433-4B19-A6C5-CB681E87E8E0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqcopy2.exe | 

"{E5FE5156-248D-48EE-92FB-000978267B2E}" = dir=in | app=c:\users\marko\appdata\local\microsoft\skydrive\skydrive.exe | 

"{E8715BB0-E132-4617-B344-62E03BFE2C1C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{E926E57D-011D-4F63-BCC5-FFCFDC28D091}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{EE790419-7287-4B3D-A35C-2BE8F3C328A9}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe | 

"{EFA98652-B437-42AA-B7D3-EFFD71ED4ECD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{F14EC08B-4244-42E2-A0C2-453BB36704FE}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{F7DCF881-DB9D-4779-8D1C-CCCBAC7C73FF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{F8FC52ED-C86A-400E-93C2-9552C9CCB690}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{F9275720-A79A-41C5-B539-FDCBCF25D8FB}" = dir=in | app=c:\program files (x86)\nokia\nokia suite\nokiasuite.exe | 

"{F9552755-1899-4B63-9E99-212FDA7E907C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe | 

"{FEAC4A29-1469-447C-B54F-3CD9CD56A5C5}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack

"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64

"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"{120EC191-78F8-CA89-3511-7E90C23F5261}" = AMD Catalyst Install Manager

"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219

"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)

"{2D3471B9-8671-46F0-9947-4C0DB6234403}" = Treiber-Studio 2013

"{2D58E228-ACD8-0B8A-E1FF-D3F7020DA30F}" = AMD Media Foundation Decoders

"{31a52f2e-32e8-4c8f-9d99-6fd0c37c99ef}" = Gigaset QuickSync

"{377672F0-6B8A-467D-8DDC-79338BCCD531}" = 64 Bit HP CIO Components Installer

"{3987279A-3504-2916-D063-741B910F0747}" = AMD Accelerated Video Transcoding

"{4D533F05-A3F6-F8A9-F1F6-FA6812089D36}" = AMD Drag and Drop Transcoding

"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2

"{4FFA2088-8317-3B14-93CD-4C699DB37843}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729

"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile-Gerätecenter

"{66CF1DF9-1715-4325-89BC-76B1CA2EE3BE}" = Adobe Premiere Elements 11

"{680EDA59-9266-44B4-949E-0C24F65DFF82}" = Microsoft_VC100_CRT_SP1_x64

"{6C1A010F-9108-4162-A26F-9FEC4AC0F0F0}" = Adobe Photoshop Lightroom 5 64-bit

"{7660521A-062D-41F5-AA5E-CBA0E0511131}" = Treiber-Studio 2013

"{8181C5B7-2FF5-4677-BA6A-8E2C3F5A7601}" = HP Photosmart C4400 All-In-One Driver Software 13.0 Rel. 3

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended

"{90150000-008F-0000-1000-0000000FF1CE}" = Office 15 Click-to-Run Licensing Component

"{AA6F009F-0CCD-4DD6-A462-28419C101D54}" = HP Photosmart C4500 All-In-One Driver Software 13.0 Rel. 4

"{AAE67184-CE3D-4B92-BD5D-1B448301BCCE}" = MAGIX Speed burnR (MSI)

"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64

"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1" = SiSoftware Sandra Lite 2012.SP5c

"{C37EA24C-8D95-468E-93B8-9724A84F4A64}" = O&O DriveLED Professional

"{CF2A565B-1504-BD48-51B5-1D88C621D8C6}" = ccc-utility64

"{E6277150-51D1-1D9F-1B9F-2D28985BE167}" = AMD Fuel

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"{FEA1590B-540A-41FC-A95C-664493C82A21}" = Classic Shell

"62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F" = Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0)

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit

"Bullzip PDF Printer_is1" = Bullzip PDF Printer 9.3.0.1516

"CPUID CPU-Z_is1" = CPUID CPU-Z 1.59

"CyberGhost VPN_is1" = CyberGhost VPN

"HP Imaging Device Functions" = HP Imaging Device Functions 13.0

"HP Smart Web Printing" = HP Smart Web Printing 4.51

"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0

"HPExtendedCapabilities" = HP Customer Participation Program 13.0

"HPOCR" = OCR Software by I.R.I.S. 13.0

"Logitech Unifying" = Logitech Unifying-Software 2.10

"MediaCoder x64" = MediaCoder x64 0.8.25.5553

"Mediencenter Software" = Mediencenter Assistent

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack

"Ocster Backup" = Ocster Backup Pro

"PremElem110" = Adobe Premiere Elements 11

"ProfessionalRetail - de-de" = Microsoft Office Professional 2013 - de-de

"Send To Toys_is1" = Send To Toys v2.61

"Sn1" = Logitech Flow Scroll 4.0

"sp6" = Logitech SetPoint 6.32

"Unknown Device Identifier_is1" = Unknown Device Identifier 8.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0309F85C-B1CC-DA9F-D184-FE93CCF08E1D}" = Application Profiles

"{06C265CF-F924-491E-8E6C-288460CB5E30}" = Desk Drive

"{0C808377-8C23-44ED-9016-05F42E6D4900}" = Nokia Suite

"{0CC1B2D9-B316-4AE3-902D-EA9A15E0DCF4}_is1" = Audio 180%

"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status

"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan

"{10EBB586-D21E-60CA-0856-AA753EBE1F16}" = Application Profiles

"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1

"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch

"{183F67DB-676D-9629-BB8D-5D91CFC5880C}" = CCC Help Chinese Traditional

"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser

"{1A21C23B-1049-036F-538C-40827D35D35B}" = CCC Help Czech

"{1D181764-DCD0-41B8-AA7B-0A599F027A72}" = Adobe Photoshop Elements 11

"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp

"{21EF236B-A428-0641-0A9A-6A9A74BA1996}" = CCC Help Finnish

"{236BB7C4-4419-42FD-0407-1E257A25E34D}" = Adobe Photoshop CS2

"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31

"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25

"{29258311-EA49-11DE-967C-005056C00008}" = Paragon Festplatten Manager™ 2011 Kompakt 2nd Edition

"{29373274-977E-413C-A4DE-DC0F8E80C429}" = Nokia Connectivity Cable Driver

"{2AEDC172-479F-47AE-8A48-A0524D4AED5B}_is1" = Inpaint 3.0

"{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}" = MAGIX Foto Designer 7

"{2E7170BC-A6CB-3C69-A940-A07834EAE1E8}" = CCC Help Italian

"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm

"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update

"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery

"{3450767E-DD72-E31C-CCA5-8F45FF5FCE08}" = AMD VISION Engine Control Center

"{36F8DBEE-9A1C-44B7-849C-BD2508F2C7F8}_is1" = Fahrtenbuch professionell

"{385E6A4D-A440-43E2-9BAF-A012FB5FC2E2}" = Perfect Effects 4.0.4

"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup

"{3A027737-A119-FABD-4C43-8385D57FC450}" = Catalyst Control Center Localization All

"{3C92B2E6-380D-4fef-B4DF-4A3B4B669771}" = Copy

"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.1102.1

"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg

"{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1" = Ashampoo WinOptimizer 10 v.10.2.5

"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg

"{45017FF9-8ABB-DFDE-6BFD-43C8D89277F4}" = CCC Help Norwegian

"{494642A2-96C3-FBF9-A43D-41D78A82AE15}" = CCC Help Hungarian

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter

"{4AAD21AD-EE06-46C9-8B57-28D53DF9FB06}_is1" = NTRIP

"{4D1A0101-17A2-4fca-9119-4734EDBDA12D}_is1" = Ashampoo Home Designer Pro v.1.0.1

"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport

"{4FD6306A-E967-F286-DBA1-2A3C26833A2C}" = CCC Help French

"{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1" = Data Lifeguard Diagnostic for Windows 1.24

"{537575D6-3B96-474C-BD8F-DFF667363DBD}" = Naviextras Toolbox Prerequesities

"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver

"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI

"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml

"{5A0D71BC-3AB0-4BC1-B241-CABE11EEE731}" = DxO Optics Pro 5.3.5

"{5BA86B8D-D29E-071C-5D7B-E579A54698AD}" = CCC Help Spanish

"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support

"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM

"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2

"{68E6762C-20CA-41B2-8720-1B178B2C6AED}" = DxO FilmPack 2.0

"{69742A9A-B7C4-433B-98B2-53D597598793}_is1" = Inpaint 3 Installation & Registrierung

"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox

"{6C5F8503-55D2-4398-858C-362B7A7AF51C}" = Firebird SQL Server - MAGIX Edition

"{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}" = PC Connectivity Solution

"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{718B4425-80EA-4F64-A05C-48285CE63F73}" = AMD System Monitor

"{71A79918-3497-16D0-3497-E3356F5EE5FB}" = CCC Help Chinese Standard

"{7236672F-6430-439E-9B27-27EDEAF1D676}" = Diagnostic Utility

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{73F59F3E-E753-4D3D-B123-B497B74A549A}_is1" = MadAppLauncher version 1.10.0.0

"{76D0F60C-D265-CFA4-2E06-41E434F9EB41}" = CCC Help Thai

"{786C5747-0C40-4930-9AFE-113BCE553101}" = Adobe Stock Photos 1.0

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{78FD6E08-6996-7EBF-E3F8-905836E7C220}" = CCC Help Dutch

"{79361740-EAE3-11E2-9911-B8AC6F98CCE3}" = Google Earth Plug-in

"{79A3E8B6-37C0-5F75-7E7D-F4D6FB512329}" = CCC Help Japanese

"{7ACB3CAB-68EC-4DCE-8597-50B4DC558F94}" = COMPUTERBILD-Abzockschutz

"{7E5A8023-0E90-4503-A1EA-C9FC25680AF9}" = PS_AIO_03_C4400_Software_Min

"{840CAC48-BDE6-490C-AA34-904E10AB1261}_is1" = DeskDrive Version 1.8.5

"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert

"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver

"{8B526040-C3BE-5E3F-E6C1-C01BD32BA2C6}" = CCC Help Greek

"{8E666407-AC41-46a2-9692-6C7BFCBFDD37}" = Memeo Instant Backup

"{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer

"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules

"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System

"{90150000-008C-0000-0000-0000000FF1CE}" = Office 15 Click-to-Run Extensibility Component

"{90150000-008C-0407-0000-0000000FF1CE}" = Office 15 Click-to-Run Localization Component

"{9017CEAF-BE5A-4F73-8A0E-C87E26971E55}" = TomTom HOME

"{9068D15E-25B4-EC21-9BC4-8DBD52722F8E}" = CCC Help Russian

"{91B33C97-7650-0EB0-B6C7-DDBA2932B7B4}_is1" = Ashampoo Music Studio 4 v.4.1.0

"{91B33C97-93EB-244C-F687-71D85E45A206}_is1" = Ashampoo Burning Studio 12 v.12.0.5

"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195

"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader

"{98613C99-1399-416C-A07C-1EE1C585D872}" = SeaTools for Windows

"{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver

"{98CE8819-87AA-4814-8167-ADDDD513485F}" = PSE11 STI Installer

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9DC11D9A-6DCD-4064-8363-63914A0122AB}" = C4500

"{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR

"{A127C3C0-055E-38CF-B38F-1E85F8BBBFFE}" = Adobe Community Help

"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AA46B5F5-6E96-A623-5AB4-93BE56BEBB28}" = CCC Help Danish

"{AAE31374-02C2-452E-88EC-2F16D92731A9}" = MAGIX Screenshare

"{AC4BBB17-A837-3B36-83D8-7DFC90505F95}" = CCC Help Portuguese

"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86

"{B1E33614-25CC-4C2A-8CBA-88B51ABF67E0}" = C4400

"{B614E5FA-6DA4-45A1-845C-52F870240A89}" = PRE11 STI 64Installer

"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime

"{B74D4E10-6884-0000-0000-000000000101}" = Adobe Bridge 1.0

"{B94CD252-ACBB-36C7-133D-94BB87D70F91}" = Catalyst Control Center InstallProxy

"{BC8CEB2B-647B-BBF1-3923-6250AFA64081}" = CCC Help Polish

"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations

"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant

"{C8773FDB-D0DB-BE52-D536-F48F9886B57B}" = Adobe Download Assistant

"{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget

"{CF408B76-8698-4298-B549-5E6A94931B64}" = PS_AIO_04_C4500_Software_Min

"{D4D065E1-3ABF-41D0-B385-FC6F027F4D00}" = Elements 11 Organizer

"{D6C9AF27-9414-46C8-B9D8-D878BA041031}" = Nero 8

"{D73E5C3C-6975-6957-3799-AB306D8189B0}" = CCC Help Korean

"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting

"{DF0EBC9C-E2AC-4319-9C69-DC473BBDA319}" = DxO Optics Pro 6

"{E05B61A8-A743-57ED-C0BA-6332CC6452FF}" = CCC Help German

"{E22F5B3F-6D82-7354-F199-0EFFDCC4DD33}" = CCC Help Swedish

"{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86

"{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0

"{E9E34215-82EF-4909-BE2F-F581F0DC9062}" = DirectX for Managed Code Update (Summer 2004)

"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial

"{F0319215-C109-C2C9-ECBC-3F08C50E59B3}" = CCC Help Turkish

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F78B5B4F-075A-4C81-AA27-E707861EB5B7}_is1" = AntiBrowserSpy

"{FBE18FE1-05A4-C5AD-571A-74BC335FDDC6}" = CCC Help English

"{FC279721-37A6-4777-AFD8-7A56681EBA14}" = PDF Experte 8 Ultimate

"AC3Filter_is1" = AC3Filter 2.5b

"Adobe AIR" = Adobe AIR

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}" = Adobe Photoshop CS2

"Adobe Photoshop Elements 11" = Adobe Photoshop Elements 11

"Ashampoo Internet Accelerator 3_is1" = Ashampoo Internet Accelerator 3 v.3.20

"Ashampoo Music Studio 4_is1" = Ashampoo Music Studio 4 v.4.0.5

"Ashampoo Photo Commander 10_is1" = Ashampoo Photo Commander 10 v.10.1.1

"Ashampoo Snap 5_is1" = Ashampoo Snap 5 v.5.1.5

"Ashampoo Video Styler 2013_is1" = Ashampoo Video Styler 2013 v.1.0.1

"Avira AntiVir Desktop" = Avira Free Antivirus

"CANON iMAGE GATEWAY Task" = CANON iMAGE GATEWAY Task for ZoomBrowser EX

"Canon Internet Library for ZoomBrowser EX" = Canon Internet Library for ZoomBrowser EX

"Canon MOV Decoder" = Canon MOV Decoder

"Canon MOV Encoder" = Canon MOV Encoder

"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help

"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant

"Content Manager 2" = Content Manager 2

"DAEMON Tools Lite" = DAEMON Tools Lite

"DateiCommander 13.0 Basic_is1" = DateiCommander13 Basic

"DivX Setup" = DivX-Setup

"DPP" = Canon Utilities Digital Photo Professional 3.8

"EOS Utility" = Canon Utilities EOS Utility

"FileBox eXtender" = FileBox eXtender

"FileZilla Client" = FileZilla Client 3.5.3

"FolderVisualizer_is1" = FolderVisualizer

"GeoSetter_is1" = GeoSetter 3.4.16

"HP Photo Creations" = HP Photo Creations

"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver

"KeePassPasswordSafe2_is1" = KeePass Password Safe 2.21

"MAGIX_{AAE67184-CE3D-4B92-BD5D-1B448301BCCE}" = MAGIX Speed burnR (MSI)

"MAGIX_MSI_FotoDesigner7_silver" = MAGIX Foto Designer 7

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300

"MEDION NAS TOOL" = MEDION NAS TOOL

"Miso" = Miso 1.0

"MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX

"Mozilla Firefox 18.0.1 (x86 de)" = Mozilla Firefox 18.0.1 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"Mp3tag" = Mp3tag v2.57

"Nokia Suite" = Nokia Suite

"Passbild-Generator_is1" = Bewerbungsfoto-/Passbild-Generator v3.5b

"PhotoStitch" = Canon Utilities PhotoStitch

"Picture Style Editor" = Canon Utilities Picture Style Editor

"Q-Dir" = Q-Dir

"Rainmeter" = Rainmeter

"SmartToolsAdress-Assistentv3.50" = SmartTools Publishing • Outlook Adress-Assistent

"SmartToolsAdressfenster-Assistentv2.50" = SmartTools Publishing • Word Adressfenster-Assistent

"SmartToolsAutoBackupv2.50" = SmartTools Publishing • Excel AutoBackup

"ST6UNST #1" = BEWERBUNGSMASTER

"ST6UNST #2" = BEWERBUNGSMASTER (e:\Programme\BEWERBUNGSMASTER\)

"WFTK" = Canon Utilities WFT Utility

"XnView Shell Extension_is1" = XnView Shell Extension 3.2.0 (64bits)

"ZoomBrowser EX" = Canon Utilities ZoomBrowser EX

"ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.18

"Mediencenter" = Mediencenter 3.8.1.2208

"Mozilla Firefox 23.0.1 (x86 de)" = Mozilla Firefox 23.0.1 (x86 de)

"SkyDriveSetup.exe" = Microsoft SkyDrive

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 09.09.2013 09:27:18 | Computer Name = Kobolt | Source = SideBySide | ID = 16842832

Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Marko\Downloads\esetsmartinstaller_enu.exe".

 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche

 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.

In

 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente

 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error - 09.09.2013 16:32:41 | Computer Name = Kobolt | Source = SideBySide | ID = 16842832

Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files

 (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in  Manifest- oder

 Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche Komponentenversion

 steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt

 stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente

 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error - 11.09.2013 03:29:17 | Computer Name = Kobolt | Source = MemeoBackgroundService | ID = 0

Description = Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException:

 Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException:

 Manche oder alle Identitätsverweise konnten nicht übersetzt werden.     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object

 data)     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary

 properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
 

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties,

 IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
 

   --- Ende der internen Ausnahmestapelüberwachung ---     bei System.RuntimeMethodHandle._InvokeConstructor(Object[]

 args, SignatureStruct& signature, IntPtr declaringType)     bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags

 invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)     bei System.RuntimeType.CreateInstanceImpl(BindingFlags

 bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
 

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry

 entry)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfiguration.Configure(String

 filename, Boolean ensureSecurity)     bei RemoteServerService.MemeoBackgroundService.OnStart(String[]

 args)

 

Error - 11.09.2013 04:37:48 | Computer Name = Kobolt | Source = MemeoBackgroundService | ID = 0

Description = Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException:

 Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException:

 Manche oder alle Identitätsverweise konnten nicht übersetzt werden.     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object

 data)     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary

 properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
 

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties,

 IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
 

   --- Ende der internen Ausnahmestapelüberwachung ---     bei System.RuntimeMethodHandle._InvokeConstructor(Object[]

 args, SignatureStruct& signature, IntPtr declaringType)     bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags

 invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)     bei System.RuntimeType.CreateInstanceImpl(BindingFlags

 bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
 

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry

 entry)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfiguration.Configure(String

 filename, Boolean ensureSecurity)     bei RemoteServerService.MemeoBackgroundService.OnStart(String[]

 args)

 

Error - 15.09.2013 05:27:09 | Computer Name = Kobolt | Source = MemeoBackgroundService | ID = 0

Description = Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException:

 Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException:

 Manche oder alle Identitätsverweise konnten nicht übersetzt werden.     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object

 data)     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary

 properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
 

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties,

 IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
 

   --- Ende der internen Ausnahmestapelüberwachung ---     bei System.RuntimeMethodHandle._InvokeConstructor(Object[]

 args, SignatureStruct& signature, IntPtr declaringType)     bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags

 invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)     bei System.RuntimeType.CreateInstanceImpl(BindingFlags

 bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
 

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry

 entry)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfiguration.Configure(String

 filename, Boolean ensureSecurity)     bei RemoteServerService.MemeoBackgroundService.OnStart(String[]

 args)

 

Error - 16.09.2013 07:23:29 | Computer Name = Kobolt | Source = MemeoBackgroundService | ID = 0

Description = Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException:

 Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException:

 Manche oder alle Identitätsverweise konnten nicht übersetzt werden.     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object

 data)     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary

 properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
 

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties,

 IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
 

   --- Ende der internen Ausnahmestapelüberwachung ---     bei System.RuntimeMethodHandle._InvokeConstructor(Object[]

 args, SignatureStruct& signature, IntPtr declaringType)     bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags

 invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)     bei System.RuntimeType.CreateInstanceImpl(BindingFlags

 bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
 

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry

 entry)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfiguration.Configure(String

 filename, Boolean ensureSecurity)     bei RemoteServerService.MemeoBackgroundService.OnStart(String[]

 args)

 

Error - 16.09.2013 08:06:42 | Computer Name = Kobolt | Source = SideBySide | ID = 16842832

Description = Fehler beim Generieren des Aktivierungskontexts für "E:\Programme\Nero\Nero\Nero8\Nero

 Toolkit\DiscSpeed.exe". Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine

 für die Anwendung erforderliche Komponentenversion steht in Konflikt mit  einer anderen,

 bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.  Komponente

 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente

 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error - 16.09.2013 08:06:43 | Computer Name = Kobolt | Source = SideBySide | ID = 16842832

Description = Fehler beim Generieren des Aktivierungskontexts für "E:\Programme\Nero\Nero\Nero8\Nero

 PhotoSnap\PhotoSnap.exe". Fehler in  Manifest- oder Richtliniendatei "" in Zeile 

.  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit  einer

 anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.  Komponente

 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente

 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

 

Error - 16.09.2013 08:06:43 | Computer Name = Kobolt | Source = SideBySide | ID = 16842832

Description = Fehler beim Generieren des Aktivierungskontexts für "E:\Programme\Nero\Nero\Nero8\Nero

 PhotoSnap\PhotoSnapViewer.exe". Fehler in  Manifest- oder Richtliniendatei "" in 

Zeile .  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt

 mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.

Komponente

 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente

 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

 

Error - 18.09.2013 08:51:25 | Computer Name = Kobolt | Source = MemeoBackgroundService | ID = 0

Description = Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException:

 Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException:

 Manche oder alle Identitätsverweise konnten nicht übersetzt werden.     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object

 data)     bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary

 properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
 

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties,

 IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
 

   --- Ende der internen Ausnahmestapelüberwachung ---     bei System.RuntimeMethodHandle._InvokeConstructor(Object[]

 args, SignatureStruct& signature, IntPtr declaringType)     bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags

 invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)     bei System.RuntimeType.CreateInstanceImpl(BindingFlags

 bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
 

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry

 entry)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData

 configData, Boolean ensureSecurity)     bei System.Runtime.Remoting.RemotingConfiguration.Configure(String

 filename, Boolean ensureSecurity)     bei RemoteServerService.MemeoBackgroundService.OnStart(String[]

 args)

 

[ System Events ]

Error - 18.09.2013 08:51:35 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst"

 abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%2

 

Error - 18.09.2013 08:51:35 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7023

Description = Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet:

   %%2

 

Error - 18.09.2013 08:51:35 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst"

 abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%2

 

Error - 18.09.2013 08:51:35 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7023

Description = Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet:

   %%2

 

Error - 18.09.2013 08:54:01 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst"

 abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%2

 

Error - 18.09.2013 08:54:01 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7023

Description = Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet:

   %%2

 

Error - 18.09.2013 08:54:01 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7023

Description = Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet:

   %%2

 

Error - 18.09.2013 08:54:01 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst"

 abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%2

 

Error - 18.09.2013 08:54:01 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7023

Description = Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet:

   %%2

 

Error - 18.09.2013 08:54:01 | Computer Name = Kobolt | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst"

 abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%2

 

 

< End of report >

mk72	18.09.2013 15:57

Das log-file von OTL musste ich trennen!

Teil 1

Code:

OTL logfile created on: 18.09.2013 15:08:33 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Marko\Desktop

64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16686)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

8,00 Gb Total Physical Memory | 5,68 Gb Available Physical Memory | 71,07% Memory free

15,99 Gb Paging File | 13,43 Gb Available in Paging File | 83,96% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 104,75 Gb Total Space | 24,29 Gb Free Space | 23,19% Space Free | Partition Type: NTFS

Drive D: | 465,76 Gb Total Space | 401,88 Gb Free Space | 86,28% Space Free | Partition Type: NTFS

Drive E: | 41,22 Gb Total Space | 11,65 Gb Free Space | 28,26% Space Free | Partition Type: NTFS

Drive F: | 180,27 Gb Total Space | 43,81 Gb Free Space | 24,30% Space Free | Partition Type: NTFS

Drive G: | 89,52 Gb Total Space | 16,88 Gb Free Space | 18,86% Space Free | Partition Type: NTFS

Drive H: | 50,00 Gb Total Space | 27,10 Gb Free Space | 54,20% Space Free | Partition Type: NTFS

Drive K: | 931,51 Gb Total Space | 21,68 Gb Free Space | 2,33% Space Free | Partition Type: NTFS

Drive P: | 1907,32 Gb Total Space | 1885,23 Gb Free Space | 98,84% Space Free | Partition Type: FAT32

 

Computer Name: KOBOLT | User Name: Marko | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2013.09.18 15:04:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Marko\Desktop\OTL.exe

PRC - [2013.09.04 11:36:37 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe

PRC - [2013.09.04 11:36:27 | 000,347,192 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe

PRC - [2013.09.04 11:36:27 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe

PRC - [2012.09.17 07:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) -- E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

PRC - [2012.08.28 08:41:08 | 000,092,632 | ---- | M] (TomTom) -- E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe

PRC - [2012.04.23 15:42:36 | 006,082,560 | ---- | M] (Visagesoft) -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe

PRC - [2011.09.16 15:39:24 | 000,115,048 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

PRC - [2011.05.24 11:33:30 | 001,840,128 | ---- | M] (MAGIX AG) -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

PRC - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

PRC - [2009.12.23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2012.04.11 20:06:12 | 000,517,120 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfeditor160.bpl

MOD - [2012.04.11 20:06:12 | 000,097,280 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\expertpdfcore160.bpl

MOD - [2012.04.11 20:06:10 | 004,680,704 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfcore160.bpl

MOD - [2012.04.11 20:06:08 | 002,478,080 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsvector160.bpl

MOD - [2012.04.11 20:06:08 | 000,064,512 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsprinters160.bpl

MOD - [2012.04.11 20:06:08 | 000,064,512 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprinter160.bpl

MOD - [2012.04.11 20:06:06 | 000,087,552 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspropsaver160.bpl

MOD - [2012.04.11 20:06:04 | 002,693,120 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\bblite160.bpl

MOD - [2012.04.11 20:06:04 | 002,253,824 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\PKIECtrl160.bpl

MOD - [2012.04.11 20:06:02 | 001,186,816 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\TMSlite160.bpl

MOD - [2012.02.23 16:11:28 | 000,025,088 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vstrees160.bpl

MOD - [2011.09.30 19:10:22 | 000,684,032 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\js32.dll

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2013.07.22 00:25:30 | 001,901,752 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe -- (OfficeSvc)

SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2012.04.26 11:14:06 | 002,438,696 | ---- | M] (mobile concepts GmbH) [On_Demand | Stopped] -- C:\Program Files\CyberGhost VPN\CGVPNCliService.exe -- (CGVPNCliSrvc)

SRV:64bit: - [2012.04.06 04:16:02 | 000,236,544 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2011.09.27 21:04:08 | 000,359,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)

SRV:64bit: - [2010.04.06 17:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)

SRV:64bit: - [2009.07.14 03:41:19 | 000,045,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lpdsvc.dll -- (LPDSVC)

SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV:64bit: - [2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\svchost.exe -- (LanmanWorkstation)

SRV - [2013.09.04 11:36:37 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2013.09.04 11:36:29 | 000,815,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Disabled | Stopped] -- E:\Programme\Antivir\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)

SRV - [2013.09.04 11:36:27 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2013.07.02 17:21:20 | 000,023,720 | ---- | M] () [Auto | Running] -- e:\Programme\Ocster Backup\bin\backupService-ox.exe -- (ocster_backup)

SRV - [2013.04.18 11:06:42 | 000,737,616 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2013.01.16 22:09:27 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.09.17 07:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor11.0)

SRV - [2012.08.28 08:41:08 | 000,092,632 | ---- | M] (TomTom) [Auto | Running] -- E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)

SRV - [2012.08.06 13:24:22 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)

SRV - [2011.12.05 22:16:03 | 000,114,000 | ---- | M] (Joosoft.com GmbH) [Auto | Running] -- C:\Windows\SysWOW64\UpdSvc.dll -- (Update-Service)

SRV - [2011.11.23 14:02:07 | 000,012,800 | ---- | M] (Deutsche Telekom AG) [Auto | Running] -- E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe -- (MCSWASVR)

SRV - [2011.09.16 01:16:48 | 000,025,824 | ---- | M] (Memeo) [Auto | Running] -- C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe -- (MemeoBackgroundService)

SRV - [2011.05.24 11:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)

SRV - [2011.04.26 14:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)

SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009.12.23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)

SRV - [2009.09.20 11:55:20 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)

SRV - [2009.08.24 22:16:12 | 000,544,768 | ---- | M] (mst software GmbH, Germany) [Auto | Running] -- E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfSdkS64.exe -- (DfSdkS)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2008.09.05 02:09:02 | 000,068,760 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe -- (SandraAgentSrv)

SRV - [2007.05.31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)

SRV - [2007.05.31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - File not found [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys -- (AODDriver4.01)

DRV:64bit: - [2013.09.04 11:36:39 | 000,132,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)

DRV:64bit: - [2013.09.04 11:36:39 | 000,105,344 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)

DRV:64bit: - [2013.07.29 14:31:56 | 000,045,856 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)

DRV:64bit: - [2013.03.06 16:13:37 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)

DRV:64bit: - [2013.02.22 07:32:08 | 000,160,256 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ser2pl64.sys -- (Ser2pl)

DRV:64bit: - [2013.02.12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)

DRV:64bit: - [2013.01.23 10:31:52 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)

DRV:64bit: - [2013.01.23 10:31:52 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)

DRV:64bit: - [2013.01.23 10:31:52 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)

DRV:64bit: - [2013.01.23 10:31:52 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)

DRV:64bit: - [2012.10.17 14:53:46 | 000,026,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)

DRV:64bit: - [2012.08.27 20:39:20 | 000,226,696 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)

DRV:64bit: - [2012.08.27 20:39:16 | 000,107,912 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)

DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012.08.10 04:01:00 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2012.06.05 14:45:16 | 000,237,968 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)

DRV:64bit: - [2012.04.12 01:30:00 | 000,708,200 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2012.04.06 07:22:40 | 011,174,400 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2012.04.06 03:10:44 | 000,343,040 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2012.03.30 16:49:08 | 000,056,448 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)

DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.12.15 20:29:42 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)

DRV:64bit: - [2011.11.04 16:13:22 | 000,059,184 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uimx64.sys -- (UimBus)

DRV:64bit: - [2011.11.04 16:13:20 | 000,572,336 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Uim_IMx64.sys -- (Uim_IM)

DRV:64bit: - [2011.11.04 16:13:20 | 000,352,816 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uim_vimx64.sys -- (Uim_VIM)

DRV:64bit: - [2011.11.04 16:13:18 | 000,039,728 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hotcore3.sys -- (hotcore3)

DRV:64bit: - [2011.11.02 11:48:26 | 000,021,616 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)

DRV:64bit: - [2011.09.21 11:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)

DRV:64bit: - [2011.09.02 08:30:46 | 000,042,776 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)

DRV:64bit: - [2011.09.02 08:30:36 | 000,060,696 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)

DRV:64bit: - [2011.09.02 08:30:24 | 000,076,056 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LEqdUsb.sys -- (LEqdUsb)

DRV:64bit: - [2011.09.02 08:30:24 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)

DRV:64bit: - [2011.09.02 08:30:24 | 000,015,128 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidEqd.sys -- (LHidEqd)

DRV:64bit: - [2011.03.02 17:48:56 | 000,030,800 | ---- | M] (O&O Software GmbH) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\OODrvled.sys -- (oodrvled)

DRV:64bit: - [2010.11.20 06:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 03:43:58 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)

DRV:64bit: - [2010.10.29 17:11:42 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV:64bit: - [2010.06.14 10:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)

DRV:64bit: - [2010.02.18 10:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)

DRV:64bit: - [2009.12.21 17:39:40 | 000,051,712 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtTeam60.sys -- (TEAM)

DRV:64bit: - [2009.12.21 17:39:40 | 000,051,712 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtTeam60.sys -- (RTTEAMPT)

DRV:64bit: - [2009.10.07 12:13:34 | 000,070,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2009.10.07 12:13:34 | 000,028,728 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2009.07.20 04:27:34 | 000,027,136 | ---- | M] (Realtek                                            ) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\RtNdPt60.sys -- (RtNdPt60)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.05.04 18:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)

DRV:64bit: - [2009.02.20 18:09:18 | 000,054,272 | ---- | M] (Siemens Home and Office Communication Devices GmbH & Co. KG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GigasetGenericUSB_x64.sys -- (GigasetGenericUSB_x64)

DRV:64bit: - [2007.12.03 04:20:54 | 000,024,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtVlan60.sys -- (RTVLANPT)

DRV:64bit: - [2000.01.01 02:00:00 | 000,096,896 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2000.01.01 02:00:00 | 000,082,560 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)

DRV:64bit: - [2000.01.01 02:00:00 | 000,042,624 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)

DRV - [2012.10.09 16:22:55 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)

DRV - [2012.03.05 17:04:30 | 000,053,888 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\ATI\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1)

DRV - [2012.02.01 13:47:46 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)

DRV - [2012.02.01 13:43:38 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv)

DRV - [2010.06.14 10:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)

DRV - [2009.08.08 00:46:56 | 000,023,112 | ---- | M] (SiSoftware) [Kernel | On_Demand | Stopped] -- E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\sandra.sys -- (SANDRA)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

DRV - [2006.10.05 17:07:28 | 000,072,608 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysWow64\drivers\TPkd.sys -- (TPkd)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.jan-records.de/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 10 F8 97 CE 93 04 CA 01  [binary data]

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR

IE - HKCU\..\SearchScopes\{B8043587-EBE9-4754-9E02-4BD5899FE7BA}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=971163&p={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box;192.168.178.1

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledAddons: DeviceDetection%40logitech.com:1.24.0.9

FF - prefs.js..extensions.enabledAddons: maps%40ovi.com:5.9.2.0

FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10

FF - prefs.js..extensions.enabledAddons: %7B5D3F3872-91E9-4d59-AD9F-AA174A3145DD%7D:4.00.33

FF - prefs.js..extensions.enabledAddons: %7BCE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B%7D:3.9

FF - prefs.js..extensions.enabledAddons: fb_add_on%40avm.de:1.7.0

FF - prefs.js..extensions.enabledAddons: %7Bd49175b3-3fd8-43b8-b28e-da5d47f3c398%7D:1.0.51

FF - prefs.js..extensions.enabledAddons: %7B9AA46F4F-4DC7-4c06-97AF-5035170634FE%7D:7.1

FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21

FF - prefs.js..extensions.enabledAddons: %7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.182

FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20130915

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF - HKLM\Software\MozillaPlugins\@canon.com/MycameraPlugin: E:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Plus Web Player Plug-In,version=1.0.0: e:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: e:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: E:\Programme\Java\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}: C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt [2012.04.19 15:08:03 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.09.14 09:48:59 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013.09.02 17:15:46 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Components: e:\Programme\Mozilla Firefox\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Plugins: e:\Programme\Mozilla Firefox\plugins [2013.08.18 14:19:58 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.09.14 09:48:59 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: E:\Programme\Mozilla Firefox\components

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: E:\Programme\Mozilla Firefox\plugins [2013.08.18 14:19:58 | 000,000,000 | ---D | M]

 

[2012.08.03 13:09:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\Extensions

[2012.08.03 13:09:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\Extensions\home2@tomtom.com

[2013.09.15 12:49:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions

[2013.09.15 12:49:35 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

[2013.08.28 13:20:33 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2012.04.19 14:55:30 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\DeviceDetection@logitech.com

[2013.04.16 21:36:24 | 000,000,000 | ---D | M] ("FRITZ!Box AddOn") -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\fb_add_on@avm.de

[2012.05.25 16:40:50 | 000,000,000 | ---D | M] (Nokia Maps 3D browser plugin) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\maps@ovi.com

[2013.08.21 16:06:56 | 000,346,097 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\langpack-de@firefox.mozilla.org.xpi

[2013.08.25 17:31:49 | 000,149,240 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi

[2013.02.12 15:27:59 | 000,328,332 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}.xpi

[2013.08.15 12:00:58 | 000,395,932 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi

[2011.12.05 22:33:54 | 000,434,392 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi

[2012.03.05 16:40:50 | 000,000,003 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\maps@ovi.com\plugins\package.XPI

[2012.04.19 15:08:03 | 000,000,000 | ---D | M] (Logitech Flow Scroll) -- C:\PROGRAM FILES\LOGITECH\FLOWSCROLL\LOGISMOOTHFIREFOXEXT

[2013.09.02 17:15:46 | 000,000,000 | ---D | M] (No name found) -- E:\PROGRAMME\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5

 

O1 HOSTS File: ([2013.09.05 15:38:01 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

O2:64bit: - BHO: (ExplorerBHO Class) - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

O2:64bit: - BHO: (Logitech Flow Scroll) - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll (Logitech, Inc.)

O2:64bit: - BHO: (ClassicIE9BHO Class) - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - e:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

O2 - BHO: (ExplorerBHO Class) - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programme\Java\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Programme\Java\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (Logitech Flow Scroll) - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll (Logitech, Inc.)

O2 - BHO: (ClassicIE9BHO Class) - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

O3:64bit: - HKLM\..\Toolbar: (Classic Explorer Bar) - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

O3 - HKLM\..\Toolbar: (Classic Explorer Bar) - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)

O4:64bit: - HKLM..\Run: [Classic Start Menu] E:\Programme\Classic Shell\ClassicStartMenu.exe (IvoSoft)

O4:64bit: - HKLM..\Run: [EvtMgr6] E:\Programme\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)

O4:64bit: - HKLM..\Run: [LogiScrollApp] C:\Program Files\Logitech\FlowScroll\KhalScroll.exe (Logitech, Inc.)

O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)

O4:64bit: - HKLM..\Run: [Ocster Backup] E:\Programme\Ocster Backup\bin\backupClient-ox.exe ()

O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4 - HKLM..\Run: []  File not found

O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [avgnt] E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [DivXMediaServer] e:\Programme\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)

O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()

O4 - HKLM..\Run: [Memeo Instant Backup] C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe (Memeo Inc.)

O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)

O4 - HKLM..\Run: [StartCCC] C:\ATI\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [vspdfprsrv.exe] e:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe (Visagesoft)

O4 - HKCU..\Run: [AmazonMP3DownloaderHelper] C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe ()

O4 - HKCU..\Run: [BrowserMask] E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe (Microsoft)

O4 - HKCU..\Run: [DeskDriveStartup] E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe (Blue Onion Software)

O4 - Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

O4 - Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

O4 - Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk = C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)

O4 - Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = E:\Programme\Rainmeter\Rainmeter.exe ()

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)

O8:64bit: - Extra context menu item: Nach Microsoft &Excel exportieren - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found

O8:64bit: - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)

O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)

O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Classic IE9 Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - E:\Programme\Classic Shell\ClassicIE9_32.exe (IvoSoft)

O9:64bit: - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Classic IE9 Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - E:\Programme\Classic Shell\ClassicIE9_32.exe (IvoSoft)

O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O13 - gopher Prefix: missing

O15 - HKCU\..Trusted Ranges: Range1 ([*] in Local intranet)

O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx (Dldrv2 Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.25.2)

O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.25.2)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{439A6B06-4174-4A81-B708-0B408A600E04}: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D357B98D-C73F-4A93-BF6C-65F5C3794884}: DhcpNameServer = 192.168.178.1

O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found

O18:64bit: - Protocol\Handler\osf - No CLSID value found

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.09.18 15:04:53 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Marko\Desktop\OTL.exe

[2013.09.09 15:00:48 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Polli

[2013.09.06 12:18:09 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2013.09.06 11:32:15 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2013.09.06 11:00:09 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

[2013.09.06 11:00:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2013.09.06 11:00:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware

[2013.09.06 11:00:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2013.09.05 15:40:12 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN

[2013.09.05 15:26:22 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe

[2013.09.05 15:26:22 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe

[2013.09.05 15:26:22 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe

[2013.09.05 15:26:17 | 000,000,000 | ---D | C] -- C:\Qoobox

[2013.09.05 15:26:03 | 000,000,000 | ---D | C] -- C:\Windows\erdnt

[2013.09.05 15:22:02 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Trojaner-Board

[2013.09.04 14:22:03 | 000,000,000 | ---D | C] -- C:\FRST

[2013.08.29 08:53:12 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Hausbau

[2013.08.28 16:21:52 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\Avira

[2013.08.28 16:18:51 | 000,081,112 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013.08.28 16:17:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

[2013.08.28 16:17:09 | 000,132,088 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013.08.28 16:17:09 | 000,105,344 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013.08.28 16:17:09 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys

[2013.08.28 16:17:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira

[2013.08.26 14:38:50 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Kaspersky

[2013.08.25 18:15:23 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Local\BewerbungsMaster

[2013.08.25 18:14:01 | 000,000,000 | ---D | C] -- C:\Users\Marko\Documents\BewerbungsMaster

[2013.08.25 18:13:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

[2013.08.25 18:13:16 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

[2013.08.25 17:23:38 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Nick_Ausbildung

[2013.08.22 15:01:48 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\dvdcss

[2013.08.22 14:58:17 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

[2013.08.22 14:58:05 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\Broad Intelligence

[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.09.18 15:17:47 | 000,000,338 | ---- | M] () -- C:\Windows\tasks\HP Photo Creations Communicator.job

[2013.09.18 15:15:04 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013.09.18 15:04:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Marko\Desktop\OTL.exe

[2013.09.18 15:01:32 | 000,015,856 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013.09.18 15:01:32 | 000,015,856 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013.09.18 14:52:05 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013.09.18 14:51:01 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013.09.16 19:30:30 | 000,076,305 | ---- | M] () -- C:\Windows\SysNative\log.xml

[2013.09.16 19:30:30 | 000,000,008 | ---- | M] () -- C:\Windows\SysNative\log-suffix.xml

[2013.09.11 10:37:18 | 003,584,480 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2013.09.09 15:25:00 | 001,622,098 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013.09.09 15:25:00 | 000,700,370 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2013.09.09 15:25:00 | 000,655,092 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013.09.09 15:25:00 | 000,149,184 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2013.09.09 15:25:00 | 000,121,964 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013.09.05 15:38:01 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2013.09.04 14:08:33 | 000,000,344 | ---- | M] () -- C:\Users\Marko\defogger_reenable

[2013.09.04 11:36:39 | 000,132,088 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013.09.04 11:36:39 | 000,105,344 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013.09.04 11:36:39 | 000,081,112 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013.09.02 17:15:46 | 000,000,787 | ---- | M] () -- C:\Users\Marko\Desktop\DivX Movies.lnk

[2013.09.02 17:15:40 | 000,000,754 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk

[2013.08.29 20:08:36 | 000,001,066 | ---- | M] () -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk

[2013.08.26 14:53:05 | 000,002,453 | ---- | M] () -- C:\Users\Public\Desktop\SeaTools for Windows.lnk

[2013.08.23 20:20:08 | 000,000,370 | ---- | M] () -- C:\Windows\tasks\One-Click Optimizer.job

[2013.08.23 13:05:58 | 000,001,147 | ---- | M] () -- C:\Users\Marko\Desktop\Mediencenter.lnk

[2013.08.23 13:05:58 | 000,001,139 | ---- | M] () -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk

[2013.08.22 14:58:17 | 000,000,687 | ---- | M] () -- C:\Users\Marko\Desktop\MediaCoder x64.lnk

[2013.08.22 14:33:38 | 000,018,944 | ---- | M] () -- C:\Users\Marko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2013.08.22 14:30:49 | 000,000,124 | ---- | M] () -- C:\Users\Marko\Documents\ax_files.xml

[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2013.09.05 15:26:22 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe

[2013.09.05 15:26:22 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe

[2013.09.05 15:26:22 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe

[2013.09.05 15:26:22 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe

[2013.09.05 15:26:22 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe

[2013.09.04 14:08:33 | 000,000,344 | ---- | C] () -- C:\Users\Marko\defogger_reenable

[2013.09.02 17:15:46 | 000,000,787 | ---- | C] () -- C:\Users\Marko\Desktop\DivX Movies.lnk

[2013.09.02 17:15:40 | 000,000,754 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk

[2013.08.29 20:08:36 | 000,001,066 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk

[2013.08.22 14:58:17 | 000,000,687 | ---- | C] () -- C:\Users\Marko\Desktop\MediaCoder x64.lnk

[2013.06.24 16:22:35 | 000,000,132 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\Adobe CS5-Voreinstellungen für BMP-Format

[2013.06.07 10:07:28 | 000,000,019 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\Network Meter_Usage.ini

[2013.02.28 21:03:46 | 000,544,256 | ---- | C] () -- C:\Windows\SysWow64\janGraphics.dll

[2012.11.01 19:48:10 | 011,624,448 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\Sandra.mdb

[2012.10.22 14:54:56 | 000,164,352 | ---- | C] () -- C:\Windows\SysWow64\UNRAR.DLL

[2012.10.22 14:54:56 | 000,075,264 | ---- | C] () -- C:\Windows\SysWow64\UNACEV2.DLL

[2012.10.01 17:08:09 | 000,000,624 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\All CPU MeterV3_Settings.ini

[2012.09.14 11:41:21 | 000,019,159 | ---- | C] () -- C:\Windows\hpqins13.dat.temp

[2012.09.14 11:40:35 | 000,019,159 | ---- | C] () -- C:\Windows\hpqins13.dat

[2012.09.14 11:19:19 | 000,181,225 | ---- | C] () -- C:\Windows\hpoins29.dat.temp

[2012.09.14 11:19:19 | 000,000,457 | ---- | C] () -- C:\Windows\hpomdl29.dat.temp

[2012.09.14 10:01:52 | 000,000,000 | ---- | C] () -- C:\Windows\HPMProp.INI

[2012.09.14 09:46:47 | 000,221,040 | ---- | C] () -- C:\Windows\hpoins30.dat

[2012.09.14 09:46:47 | 000,000,587 | ---- | C] () -- C:\Windows\hpomdl30.dat

[2012.08.29 22:00:20 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib

[2012.08.15 11:58:52 | 000,000,021 | ---- | C] () -- C:\Users\Marko\AppData\Local\mc.pixel.data

[2012.05.22 11:07:10 | 000,091,136 | ---- | C] () -- C:\Windows\SendToClip.exe

[2012.04.26 22:38:20 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2012.03.09 06:31:26 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat

[2012.03.09 06:31:26 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat

[2012.02.28 17:41:26 | 000,725,514 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\unins000.exe

[2012.02.28 17:41:26 | 000,559,104 | ---- | C] () -- C:\Windows\SysWow64\lame.exe

[2012.02.28 17:41:26 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll

[2012.02.28 17:41:26 | 000,110,080 | ---- | C] () -- C:\Windows\SysWow64\advd.dll

[2012.02.28 17:41:26 | 000,023,040 | ---- | C] () -- C:\Windows\SysWow64\auth.dll

[2012.02.28 17:41:26 | 000,007,232 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\unins000.dat

[2012.02.01 13:17:14 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys

[2012.01.31 07:00:24 | 000,016,896 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll

[2012.01.03 18:30:21 | 000,018,944 | ---- | C] () -- C:\Users\Marko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.12.30 19:51:46 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini

[2011.12.28 18:56:34 | 001,599,056 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2011.12.09 14:00:24 | 000,007,597 | ---- | C] () -- C:\Users\Marko\AppData\Local\Resmon.ResmonCfg

[2011.12.09 13:08:03 | 000,000,026 | ---- | C] () -- C:\Windows\Irremote.ini

[2011.12.06 19:30:03 | 000,010,349 | ---- | C] () -- C:\Windows\Q-Dir.ini

[2011.12.06 16:22:02 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI

[2011.12.05 21:44:45 | 000,000,412 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\All CPU Meter_Settings.ini

[2011.12.05 21:03:06 | 000,180,939 | ---- | C] () -- C:\Windows\hpoins29.dat

[2011.12.05 21:03:06 | 000,000,457 | ---- | C] () -- C:\Windows\hpomdl29.dat

[2011.12.05 18:35:13 | 000,017,408 | ---- | C] () -- C:\Users\Marko\AppData\Local\WebpageIcons.db

[2011.10.25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OVDecoder.dll

[2011.06.27 13:53:01 | 000,002,855 | ---- | C] () -- C:\Users\Marko\log.xml

[2011.06.27 13:53:01 | 000,000,008 | ---- | C] () -- C:\Users\Marko\log-suffix.xml

[2008.12.27 20:33:10 | 000,001,024 | ---- | C] () -- C:\Users\Marko\.rnd

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 05:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2013.07.24 15:09:10 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Amazon

[2012.05.22 09:40:32 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\AntiBrowserSpy 2009

[2013.07.25 15:35:23 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Ashampoo

[2012.06.04 22:22:23 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\becker

[2013.08.22 14:58:05 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Broad Intelligence

[2012.02.01 10:36:17 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Canon

[2012.08.13 13:45:38 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

[2012.08.03 17:26:09 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

[2012.02.28 17:41:26 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\concept design

[2012.11.07 14:31:42 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\DAEMON Tools Lite

[2012.10.22 15:33:01 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Dateicommander

[2012.04.17 13:42:53 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\DxO Labs

[2012.04.17 13:43:05 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\DxO_Labs

[2013.03.20 14:14:11 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\EurekaLog

[2012.08.16 13:49:03 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\FileZilla

[2011.12.20 15:54:35 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Foxit Software

[2012.02.28 17:41:26 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Franzis

[2013.07.10 14:18:11 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\GeoSetter

[2012.05.22 11:11:28 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Hyperionics

[2012.09.13 22:16:36 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\IT-Service Christian Hau (www.a-bit-more.de)

[2012.09.13 22:13:10 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\IT-Service Christian Hau - www.a-bit-more.de

[2013.03.08 22:26:35 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\KeePass

[2012.01.03 21:55:41 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Leadertech

[2012.11.30 10:51:40 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\MAGIX

[2012.03.12 17:56:46 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\map&guide

[2013.08.19 14:00:16 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Memeo

[2013.09.02 17:43:47 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Mp3tag

[2013.01.25 15:12:58 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\NetSpeedMonitor

[2011.12.06 19:47:32 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Nitro PDF

[2012.12.11 18:26:56 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\No Company Name

[2012.07.24 12:02:42 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Nokia

[2012.07.24 12:01:51 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Nokia Suite

[2012.05.24 08:25:37 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\OfficeRecovery

[2012.05.24 08:25:37 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\OfficeRecovery.b3c38332

[2013.08.29 16:39:56 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\onOne Software

[2012.04.17 13:40:41 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PACE Anti-Piracy

[2012.09.17 17:47:05 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PC Suite

[2012.09.25 17:35:55 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PDAppFlex

[2013.03.18 22:57:12 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PDF Experte 8

[2013.01.14 16:07:53 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PDF Writer

[2011.12.06 19:35:21 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Q-Dir

[2013.03.13 19:29:23 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Rainmeter

[2012.01.04 18:37:52 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Samsung

[2012.05.24 08:57:51 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\SmartTools

[2013.04.21 20:07:30 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Telekom

[2012.08.03 13:09:55 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\TomTom

[2012.09.14 10:49:44 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Visan

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Telephony\Providers >

"ProviderID0" = 1

"ProviderID1" = 2

"ProviderID2" = 3

"ProviderID3" = 4

"NextProviderID" = 5

"ProviderFileName0" = unimdm.tsp -- [2010.11.20 05:16:54 | 000,281,088 | ---- | M] (Microsoft Corporation)

"ProviderFileName1" = kmddsp.tsp -- [2009.07.14 03:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation)

"ProviderFileName2" = ndptsp.tsp -- [2009.07.14 03:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation)

"ProviderFileName3" = hidphone.tsp -- [2009.07.14 03:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation)

"NumProviders" = 4

 
 < HKEY_LOCAL_MACHINE\software\Wow6432Node\microsoft\Windows\CurrentVersion\Telephony\Providers >

"ProviderID0" = 1

"ProviderID1" = 2

"ProviderID2" = 3

"ProviderID3" = 4

"NextProviderID" = 5

"ProviderFileName0" = unimdm.tsp -- [2010.11.20 05:16:54 | 000,281,088 | ---- | M] (Microsoft Corporation)

"ProviderFileName1" = kmddsp.tsp -- [2009.07.14 03:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation)

"ProviderFileName2" = ndptsp.tsp -- [2009.07.14 03:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation)

"ProviderFileName3" = hidphone.tsp -- [2009.07.14 03:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation)

"NumProviders" = 4

 
 < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation /S >

"DisplayName" = Arbeitsstationsdienst

"Group" = NetworkProvider

"ImagePath" = %SystemRoot%\System32\svchost.exe -k NetworkService -- [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation)

"Description" = @%systemroot%\system32\wkssvc.dll,-101

"ObjectName" = NT AUTHORITY\NetworkService

"ErrorControl" = 1

"Start" = 2

"Type" = 32

"DependOnService" = BowserMRxSmb10MRxSmb20NSI [binary data]

"ServiceSidType" = 1

"RequiredPrivileges" = SeChangeNotifyPrivilegeSeImperson [Binary data over 200 bytes]

"FailureActions" = 80 51 01 00 00 00 00 00 00 00 00 00 03 00 00 00 14 00 00 00 01 00 00 00 60 EA 00 00 01 00 00 00 C0 D4 01 00 00 00 00 00 00 00 00 00  [binary data]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Linkage]

"Bind" = \Device\Smb_Tcpip_{72EA0A8B-701E-4 [Binary data over 200 bytes]

"Route" = "Smb" "Tcpip" "{72EA0A8B-701E-4632 [Binary data over 200 bytes]

"Export" = \Device\LanmanWorkstation_Smb_Tcpi [Binary data over 200 bytes]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\NetworkProvider]

"DeviceName" = \Device\LanmanRedirector

"Name" = Microsoft Windows Network

"DisplayName" = @%systemroot%\system32\wkssvc.dll,-102

"ProviderPath" = %SystemRoot%\System32\ntlanman.dll -- [2010.11.20 05:20:48 | 000,069,120 | ---- | M] (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters]

"ServiceDllUnloadOnStop" = 1

"EnablePlainTextPassword" = 0

"EnableSecuritySignature" = 1

"RequireSecuritySignature" = 0

"OtherDomains" =  [binary data]

 
 < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache /S >

"DisplayName" = @%SystemRoot%\System32\dnsapi.dll,-101

"Group" = TDI

"ImagePath" = %SystemRoot%\system32\svchost.exe -k NetworkService -- [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation)

"Description" = @%SystemRoot%\System32\dnsapi.dll,-102

"ObjectName" = NT AUTHORITY\NetworkService

"ErrorControl" = 1

"Start" = 2

"Type" = 32

"DependOnService" = Tdxnsi [binary data]

"ServiceSidType" = 1

"RequiredPrivileges" = SeChangeNotifyPrivilegeSeCreateGlobalPrivilege [binary data]

"FailureActions" = 80 51 01 00 00 00 00 00 00 00 00 00 03 00 00 00 14 00 00 00 01 00 00 00 C0 D4 01 00 01 00 00 00 E0 93 04 00 00 00 00 00 00 00 00 00  [binary data]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\Parameters]

"ServiceDll" = %SystemRoot%\System32\dnsrslvr.dll

"ServiceDllUnloadOnStop" = 1

"extension" = %SystemRoot%\System32\dnsext.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\Parameters\DnsCache]

"ShutdownOnIdle" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\Security]

"Security" = 01 00 14 80 F8 00 00 00 04 01 00 00 14 00 00 00 30 00 00 00 02 00 1C 00 01 00 00 00 02 80 14 00 FF 01 0F 00 01 01 00 00 00 00 00 01 00 00 00 00 02 00 C8 00 08 00 00 00 00 02 18 00 9D 01 02 00 01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00 00 02 18 00 FF 01 0F 00 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 00 02 14 00 FD 01 02 00 01 01 00 00 00 00 00 05 12 00 00 00 00 00 14 00 8D 01 02 00 01 01 00 00 00 00 00 05 04 00 00 00 00 02 14 00 8D 00 02 00 01 01 00 00 00 00 00 05 14 00 00 00 00 02 14 00 8D 00 02 00 01 01 00 00 00 00 00 05 13 00 00 00 00 02 18 00 CD 00 02 00 01 02 00 00 00 00 00 05 20 00 00 00 2C 02 00 00 00 02 28 00 CD 01 02 00 01 06 00 00 00 00 00 05 50 00 00 00 04 C9 44 AF 94 D9 D3 E5 2B E1 B7 1C 17 84 87 13 6E 1A FA 65 01 01 00 00 00 00 00 05 12 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00  [Binary data over 200 bytes]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\TriggerInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\TriggerInfo\0]

"Type" = 4

"Action" = 1

"GUID" = 07 9E 56 B7 21 84 E0 4E AD 10 86 91 5A FD AD 09  [binary data]

"Data0" = 5355UDP [binary data]

"DataType0" = 2

 
 < HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost >

"netsvcs" = AeLookupSvcCertPropSvcSCPolicySv [Binary data over 200 bytes]

"LocalService" = RemoteRegistryWinHttpAutoProxySvc [Binary data over 200 bytes]

"LocalSystemNetworkRestricted" = NetmanAudioEndpointBuilderdot3sv [Binary data over 200 bytes]

"LocalServiceNoNetwork" = PLA [binary data] -- [2010.11.20 05:20:56 | 001,508,864 | ---- | M] (Microsoft Corporation)

"rpcss" = RpcSs [binary data]

"LocalServiceNetworkRestricted" = AudioSrvBthHFSrvLmHostswscsvcWPCSvc [binary data]

"LocalServiceAndNoImpersonation" = SSDPSRVupnphostSCardSvrTBSQWAVEwcncsvc [binary data]

"DcomLaunch" = PowerPlugPlayDcomLaunch [binary data]

"NetworkService" = CryptSvcDHCPTermServiceDNSCache [Binary data over 200 bytes]

"imgsvc" = StiSvc [binary data]

"wcssvc" = WcsPlugInService [binary data] -- [2009.07.14 03:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation)

"hpdevmgmt" = hpqcxs08hpqddsvc [binary data]

"Update-Service-Installer-Service" = Update-Service-Installer-Service [binary data]

"Update-Service" = Update-Service [binary data]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\LocalService]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\LocalServiceAndNoImpersonation]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\LocalServiceNetworkRestricted]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\LocalServiceNoNetwork]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\LocalSystemNetworkRestricted]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\netsvcs]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\NetworkService]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\NetworkServiceRemoteDesktopHyperVAgent]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\NetworkServiceRemoteDesktopPublishing]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\termsvcs]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\wcssvc]

 
 < HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost >

"netsvcs" = AeLookupSvcCertPropSvcSCPolicySv [Binary data over 200 bytes]

"LocalService" = RemoteRegistryWinHttpAutoProxySvc [Binary data over 200 bytes]

"LocalSystemNetworkRestricted" = NetmanAudioEndpointBuilderdot3sv [Binary data over 200 bytes]

"LocalServiceNoNetwork" = PLA [binary data] -- [2010.11.20 05:20:56 | 001,508,864 | ---- | M] (Microsoft Corporation)

"rpcss" = RpcSs [binary data]

"LocalServiceNetworkRestricted" = AudioSrvBthHFSrvLmHostswscsvcWPCSvc [binary data]

"LocalServiceAndNoImpersonation" = SSDPSRVupnphostSCardSvrTBSQWAVEwcncsvc [binary data]

"DcomLaunch" = PowerPlugPlayDcomLaunch [binary data]

"NetworkService" = CryptSvcDHCPTermServiceDNSCache [Binary data over 200 bytes]

"imgsvc" = StiSvc [binary data]

"wcssvc" = WcsPlugInService [binary data] -- [2009.07.14 03:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation)

"hpdevmgmt" = hpqcxs08hpqddsvc [binary data]

"Update-Service-Installer-Service" = Update-Service-Installer-Service [binary data]

"Update-Service" = Update-Service [binary data]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\LocalService]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\LocalServiceAndNoImpersonation]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\LocalServiceNetworkRestricted]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\LocalServiceNoNetwork]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\LocalSystemNetworkRestricted]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\netsvcs]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\NetworkService]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\NetworkServiceRemoteDesktopHyperVAgent]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\NetworkServiceRemoteDesktopPublishing]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\termsvcs]

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\wcssvc]

 
 < HKEY_LOCAL_MACHINE\SOFTWARE\Joosoft.com >

 
 < %SystemRoot%\system32\*.tsp >

[2012.03.01 14:46:38 | 000,495,616 | ---- | M] (Gigaset Communications GmbH) -- C:\Windows\system32\Gqstsp.tsp

[2009.07.14 03:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\hidphone.tsp

[2009.07.14 03:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kmddsp.tsp

[2009.07.14 03:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ndptsp.tsp

[2009.07.14 03:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\remotesp.tsp

[2010.11.20 05:16:54 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\unimdm.tsp

[8 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

 
 < %SystemRoot%\system32\*.tsp /64 >

[2012.03.01 14:53:22 | 000,794,112 | ---- | M] (Gigaset Communications GmbH) -- C:\Windows\SysNative\Gqstsp.tsp

[2009.07.14 03:38:54 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\hidphone.tsp

[2009.07.14 03:38:54 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\kmddsp.tsp

[2009.07.14 03:38:54 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ndptsp.tsp

[2009.07.14 03:38:54 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\remotesp.tsp

[2010.11.20 06:24:26 | 000,321,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\unimdm.tsp

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

 
 < C:\Windows\system32\*.dll /600 >

[2012.08.23 13:15:57 | 000,269,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\aaclient.dll

[2012.07.04 22:30:30 | 013,008,896 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\system32\amdocl.dll

[2012.04.06 03:06:04 | 000,053,760 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\amdpcom32.dll

[2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

[2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

[2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

[2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

[2013.08.02 03:48:15 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

[2013.08.02 02:43:05 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

[2013.08.02 02:43:05 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

[2013.08.02 02:43:05 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

[2013.01.13 23:16:42 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2013.01.13 23:12:46 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2013.01.13 23:17:02 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2013.01.13 23:11:08 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

[2013.01.13 23:11:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

[2013.01.13 23:17:03 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2013.01.13 23:11:07 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2013.01.13 23:11:21 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

[2013.01.13 23:11:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

[2013.08.02 02:43:05 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

[2013.08.02 03:48:15 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\apisetschema.dll

[2012.04.06 04:14:20 | 000,043,520 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\system32\ati2edxx.dll

[2012.04.06 03:11:20 | 000,360,448 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\system32\atiadlxy.dll

[2012.04.06 03:30:06 | 000,044,032 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\system32\aticalcl.dll

[2012.04.06 03:25:30 | 013,764,096 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\system32\aticaldd.dll

[2012.04.06 03:30:14 | 000,046,080 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\system32\aticalrt.dll

[2012.04.06 04:21:52 | 000,909,312 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\aticfx32.dll

[2012.04.06 04:13:42 | 006,800,896 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atidxx32.dll

[2012.04.06 03:10:52 | 000,033,280 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atigktxx.dll

[2012.04.06 03:11:04 | 000,014,848 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atiglpxx.dll

[2012.04.06 03:06:04 | 000,053,760 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atimpc32.dll

[2012.04.06 03:50:56 | 019,753,984 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\system32\atioglxx.dll

[2012.04.06 03:09:34 | 000,032,256 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atiu9pag.dll

[2012.04.06 03:34:04 | 006,203,392 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atiumdag.dll

[2012.04.06 03:34:50 | 001,831,424 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atiumdmv.dll

[2012.04.06 03:22:54 | 004,795,904 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atiumdva.dll

[2012.04.06 03:09:48 | 000,041,984 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\system32\atiuxpag.dll

[2012.12.16 16:13:28 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\system32\atmfd.dll

[2012.12.16 16:13:20 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\system32\atmlib.dll

[2013.02.27 06:49:24 | 001,796,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\authui.dll

[2012.07.04 23:14:34 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\browcli.dll

[2012.12.05 08:14:00 | 000,139,264 | ---- | M] (Bullzip) -- C:\Windows\system32\bzpdfc.dll

[2012.06.06 07:03:06 | 000,805,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\cdosys.dll

[2013.05.13 05:08:06 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\certenc.dll

[2013.07.09 06:46:31 | 001,166,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\crypt32.dll

[2013.05.10 05:20:54 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\cryptdlg.dll

[2013.07.09 06:46:31 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\cryptnet.dll

[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\cryptsvc.dll

[2013.01.13 21:37:57 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d2d1.dll

[2013.01.13 21:46:25 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10.dll

[2013.01.13 22:08:43 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10core.dll

[2013.01.13 21:54:01 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10level9.dll

[2013.01.13 22:22:22 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10warp.dll

[2013.01.13 21:48:47 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10_1.dll

[2013.01.13 22:09:00 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d10_1core.dll

[2013.04.26 01:30:32 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\d3d11.dll

[2013.06.24 16:22:16 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\deployJava1.dll

[2012.10.09 19:40:31 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dhcpcore6.dll

[2012.10.09 19:40:31 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dhcpcsvc6.dll

[2012.07.10 11:43:08 | 000,759,176 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\DLLAV32.dll

[2012.07.10 11:43:08 | 000,157,064 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\DLLCPY32.dll

[2012.07.10 11:43:08 | 000,226,696 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\DLLDEV32.dll

[2012.11.27 21:58:25 | 000,120,200 | ---- | M] () -- C:\Windows\system32\DLLDEV32i.dll

[2012.07.10 11:43:06 | 000,218,504 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\DLLDRV32.dll

[2012.07.10 11:43:06 | 000,099,720 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\DLLIO32.dll

[2012.07.10 11:43:06 | 000,083,336 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\DLLPNT32.dll

[2012.07.10 11:43:06 | 000,095,624 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\DLLPRF32.dll

[2012.07.10 11:43:04 | 000,304,520 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\DLLRES32.dll

[2012.11.02 07:11:31 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dpnet.dll

[2013.04.10 01:34:01 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\DWrite.dll

[2013.01.13 22:20:31 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxgi.dll

[2013.03.12 20:16:54 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxtmsft.dll

[2013.03.12 20:16:54 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxtrans.dll

[2013.03.12 20:16:54 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\elshyph.dll

[2012.12.07 14:20:43 | 002,576,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\gameux.dll

[2013.03.12 20:16:54 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\icardie.dll

[2013.03.12 20:16:54 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\IEAdvpack.dll

[2013.03.12 20:16:54 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieapfltr.dll

[2013.03.12 20:16:54 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iedkcs32.dll

[2013.08.10 05:58:05 | 013,761,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieframe.dll

[2013.03.12 20:16:54 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iepeers.dll

[2013.08.10 05:58:05 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iernonce.dll

[2013.08.10 05:58:06 | 002,048,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iertutil.dll

[2013.08.10 05:58:06 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iesetup.dll

[2013.08.10 05:58:06 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iesysprep.dll

[2013.08.10 05:58:06 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieui.dll

[2012.03.01 07:33:23 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\imagehlp.dll

[2013.03.12 20:16:54 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\imgutil.dll

[2013.03.12 20:16:54 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\inseng.dll

[2013.08.10 05:58:09 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jscript.dll

[2013.08.10 05:58:09 | 002,876,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jscript9.dll

[2013.08.10 05:58:09 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jsproxy.dll

[2012.01.31 07:00:24 | 000,016,896 | ---- | M] () -- C:\Windows\system32\kdbsdk32.dll

[2012.08.11 01:56:14 | 000,542,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kerberos.dll

[2013.08.02 03:50:41 | 001,114,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kernel32.dll

[2013.08.02 03:50:42 | 000,274,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\KernelBase.dll

[2013.03.12 20:16:54 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\licmgr10.dll

[2013.08.10 05:58:21 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeeds.dll

[2013.03.12 20:16:54 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeedsbs.dll

[2013.08.10 05:58:23 | 014,332,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtml.dll

[2013.03.12 20:16:54 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmled.dll

[2013.03.12 20:16:54 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmler.dll

[2013.03.12 20:16:54 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmlmedia.dll

[2012.04.07 13:26:29 | 002,342,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msi.dll

[2013.03.12 20:16:54 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msls31.dll

[2013.01.04 08:11:21 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msmpeg2vdec.dll

[2013.03.12 20:16:54 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msrating.dll

[2012.08.23 15:47:20 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\MsRdpWebAccess.dll

[2012.08.23 10:19:01 | 004,916,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mstscax.dll

[2012.11.01 06:47:54 | 001,236,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msxml3.dll

[2012.11.08 12:29:12 | 001,402,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msxml4.dll

[2012.11.01 06:47:54 | 001,389,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msxml6.dll

[2012.11.20 06:51:09 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ncrypt.dll

[2012.10.03 18:42:23 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ncsi.dll

[2012.07.04 23:16:56 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\netapi32.dll

[2012.10.03 18:42:24 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\netcorehc.dll

[2012.10.03 18:42:24 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\netevent.dll

[2013.06.24 16:22:16 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\npDeployJava1.dll

[2013.08.02 03:51:23 | 001,292,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ntdll.dll

[2013.08.02 02:45:36 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ntvdm64.dll

[2013.03.12 20:16:54 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\occache.dll

[2012.03.09 01:24:14 | 000,048,128 | ---- | M] (Khronos Group) -- C:\Windows\system32\OpenCL.dll

[2012.07.04 22:31:32 | 000,065,024 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\system32\OpenVideo.dll

[2012.07.04 22:31:22 | 000,056,320 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\system32\OVDecode.dll

[2013.03.12 20:16:54 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\pngfilt.dll

[2012.05.04 11:59:54 | 000,514,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\qdvd.dll

[2013.06.04 06:53:07 | 000,509,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\qedit.dll

[2012.02.17 07:34:22 | 000,826,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\rdpcore.dll

[2012.08.23 13:12:17 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\rdpendp_winip.dll

[2013.07.09 06:52:33 | 000,663,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\rpcrt4.dll

[2012.08.24 18:57:40 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\schannel.dll

[2012.08.24 18:57:40 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\secur32.dll

[2013.07.26 03:55:59 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\shdocvw.dll

[2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\shell32.dll

[2012.05.05 09:46:52 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\srclient.dll

[2012.08.24 18:53:35 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\sspicli.dll

[2012.07.10 11:43:04 | 000,071,048 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\system32\STRING32.dll

[2012.09.26 00:47:43 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\synceng.dll

[2012.08.23 15:18:14 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\tsgqec.dll

[2013.07.19 03:41:01 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\tzres.dll

[2013.01.13 21:53:14 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\UIAnimation.dll

[2013.03.12 20:16:54 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\url.dll

[2013.08.10 05:59:01 | 001,141,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\urlmon.dll

[2012.11.22 06:45:03 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\usp10.dll

[2013.03.12 20:16:54 | 000,523,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\vbscript.dll

[2013.03.12 20:16:54 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\webcheck.dll

[2013.04.26 06:55:21 | 000,492,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\win32spl.dll

[2013.06.24 16:22:16 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\WindowsAccessBridge-32.dll

[2013.04.17 09:02:06 | 001,230,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\WindowsCodecs.dll

[2013.01.13 21:53:58 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\WindowsCodecsExt.dll

[2013.08.10 05:59:10 | 001,767,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wininet.dll

[2013.07.09 06:52:10 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wintrust.dll

[2012.08.23 15:46:20 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wksprtPS.dll

[2012.03.01 07:29:16 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wmi.dll

[2013.01.13 21:02:06 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\WMPhoto.dll

[2013.07.25 10:57:27 | 001,620,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\WMVDECOD.DLL

[2013.08.02 03:50:42 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wow32.dll

[2012.12.07 14:26:17 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\Wpc.dll

[2013.01.13 20:34:58 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\XpsGdiConverter.dll

[2013.01.13 19:26:42 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\XpsPrint.dll

[8 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT

[2009.07.14 07:08:49 | 000,032,632 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[2012.03.21 16:30:26 | 000,001,104 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

[2012.03.21 16:30:27 | 000,001,108 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[2012.09.14 10:49:17 | 000,000,338 | ---- | C] () -- C:\Windows\Tasks\HP Photo Creations Communicator.job

[2013.07.29 14:57:22 | 000,000,370 | ---- | C] () -- C:\Windows\Tasks\One-Click Optimizer.job

mk72	18.09.2013 15:57

Teil 2

Code:

< C:\Windows\SysNative\*.dll /600 >

[2012.08.23 12:54:24 | 000,322,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll

[2012.07.04 22:31:14 | 016,457,728 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\amdocl64.dll

[2012.04.06 03:06:08 | 000,054,784 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\amdpcom64.dll

[2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll

[2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll

[2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll

[2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll

[2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll

[2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll

[2013.08.02 04:12:18 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll

[2013.08.02 04:12:19 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll

[2013.08.02 04:12:19 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll

[2013.08.02 04:12:19 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll

[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll

[2013.08.02 04:12:20 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll

[2013.08.02 04:12:20 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll

[2013.08.02 04:12:20 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll

[2013.08.02 04:12:20 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll

[2013.08.02 04:12:20 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll

[2013.08.02 04:12:20 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll

[2013.01.13 22:35:18 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2013.01.13 22:32:07 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2013.01.13 22:35:31 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2013.01.13 22:31:41 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll

[2013.01.13 22:31:40 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll

[2013.01.13 22:35:31 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2013.01.13 22:31:40 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2013.01.13 22:31:48 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll

[2013.01.13 22:31:40 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll

[2013.08.02 04:12:20 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll

[2013.08.02 04:12:20 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll

[2013.02.27 07:47:10 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appinfo.dll

[2012.04.06 03:11:28 | 000,514,560 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiadlxx.dll

[2012.04.06 03:30:08 | 000,044,544 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalcl64.dll

[2012.04.06 03:29:54 | 016,090,624 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticaldd64.dll

[2012.04.06 03:30:16 | 000,051,200 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalrt64.dll

[2012.04.06 04:20:04 | 001,067,520 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\aticfx64.dll

[2012.04.06 04:16:52 | 000,442,368 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\ATIDEMGX.dll

[2012.04.06 03:54:46 | 007,479,296 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atidxx64.dll

[2012.04.06 04:14:26 | 000,059,392 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atiedu64.dll

[2012.04.06 03:11:06 | 000,017,408 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atig6pxx.dll

[2012.04.06 03:11:00 | 000,041,984 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atig6txx.dll

[2012.04.06 03:11:04 | 000,014,848 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiglpxx.dll

[2012.04.06 03:06:08 | 000,054,784 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atimpc64.dll

[2012.04.06 04:14:30 | 000,021,504 | ---- | M] (AMD) -- C:\Windows\SysNative\atimuixx.dll

[2012.04.06 04:10:50 | 026,181,632 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atio6axx.dll

[2012.04.06 04:14:44 | 000,120,320 | ---- | M] (AMD) -- C:\Windows\SysNative\atitmm64.dll

[2012.04.06 03:09:42 | 000,044,544 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiu9p64.dll

[2012.04.06 03:23:24 | 007,431,680 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd64.dll

[2012.04.06 03:34:34 | 004,731,904 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6a.dll

[2012.04.06 03:35:24 | 001,120,768 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6v.dll

[2012.04.06 03:09:56 | 000,054,784 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiuxp64.dll

[2012.12.16 16:45:03 | 000,367,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll

[2012.12.16 19:11:22 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll

[2013.02.27 07:48:00 | 001,930,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll

[2012.07.05 00:13:27 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll

[2012.07.05 00:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\browser.dll

[2012.12.05 08:14:00 | 000,218,624 | ---- | M] (Bullzip) -- C:\Windows\SysNative\bzpdf.dll

[2013.01.23 10:31:52 | 000,166,912 | ---- | M] (Nokia) -- C:\Windows\SysNative\ccdcmbwux64.dll

[2012.06.06 08:02:54 | 001,133,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll

[2013.05.13 07:50:40 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll

[2012.04.06 04:00:10 | 000,064,000 | ---- | M] (AMD) -- C:\Windows\SysNative\coinst.dll

[2013.07.09 07:46:20 | 001,472,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll

[2013.05.10 07:49:27 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll

[2013.07.09 07:46:20 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll

[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cryptsvc.dll

[2013.08.02 04:12:47 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll

[2013.01.13 21:10:36 | 003,928,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll

[2013.01.13 21:20:04 | 001,238,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll

[2013.01.13 21:38:21 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll

[2013.01.13 21:24:33 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll

[2013.01.13 21:51:30 | 002,565,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll

[2013.01.13 21:20:42 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll

[2013.01.13 21:38:39 | 000,333,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll

[2013.04.01 00:52:16 | 001,887,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll

[2012.10.09 20:17:13 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore6.dll

[2012.10.09 20:17:13 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcsvc6.dll

[2012.11.02 07:59:11 | 000,478,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dpnet.dll

[2012.08.13 17:25:14 | 000,149,504 | ---- | M] (Deutsche Telekom AG) -- C:\Windows\SysNative\DTAG.Mediencenter.ShellExtension.dll

[2013.04.03 00:51:57 | 001,643,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll

[2013.01.13 21:49:17 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll

[2013.03.12 20:16:54 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll

[2013.03.12 20:16:54 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll

[2013.03.12 20:16:54 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll

[2013.01.13 21:58:28 | 001,175,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\FntCache.dll

[2012.12.07 15:15:31 | 002,746,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll

[2013.03.12 20:16:54 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll

[2013.03.12 20:16:54 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll

[2013.03.12 20:16:54 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll

[2013.03.12 20:16:54 | 000,270,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll

[2013.08.10 07:20:55 | 015,404,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieframe.dll

[2013.03.12 20:16:54 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll

[2013.08.10 07:20:55 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll

[2013.08.10 07:20:55 | 002,647,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iertutil.dll

[2013.08.10 07:20:55 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll

[2013.08.10 07:20:55 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll

[2013.08.10 07:20:55 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll

[2012.03.01 08:33:50 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll

[2013.03.12 20:16:54 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll

[2013.03.12 20:16:54 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll

[2012.10.03 19:42:16 | 000,569,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iphlpsvc.dll

[2013.08.10 07:20:59 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll

[2013.08.10 07:20:59 | 003,959,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll

[2013.08.10 07:21:00 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jsproxy.dll

[2012.01.31 07:02:26 | 000,021,504 | ---- | M] () -- C:\Windows\SysNative\kdbsdk64.dll

[2012.08.11 02:56:03 | 000,715,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\kerberos.dll

[2013.08.02 04:13:34 | 001,161,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll

[2013.08.02 04:13:34 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll

[2013.03.12 20:16:54 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll

[2012.05.14 07:26:34 | 000,956,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll

[2012.09.20 22:02:06 | 001,832,760 | ---- | M] (Logitech, Inc.) -- C:\Windows\SysNative\LogiLDA.DLL

[2012.08.24 20:03:09 | 001,448,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll

[2013.08.10 07:21:15 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll

[2013.03.12 20:16:54 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedsbs.dll

[2013.08.10 07:21:17 | 019,246,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtml.dll

[2013.03.12 20:16:54 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll

[2013.03.12 20:16:54 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll

[2013.03.12 20:16:54 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll

[2012.04.07 14:31:40 | 003,216,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll

[2013.03.12 20:16:54 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll

[2013.01.04 08:11:13 | 002,776,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll

[2013.03.12 20:16:54 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll

[2012.08.23 15:20:40 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsRdpWebAccess.dll

[2012.08.23 10:13:07 | 005,773,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll

[2012.11.01 07:43:42 | 001,882,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3.dll

[2012.11.01 07:43:42 | 002,002,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6.dll

[2012.11.20 07:48:49 | 000,307,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll

[2012.10.03 19:44:16 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll

[2012.07.05 00:16:43 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll

[2012.10.03 19:44:17 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netcorehc.dll

[2012.10.03 19:44:17 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netevent.dll

[2012.10.03 19:44:21 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\nlaapi.dll

[2012.10.03 19:44:21 | 000,303,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\nlasvc.dll

[2013.01.23 10:31:52 | 000,057,856 | ---- | M] (Nokia) -- C:\Windows\SysNative\nmwcdclsx64.dll

[2013.01.23 10:31:52 | 000,074,752 | ---- | M] (Nokia) -- C:\Windows\SysNative\nmwcdcoclsx64.dll

[2013.08.02 04:15:44 | 001,732,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll

[2013.08.02 04:14:11 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll

[2013.03.12 20:16:54 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll

[2012.03.09 01:24:22 | 000,054,272 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll

[2012.07.04 22:31:38 | 000,075,776 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\OpenVideo64.dll

[2012.07.04 22:31:24 | 000,063,488 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\OVDecode64.dll

[2013.03.12 20:16:54 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll

[2012.05.01 07:40:20 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\profsvc.dll

[2012.05.04 13:00:43 | 000,366,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll

[2013.06.04 08:00:13 | 000,624,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll

[2012.05.17 12:29:20 | 000,123,744 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64H.dll

[2012.05.17 12:29:20 | 000,433,504 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64H.dll

[2012.05.17 12:29:22 | 000,074,592 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64H.dll

[2012.05.17 12:29:22 | 000,141,152 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64H.dll

[2012.05.17 12:29:24 | 007,163,744 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64H.dll

[2012.02.17 08:38:26 | 001,031,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll

[2012.04.26 07:41:55 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll

[2012.08.23 11:51:57 | 003,174,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll

[2012.08.23 12:51:14 | 000,228,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp_winip.dll

[2012.08.23 15:24:57 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RdpGroupPolicyExtension.dll

[2012.08.23 16:13:11 | 000,243,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll

[2012.04.26 07:41:56 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll

[2013.07.09 07:51:16 | 001,217,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll

[2012.04.12 01:30:00 | 000,074,344 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll

[2012.04.12 01:30:00 | 000,107,552 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll

[2012.08.24 20:05:03 | 000,340,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\schannel.dll

[2013.07.26 04:24:56 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll

[2013.07.26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\shell32.dll

[2012.05.05 10:36:55 | 000,503,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll

[2012.09.26 00:46:17 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\synceng.dll

[2012.08.23 14:52:53 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll

[2012.08.23 15:06:58 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll

[2012.08.23 15:40:56 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll

[2013.07.19 03:58:42 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tzres.dll

[2013.01.13 21:24:30 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll

[2013.03.12 20:16:54 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll

[2013.08.10 07:22:05 | 001,365,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\urlmon.dll

[2012.11.22 07:44:23 | 000,800,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll

[2013.03.12 20:16:54 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll

[2012.07.26 04:36:08 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\Wdfres.dll

[2013.03.12 20:16:54 | 000,247,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\webcheck.dll

[2013.04.26 07:51:36 | 000,751,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll

[2013.04.17 08:24:46 | 001,424,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll

[2013.01.13 21:25:04 | 000,245,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll

[2013.08.10 07:22:18 | 002,241,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wininet.dll

[2013.08.02 04:14:57 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll

[2013.07.09 07:52:52 | 000,224,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll

[2012.08.23 15:17:54 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wksprtPS.dll

[2012.03.01 08:28:47 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wmi.dll

[2013.01.13 20:32:43 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll

[2013.07.25 11:25:54 | 001,888,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL

[2013.08.02 04:15:03 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll

[2013.08.02 04:15:03 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll

[2013.08.02 04:15:03 | 000,362,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll

[2012.12.07 15:20:16 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\Wpc.dll

[2012.06.03 00:19:23 | 000,701,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll

[2012.06.03 00:19:43 | 002,428,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuaueng.dll

[2012.06.03 00:15:31 | 002,622,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll

[2012.07.26 05:08:14 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll

[2012.07.26 05:08:14 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll

[2012.07.26 05:08:14 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFSvc.dll

[2012.04.22 13:51:40 | 002,152,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFUpdate_01009.dll

[2012.07.26 05:08:14 | 000,744,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll

[2012.06.03 00:15:08 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll

[2012.06.03 00:19:46 | 000,038,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll

[2012.06.03 00:19:42 | 000,044,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll

[2012.06.02 15:19:42 | 000,186,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll

[2013.03.19 07:53:58 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll

[2013.03.19 07:53:58 | 000,230,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wwansvc.dll

[2013.01.13 20:09:52 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll

[2013.01.13 19:05:09 | 001,682,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

 
 < C:\Windows\SysWOW64\*.dll /600 >

[2012.08.23 13:15:57 | 000,269,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\aaclient.dll

[2012.07.04 22:30:30 | 013,008,896 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWOW64\amdocl.dll

[2012.04.06 03:06:04 | 000,053,760 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\amdpcom32.dll

[2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

[2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

[2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

[2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

[2013.08.02 03:48:15 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

[2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

[2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

[2013.08.02 02:43:05 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

[2013.08.02 02:43:05 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

[2013.08.02 02:43:05 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

[2013.01.13 23:16:42 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

[2013.01.13 23:12:46 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

[2013.01.13 23:17:02 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

[2013.01.13 23:11:08 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

[2013.01.13 23:11:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

[2013.01.13 23:17:03 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

[2013.01.13 23:11:07 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

[2013.01.13 23:11:21 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

[2013.01.13 23:11:07 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

[2013.08.02 02:43:05 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

[2013.08.02 03:48:15 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apisetschema.dll

[2012.04.06 04:14:20 | 000,043,520 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\SysWOW64\ati2edxx.dll

[2012.04.06 03:11:20 | 000,360,448 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWOW64\atiadlxy.dll

[2012.04.06 03:30:06 | 000,044,032 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWOW64\aticalcl.dll

[2012.04.06 03:25:30 | 013,764,096 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWOW64\aticaldd.dll

[2012.04.06 03:30:14 | 000,046,080 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWOW64\aticalrt.dll

[2012.04.06 04:21:52 | 000,909,312 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\aticfx32.dll

[2012.04.06 04:13:42 | 006,800,896 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atidxx32.dll

[2012.04.06 03:10:52 | 000,033,280 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atigktxx.dll

[2012.04.06 03:11:04 | 000,014,848 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atiglpxx.dll

[2012.04.06 03:06:04 | 000,053,760 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atimpc32.dll

[2012.04.06 03:50:56 | 019,753,984 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWOW64\atioglxx.dll

[2012.04.06 03:09:34 | 000,032,256 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atiu9pag.dll

[2012.04.06 03:34:04 | 006,203,392 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atiumdag.dll

[2012.04.06 03:34:50 | 001,831,424 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atiumdmv.dll

[2012.04.06 03:22:54 | 004,795,904 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atiumdva.dll

[2012.04.06 03:09:48 | 000,041,984 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWOW64\atiuxpag.dll

[2012.12.16 16:13:28 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWOW64\atmfd.dll

[2012.12.16 16:13:20 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWOW64\atmlib.dll

[2013.02.27 06:49:24 | 001,796,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\authui.dll

[2012.07.04 23:14:34 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\browcli.dll

[2012.12.05 08:14:00 | 000,139,264 | ---- | M] (Bullzip) -- C:\Windows\SysWOW64\bzpdfc.dll

[2012.06.06 07:03:06 | 000,805,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cdosys.dll

[2013.05.13 05:08:06 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\certenc.dll

[2013.07.09 06:46:31 | 001,166,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll

[2013.05.10 05:20:54 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptdlg.dll

[2013.07.09 06:46:31 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptnet.dll

[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptsvc.dll

[2013.01.13 21:37:57 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d2d1.dll

[2013.01.13 21:46:25 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d10.dll

[2013.01.13 22:08:43 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d10core.dll

[2013.01.13 21:54:01 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d10level9.dll

[2013.01.13 22:22:22 | 001,988,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d10warp.dll

[2013.01.13 21:48:47 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d10_1.dll

[2013.01.13 22:09:00 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d10_1core.dll

[2013.04.26 01:30:32 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d11.dll

[2013.06.24 16:22:16 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWOW64\deployJava1.dll

[2012.10.09 19:40:31 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcore6.dll

[2012.10.09 19:40:31 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcsvc6.dll

[2012.07.10 11:43:08 | 000,759,176 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\DLLAV32.dll

[2012.07.10 11:43:08 | 000,157,064 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\DLLCPY32.dll

[2012.07.10 11:43:08 | 000,226,696 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\DLLDEV32.dll

[2012.11.27 21:58:25 | 000,120,200 | ---- | M] () -- C:\Windows\SysWOW64\DLLDEV32i.dll

[2012.07.10 11:43:06 | 000,218,504 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\DLLDRV32.dll

[2012.07.10 11:43:06 | 000,099,720 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\DLLIO32.dll

[2012.07.10 11:43:06 | 000,083,336 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\DLLPNT32.dll

[2012.07.10 11:43:06 | 000,095,624 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\DLLPRF32.dll

[2012.07.10 11:43:04 | 000,304,520 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\DLLRES32.dll

[2012.11.02 07:11:31 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dpnet.dll

[2013.04.10 01:34:01 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\DWrite.dll

[2013.01.13 22:20:31 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dxgi.dll

[2013.03.12 20:16:54 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dxtmsft.dll

[2013.03.12 20:16:54 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dxtrans.dll

[2013.03.12 20:16:54 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\elshyph.dll

[2012.12.07 14:20:43 | 002,576,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gameux.dll

[2013.03.12 20:16:54 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\icardie.dll

[2013.03.12 20:16:54 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\IEAdvpack.dll

[2013.03.12 20:16:54 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ieapfltr.dll

[2013.03.12 20:16:54 | 000,242,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iedkcs32.dll

[2013.08.10 05:58:05 | 013,761,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ieframe.dll

[2013.03.12 20:16:54 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iepeers.dll

[2013.08.10 05:58:05 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iernonce.dll

[2013.08.10 05:58:06 | 002,048,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iertutil.dll

[2013.08.10 05:58:06 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iesetup.dll

[2013.08.10 05:58:06 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iesysprep.dll

[2013.08.10 05:58:06 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ieui.dll

[2012.03.01 07:33:23 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imagehlp.dll

[2013.03.12 20:16:54 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imgutil.dll

[2013.03.12 20:16:54 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\inseng.dll

[2013.08.10 05:58:09 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\jscript.dll

[2013.08.10 05:58:09 | 002,876,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\jscript9.dll

[2013.08.10 05:58:09 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\jsproxy.dll

[2012.01.31 07:00:24 | 000,016,896 | ---- | M] () -- C:\Windows\SysWOW64\kdbsdk32.dll

[2012.08.11 01:56:14 | 000,542,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kerberos.dll

[2013.08.02 03:50:41 | 001,114,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll

[2013.08.02 03:50:42 | 000,274,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll

[2013.03.12 20:16:54 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\licmgr10.dll

[2013.08.10 05:58:21 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msfeeds.dll

[2013.03.12 20:16:54 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msfeedsbs.dll

[2013.08.10 05:58:23 | 014,332,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mshtml.dll

[2013.03.12 20:16:54 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mshtmled.dll

[2013.03.12 20:16:54 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mshtmler.dll

[2013.03.12 20:16:54 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mshtmlmedia.dll

[2012.04.07 13:26:29 | 002,342,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msi.dll

[2013.03.12 20:16:54 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msls31.dll

[2013.01.04 08:11:21 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msmpeg2vdec.dll

[2013.03.12 20:16:54 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msrating.dll

[2012.08.23 15:47:20 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\MsRdpWebAccess.dll

[2012.08.23 10:19:01 | 004,916,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mstscax.dll

[2012.11.01 06:47:54 | 001,236,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msxml3.dll

[2012.11.08 12:29:12 | 001,402,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msxml4.dll

[2012.11.01 06:47:54 | 001,389,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msxml6.dll

[2012.11.20 06:51:09 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ncrypt.dll

[2012.10.03 18:42:23 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ncsi.dll

[2012.07.04 23:16:56 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netapi32.dll

[2012.10.03 18:42:24 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netcorehc.dll

[2012.10.03 18:42:24 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netevent.dll

[2013.06.24 16:22:16 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWOW64\npDeployJava1.dll

[2013.08.02 03:51:23 | 001,292,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll

[2013.08.02 02:45:36 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntvdm64.dll

[2013.03.12 20:16:54 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\occache.dll

[2012.03.09 01:24:14 | 000,048,128 | ---- | M] (Khronos Group) -- C:\Windows\SysWOW64\OpenCL.dll

[2012.07.04 22:31:32 | 000,065,024 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWOW64\OpenVideo.dll

[2012.07.04 22:31:22 | 000,056,320 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\SysWOW64\OVDecode.dll

[2013.03.12 20:16:54 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\pngfilt.dll

[2012.05.04 11:59:54 | 000,514,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\qdvd.dll

[2013.06.04 06:53:07 | 000,509,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\qedit.dll

[2012.02.17 07:34:22 | 000,826,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rdpcore.dll

[2012.08.23 13:12:17 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rdpendp_winip.dll

[2013.07.09 06:52:33 | 000,663,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll

[2012.08.24 18:57:40 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schannel.dll

[2012.08.24 18:57:40 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll

[2013.07.26 03:55:59 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll

[2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll

[2012.05.05 09:46:52 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll

[2012.08.24 18:53:35 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll

[2012.07.10 11:43:04 | 000,071,048 | ---- | M] (PoINT Software & Systems GmbH) -- C:\Windows\SysWOW64\STRING32.dll

[2012.09.26 00:47:43 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\synceng.dll

[2012.08.23 15:18:14 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\tsgqec.dll

[2013.07.19 03:41:01 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\tzres.dll

[2013.01.13 21:53:14 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\UIAnimation.dll

[2013.03.12 20:16:54 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\url.dll

[2013.08.10 05:59:01 | 001,141,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\urlmon.dll

[2012.11.22 06:45:03 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll

[2013.03.12 20:16:54 | 000,523,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vbscript.dll

[2013.03.12 20:16:54 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\webcheck.dll

[2013.04.26 06:55:21 | 000,492,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\win32spl.dll

[2013.06.24 16:22:16 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

[2013.04.17 09:02:06 | 001,230,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WindowsCodecs.dll

[2013.01.13 21:53:58 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WindowsCodecsExt.dll

[2013.08.10 05:59:10 | 001,767,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wininet.dll

[2013.07.09 06:52:10 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll

[2012.08.23 15:46:20 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wksprtPS.dll

[2012.03.01 07:29:16 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wmi.dll

[2013.01.13 21:02:06 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WMPhoto.dll

[2013.07.25 10:57:27 | 001,620,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WMVDECOD.DLL

[2013.08.02 03:50:42 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wow32.dll

[2012.12.07 14:26:17 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wpc.dll

[2013.01.13 20:34:58 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\XpsGdiConverter.dll

[2013.01.13 19:26:42 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\XpsPrint.dll

[8 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ]

 
 ========== Files - Unicode (All) ==========

[2013.09.18 14:52:12 | 098,132,872 | ---- | M] ()(C:\Windows\SysWow64\???=) -- C:\Windows\SysWow64\뼟뻼=

[2013.09.18 14:52:12 | 098,132,872 | ---- | C] ()(C:\Windows\SysWow64\???=) -- C:\Windows\SysWow64\뼟뻼=

 
 ========== Alternate Data Streams ==========

 

@Alternate Data Stream - 1213 bytes -> C:\ProgramData\Microsoft:V6rvehwmRjYqRAkFBpLsBNz

@Alternate Data Stream - 1190 bytes -> C:\ProgramData\Microsoft:cJP8NoA3alrUCM20
 

< End of report >

schrauber

18.09.2013 20:09

Fixen mit OTL

Starte bitte die OTL.exe.
Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:

:OTL

SRV - [2011.12.05 22:16:03 | 000,114,000 | ---- | M] (Joosoft.com GmbH) [Auto | Running] -- C:\Windows\SysWOW64\UpdSvc.dll -- (Update-Service)

:files

C:\Windows\SysWOW64\UpdSvc.dll

:reg

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

"Update-Service-Installer-Service"=-

"Update-Service"=-

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

"Update-Service-Installer-Service"=-

"Update-Service"=-

:commands

[reboot]

Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
Schließe bitte nun alle Programme.
Klicke nun bitte auf den Fix Button.
OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
Kopiere nun den Inhalt hier in Deinen Thread

mk72	18.09.2013 20:54

So hier ist das gewünschte:

Code:

========== OTL ==========

Service Update-Service stopped successfully!

Service Update-Service deleted successfully!

C:\Windows\SysWOW64\UpdSvc.dll moved successfully.

========== FILES ==========

File\Folder C:\Windows\SysWOW64\UpdSvc.dll not found.

========== REGISTRY ==========

Registry value HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\\Update-Service-Installer-Service deleted successfully.

Registry value HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\\Update-Service deleted successfully.

Registry value HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\\Update-Service-Installer-Service not found.

Registry value HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost\\Update-Service not found.

========== COMMANDS ==========

 

OTL by OldTimer - Version 3.2.69.0 log created on 09182013_214358

Wenn wir irgendwann mal alles durchhaben und mein Kaspersky wieder funktionieren sollte, würde ich dich bitten, mir eine kleine Beschreibung zu geben woran es lag.

schrauber

19.09.2013 09:47

Das hier war ne Mischung aus Trojaner und Mediyes.

Bitte ein frisches FRST log und ein frisches OTL Log mit dem gleichen Custom Scan wie oben.

Ebenso das hier:

Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.

http://i1224.photobucket.com/albums/...3/Capture3.gif
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.

http://i1224.photobucket.com/albums/...y3/Capture.gif
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.

http://i1224.photobucket.com/albums/...3/Capture1.gif
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

http://i1238.photobucket.com/albums/...eakingtool.jpg

Downloade dir bitte

Farbar Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

mk72	20.09.2013 17:10

So hier erst einmal der FST-Scan

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-09-2013 01

Ran by Marko at 2013-09-20 15:29:01

Running from C:\Users\Marko\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

64 Bit HP CIO Components Installer (Version: 8.2.2)

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)

AC3Filter 2.5b (x32 Version: 2.5b)

Adobe AIR (x32 Version: 3.7.0.1860)

Adobe Bridge 1.0 (x32 Version: 001.000.001)

Adobe Common File Installer (x32 Version: 1.00.001)

Adobe Community Help (x32 Version: 3.5.23)

Adobe Download Assistant (x32 Version: 1.2.3)

Adobe Flash Player 11 ActiveX 64-bit (Version: 11.2.202.235)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Adobe Help Center 1.0 (x32 Version: 1.0.1)

Adobe Photoshop CS2 (x32 Version: 9.0)

Adobe Photoshop Elements 11 (x32 Version: 11.0)

Adobe Photoshop Lightroom 5 64-bit (Version: 5.0.1)

Adobe Premiere Elements 11 (Version: 11.0)

Adobe Stock Photos 1.0 (x32 Version: 1.0.1)

Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)

AMD Accelerated Video Transcoding (Version: 2.00.0002)

AMD APP SDK Runtime (Version: 10.0.938.2)

AMD Catalyst Install Manager (Version: 8.0.881.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Fuel (Version: 2012.0806.1213.19931)

AMD Media Foundation Decoders (Version: 1.0.70405.2224)

AMD System Monitor (x32 Version: 1.0.8)

AMD USB Filter Driver (x32 Version: 1.0.15.94)

AMD VISION Engine Control Center (x32 Version: 2012.0806.1213.19931)

AntiBrowserSpy (x32 Version: 3.6.106)

Apple Application Support (x32 Version: 2.3.4)

Apple Software Update (x32 Version: 2.1.3.127)

Application Profiles (x32 Version: 2.0.4337.36028)

Application Profiles (x32 Version: 2.0.4365.36132)

Ashampoo Burning Studio 12 v.12.0.5 (x32 Version: 12.0.5)

Ashampoo Home Designer Pro v.1.0.1 (x32 Version: 1.0.1)

Ashampoo Internet Accelerator 3 v.3.20 (x32 Version: 3.1.1)

Ashampoo Music Studio 4 v.4.0.5 (x32 Version: 4.0.5)

Ashampoo Music Studio 4 v.4.1.0 (x32 Version: 4.1.0)

Ashampoo Photo Commander 10 v.10.1.1 (x32 Version: 10.1.1)

Ashampoo Snap 5 v.5.1.5 (x32 Version: 5.1.5)

Ashampoo Video Styler 2013 v.1.0.1 (x32 Version: 1.0.1)

Ashampoo WinOptimizer 10 v.10.2.5 (x32 Version: 10.02.05)

Audio 180% (x32 Version: Audio 180%)

Avira Free Antivirus (x32 Version: 13.0.0.4052)

Bewerbungsfoto-/Passbild-Generator v3.5b (x32)

BEWERBUNGSMASTER (e:\Programme\BEWERBUNGSMASTER\) (x32)

BEWERBUNGSMASTER (x32)

BufferChm (x32 Version: 130.0.331.000)

Bullzip PDF Printer 9.3.0.1516 (Version: 9.3.0.1516)

C4400 (x32 Version: 130.0.365.000)

C4500 (x32 Version: 130.0.365.000)

CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.7.2.11)

Canon Internet Library for ZoomBrowser EX (x32 Version: 1.6.3.9)

Canon MOV Decoder (x32 Version: 1.5.0.7)

Canon MOV Encoder (x32 Version: 1.3.1.3)

Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 3.4.1.9)

Canon Utilities Digital Photo Professional 3.8 (x32 Version: 3.8.0.0)

Canon Utilities EOS Utility (x32 Version: 2.8.1.0)

Canon Utilities PhotoStitch (x32 Version: 3.1.22.46)

Canon Utilities Picture Style Editor (x32 Version: 1.7.0.0)

Canon Utilities WFT Utility (x32 Version: 3.5.1.1)

Canon Utilities ZoomBrowser EX (x32 Version: 6.5.1.15)

Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.3.0.4)

Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1213.19931)

Catalyst Control Center Localization All (x32 Version: 2012.0806.1213.19931)

CCC Help Chinese Standard (x32 Version: 2012.0806.1212.19931)

CCC Help Chinese Traditional (x32 Version: 2012.0806.1212.19931)

CCC Help Czech (x32 Version: 2012.0806.1212.19931)

CCC Help Danish (x32 Version: 2012.0806.1212.19931)

CCC Help Dutch (x32 Version: 2012.0806.1212.19931)

CCC Help English (x32 Version: 2012.0806.1212.19931)

CCC Help Finnish (x32 Version: 2012.0806.1212.19931)

CCC Help French (x32 Version: 2012.0806.1212.19931)

CCC Help German (x32 Version: 2012.0806.1212.19931)

CCC Help Greek (x32 Version: 2012.0806.1212.19931)

CCC Help Hungarian (x32 Version: 2012.0806.1212.19931)

CCC Help Italian (x32 Version: 2012.0806.1212.19931)

CCC Help Japanese (x32 Version: 2012.0806.1212.19931)

CCC Help Korean (x32 Version: 2012.0806.1212.19931)

CCC Help Norwegian (x32 Version: 2012.0806.1212.19931)

CCC Help Polish (x32 Version: 2012.0806.1212.19931)

CCC Help Portuguese (x32 Version: 2012.0806.1212.19931)

CCC Help Russian (x32 Version: 2012.0806.1212.19931)

CCC Help Spanish (x32 Version: 2012.0806.1212.19931)

CCC Help Swedish (x32 Version: 2012.0806.1212.19931)

CCC Help Thai (x32 Version: 2012.0806.1212.19931)

CCC Help Turkish (x32 Version: 2012.0806.1212.19931)

ccc-utility64 (Version: 2012.0806.1213.19931)

Classic Shell (Version: 3.6.8)

Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)

COMPUTERBILD-Abzockschutz (x32 Version: 1.0.40)

Content Manager 2 (x32 Version: 3.10.0.52790)

Copy (x32 Version: 130.0.428.000)

CPUID CPU-Z 1.59

CyberGhost VPN

DAEMON Tools Lite (x32 Version: 4.46.1.0327)

Data Lifeguard Diagnostic for Windows 1.24 (x32)

DateiCommander13 Basic (x32)

Desk Drive (x32 Version: 1.8.2)

DeskDrive Version 1.8.5 (x32 Version: 1.8.5)

Destinations (x32 Version: 130.0.0.0)

DeviceDiscovery (x32 Version: 130.0.465.000)

Diagnostic Utility (x32 Version: 1.00.0000)

DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904)

DivX-Setup (x32 Version: 2.6.1.44)

DocProc (x32 Version: 13.0.0.0)

DxO FilmPack 2.0 (x32 Version: 2.0.0)

DxO Optics Pro 5.3.5 (x32 Version: 5.3.5)

DxO Optics Pro 6 (x32 Version: 6.6.0)

Elements 11 Organizer (x32 Version: 11.0)

eReg (x32 Version: 1.20.138.34)

erLT (x32 Version: 1.20.0137)

Fahrtenbuch professionell (x32)

FileBox eXtender (x32)

FileZilla Client 3.5.3 (x32 Version: 3.5.3)

Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0)

FolderVisualizer (x32 Version: 2012)

GeoSetter 3.4.16 (x32)

Gigaset QuickSync (Version: 7.2.0844.6)

Google Earth Plug-in (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.21.153)

GPBaseService2 (x32 Version: 130.0.371.000)

HP Customer Participation Program 13.0 (Version: 13.0)

HP Imaging Device Functions 13.0 (Version: 13.0)

HP Photo Creations (x32 Version: 1.0.0.9452)

HP Photosmart C4400 All-In-One Driver Software 13.0 Rel. 3 (Version: 13.0)

HP Photosmart C4500 All-In-One Driver Software 13.0 Rel. 4 (Version: 13.0)

HP Smart Web Printing 4.51 (Version: 4.51)

HP Solution Center 13.0 (Version: 13.0)

HP Update (x32 Version: 5.003.001.001)

HPDiagnosticAlert (x32 Version: 1.00.0000)

HPPhotoGadget (x32 Version: 130.0.282.000)

HPProductAssistant (x32 Version: 130.0.371.000)

Inpaint 3 Installation & Registrierung (x32)

Inpaint 3.0 (x32)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

Java(TM) 6 Update 31 (x32 Version: 6.0.310)

JavaFX 2.1.1 (x32 Version: 2.1.1)

KeePass Password Safe 2.21 (x32)

Logitech Flow Scroll 4.0 (Version: 4.00.33)

Logitech SetPoint 6.32 (Version: 6.32.20)

Logitech Unifying-Software 2.10 (Version: 2.10.37)

MadAppLauncher version 1.10.0.0 (x32 Version: 1.10.0.0)

MAGIX Foto Designer 7 (x32 Version: 7.0.1.1)

MAGIX Screenshare (x32 Version: 4.3.6.1987)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6)

MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

MarketResearch (x32 Version: 130.0.374.000)

MediaCoder x64 0.8.25.5553 (Version: 0.8.25.5553)

Mediencenter 3.8.1.2208 (HKCU Version: 3.8.1.2208)

Mediencenter Assistent (Version: 2.7.0.1451)

MEDION NAS TOOL (x32)

Memeo Instant Backup (x32 Version: 4.60.0.7939)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)

Microsoft Office Professional 2013 - de-de (Version: 15.0.4535.1004)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)

Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)

Miso 1.0 (x32 Version: 1.0)

Mozilla Firefox 18.0.1 (x86 de) (x32 Version: 18.0.1)

Mozilla Firefox 23.0.1 (x86 de) (HKCU Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 18.0.1)

Mp3tag v2.57 (x32 Version: v2.57)

MSVC80_x64_v2 (Version: 1.0.3.0)

MSVC80_x86_v2 (x32 Version: 1.0.3.0)

MSVC90_x64 (Version: 1.0.1.2)

MSVC90_x86 (x32 Version: 1.0.1.2)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)

Naviextras Toolbox Prerequesities (x32 Version: 1.0.0)

Nero 8 (x32 Version: 8.3.312)

neroxml (x32 Version: 1.0.0)

Network64 (Version: 130.0.572.000)

Nokia Connectivity Cable Driver (x32 Version: 7.1.172.0)

Nokia Suite (x32 Version: 3.8.30.0)

NTRIP (x32)

O&O DriveLED Professional (Version: 4.2.157)

OCR Software by I.R.I.S. 13.0 (Version: 13.0)

Ocster Backup Pro (Version: 8.08)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4535.1004)

Office 15 Click-to-Run Licensing Component (Version: 15.0.4535.1004)

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4535.1004)

ON_OFF Charge B11.1102.1 (x32 Version: 1.00.0001)

Paragon Festplatten Manager™ 2011 Kompakt 2nd Edition (x32 Version: 90.00.0003)

PC Connectivity Solution (x32 Version: 12.0.109.0)

PDF Experte 8 Ultimate (x32 Version: 8.0.0140.0)

Perfect Effects 4.0.4 (x32 Version: 4.0.4)

PL-2303 USB-to-Serial (x32 Version: 1.7.0)

PRE11 STI 64Installer (x32 Version: 11.0)

PS_AIO_03_C4400_Software_Min (x32 Version: 130.0.365.000)

PS_AIO_04_C4500_Software_Min (x32 Version: 130.0.365.000)

PSE11 STI Installer (x32 Version: 11.0)

Q-Dir (x32)

QuickTime (x32 Version: 7.74.80.86)

Rainmeter (x32 Version: 2.4 r1678)

Realtek Ethernet Controller Driver (x32 Version: 7.58.411.2012)

Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6650)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)

Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.39.0)

Scan (x32 Version: 13.0.0.0)

SeaTools for Windows (x32 Version: 1.2.0.7)

Send To Toys v2.61

SiSoftware Sandra Lite 2012.SP5c (Version: 18.74.2012.10)

SmartTools Publishing • Excel AutoBackup (x32 Version: v2.50)

SmartTools Publishing • Outlook Adress-Assistent (x32 Version: v3.50)

SmartTools Publishing • Word Adressfenster-Assistent (x32 Version: v2.50)

SmartWebPrinting (x32 Version: 130.0.457.000)

SolutionCenter (x32 Version: 130.0.373.000)

Status (x32 Version: 130.0.469.000)

swMSM (x32 Version: 12.0.0.1)

TomTom HOME (x32 Version: 2.9.2)

TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)

Toolbox (x32 Version: 130.0.648.000)

TrayApp (x32 Version: 130.0.422.000)

Treiber-Studio 2013 (Version: 8.0.519)

Treiber-Studio 2013 (Version: 8.1.428)

Unknown Device Identifier 8.00

UnloadSupport (x32 Version: 11.0.0)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)

VCRedistSetup (x32 Version: 1.0.0)

WebReg (x32 Version: 130.0.132.017)

Windows Mobile-Gerätecenter (Version: 6.1.6965.0)

Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)

XnView Shell Extension 3.2.0 (64bits) (x32 Version: 3.2.0)
 

==================== Restore Points  =========================
 

18-09-2013 13:06:19 Windows Update

20-09-2013 10:00:29 Windows-Sicherung
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2013-09-05 15:38 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started

Task: {07FD82E2-B526-4FC7-8798-FCA387122C0B} - System32\Tasks\One-Click Optimizer => E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-05-15] (Ashampoo Development GmbH & Co. KG)

Task: {18E87A3D-D345-46C8-83A0-765A4D34BF98} - System32\Tasks\{0DC1FC84-5EDB-4337-ABC3-B6DDCF71C3C2} => Firefox.exe 

Task: {479C03B9-CEC4-41F3-A69F-F81E31FC295D} - System32\Tasks\{485AAEC7-0CDC-4324-B369-6564E05046FA} => Firefox.exe 

Task: {55D08572-AF0D-4D79-B374-B2288E853937} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-21] (Google Inc.)

Task: {6F20F847-5ACE-4021-A98C-D2F23D8CFB92} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-07-22] (Microsoft Corporation)

Task: {94E7BDC3-C5CF-4EFB-A69A-8C6218A52551} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {9E55C402-A616-4ED1-B9A3-DDE6CCFFCF6A} - System32\Tasks\Microsoft\Windows\MemDiag => C:\Windows\system32\mdres.exe [2009-07-14] (Microsoft Corporation)

Task: {A00464E8-6BBC-4CE0-B494-EA214C5F7098} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)

Task: {B5FF5D24-9746-49F5-9A08-EE16078E7451} - System32\Tasks\{68FCBDDC-F452-4549-97AD-356CC5E03486} => E:\Programme\Nero\Nero\Nero8\Nero Burning Rom\nero.exe [2008-06-24] (Nero AG)

Task: {BE32AC8B-F571-4959-965A-8CCC10A0E121} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-21] (Google Inc.)

Task: {C820FD4E-DC50-452F-A5E7-1350854F076E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)

Task: {DCBCD7DD-7C16-4FFC-B939-EF6759C24FF4} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {E47767F2-BC3A-463D-8CBD-A409DEA7DCA3} - System32\Tasks\AdobeAAMUpdater-1.0-Kobolt-Marko => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)

Task: {F07079E8-DB7A-4819-8454-71FE70E5A687} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2011-08-23] ()

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

Task: C:\Windows\Tasks\One-Click Optimizer.job => E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-02-03 17:06 - 2013-02-03 17:06 - 00244696 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00661448 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\MSVCP110.dll

2013-02-03 17:06 - 2013-02-03 17:06 - 00828872 _____ (Microsoft Corporation) C:\Users\Marko\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\MSVCR110.dll

2013-04-04 10:22 - 2013-04-04 10:22 - 00558592 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll

2013-06-29 10:50 - 2013-06-29 10:50 - 00724992 _____ (IvoSoft) E:\Programme\Classic Shell\ClassicExplorer64.dll

2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm

2013-06-29 10:50 - 2013-06-29 10:50 - 01750528 _____ (IvoSoft) E:\Programme\Classic Shell\ClassicStartMenuDLL.dll

2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () e:\Programme\FileZilla FTP Client\fzshellext_64.dll

2012-08-06 13:01 - 2012-08-06 13:01 - 00004608 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\atiamdeu.dll

2013-07-29 14:57 - 2013-05-15 15:22 - 00117096 _____ (TODO: <Company name>) E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\WinOptimizerContextHandler64.dll

2013-04-24 15:25 - 2013-04-24 15:25 - 00402432 _____ (Florian Heidenreich) E:\Programme\MP3-Tag\Mp3tag\Mp3tagShell64.dll

2013-04-04 10:22 - 2013-04-04 10:22 - 00152064 _____ (Deutsche Telekom AG) C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll

2012-08-15 11:55 - 2012-08-13 17:25 - 00149504 _____ (Deutsche Telekom AG) C:\Windows\system32\DTAG.Mediencenter.ShellExtension.dll

2012-05-22 11:01 - 2012-02-23 21:44 - 02409472 _____ () e:\Programme\XnView\ShellEx\XnViewShellExt64.dll

2013-07-10 13:15 - 2011-02-01 20:09 - 00593788 _____ (Friedemann Schmidt) e:\Programme\GeoSetter\GeoSetterShellExt64.dll

2012-05-22 11:07 - 2011-05-18 17:47 - 00137216 _____ (Gabriele Ponti) e:\Programme\Send To Toys\SendToFolderShellExt.dll

2012-05-22 11:07 - 2011-05-18 17:47 - 00140800 _____ (Gabriele Ponti) e:\Programme\Send To Toys\SendToClipboardShellExt.dll

2012-08-06 13:01 - 2012-08-06 13:01 - 00837632 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\atiacm64.dll

2011-10-07 11:39 - 2011-10-07 11:39 - 01304856 _____ () E:\Programme\Logitech\SetPointP\Macros\MacroCore.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00035744 _____ (unknown) E:\Programme\AntiBrowserSpy\AbFlexTrans.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00037792 _____ () E:\Programme\AntiBrowserSpy\AbCommons.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 06362528 _____ () E:\Programme\AntiBrowserSpy\Commons.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 02648480 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.Data.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00173984 _____ () E:\Programme\AntiBrowserSpy\AbBrowserLibs.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 03414944 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.Utils.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00018336 _____ () E:\Programme\AntiBrowserSpy\VersionInfo.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00018848 _____ () E:\Programme\AntiBrowserSpy\AbSettingsKeeper.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 01750432 _____ (Developer Express Inc.) E:\Programme\AntiBrowserSpy\DevExpress.XtraEditors.v10.2.dll

2012-05-22 09:40 - 2011-06-21 12:07 - 00012704 _____ () E:\Programme\AntiBrowserSpy\AbProcessManager.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00012520 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\CoreTempReader.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00015080 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\GetCoreTempInfoNET.dll

2013-06-07 09:59 - 2013-06-07 09:59 - 00014056 _____ () C:\Users\Marko\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.gadget\SystemInfo.dll

2012-11-04 16:25 - 2012-11-04 16:25 - 00736968 _____ () E:\Programme\Rainmeter\Rainmeter.dll

2012-11-04 16:23 - 2012-11-04 16:23 - 00056832 _____ () E:\Programme\Rainmeter\Plugins\WebParser.dll

2013-07-02 17:21 - 2013-07-02 17:21 - 04712104 _____ () e:\Programme\Ocster Backup\bin\ox.dll

2013-04-12 10:45 - 2013-04-12 10:45 - 00641024 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_xrc_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00622592 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_html_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 03663872 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_core_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 01488384 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00875520 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxmsw28u_adv_vc_ox.dll

2013-04-12 10:44 - 2013-04-12 10:44 - 00157696 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_xml_vc_ox.dll

2013-04-12 10:42 - 2013-04-12 10:42 - 00152576 _____ (wxWidgets development team) e:\Programme\Ocster Backup\bin\wxbase28u_net_vc_ox.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00097280 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.Implementation.dll

2012-08-06 13:03 - 2012-08-06 13:03 - 00031232 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00025088 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00048128 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Implementation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\LOG.Foundation.Implementation.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00022016 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CCC.Implementation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00015360 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\NEWAEM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00061440 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00018432 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.XManifest.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00038400 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00029184 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\ATICCCom.dll

2012-07-17 09:58 - 2012-07-17 09:58 - 00175104 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ADL.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00034816 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006144 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Server.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00047616 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Source.Kit.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.CoreAudioAPI.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00006656 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.DPPE.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Hotkeys.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006144 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.WinMessages.Shared.dll

2009-04-22 13:13 - 2009-04-22 13:13 - 00045056 _____ (ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0601.dll

2010-03-04 02:27 - 2010-03-04 02:27 - 00016384 _____ (ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00006656 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.dll

2010-10-07 14:07 - 2010-10-07 14:07 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I1010.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.REG.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00311296 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00196608 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll

2009-06-17 06:27 - 2009-06-17 06:27 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.GD.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005120 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.Audio.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Actions.CCAA.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00008704 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ResourceManagement.Foundation.Private.dll

2008-04-03 17:29 - 2008-04-03 17:29 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0804.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00025600 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.Shared.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00028672 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00045056 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00053248 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.shared.dll

2009-12-08 08:49 - 2009-12-08 08:49 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0912.dll

2007-08-09 17:58 - 2007-08-09 17:58 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0706.dll

2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00049152 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00144384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceLCD.Graphics.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00053248 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00028672 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CustomFormats.Graphics.Shared.dll

2008-12-30 13:04 - 2008-12-30 13:04 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0812.dll

2009-04-22 13:13 - 2009-04-22 13:13 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0805.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00050688 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.OverDrive5.Graphics.shared.dll

2007-05-02 18:44 - 2007-05-02 18:44 - 00020480 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0703.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00110592 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00081920 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Shared.dll

2010-11-05 15:18 - 2010-11-05 15:18 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I1011.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00110592 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00081920 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Shared.dll

2009-06-17 11:24 - 2009-06-17 11:24 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Runtime.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00045056 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.shared.dll

2009-01-20 15:51 - 2009-01-20 15:51 - 00007168 _____ ( ) C:\ATI\ATI.ACE\Core-Static\atixclib.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00008192 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00015872 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Runtime.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00012288 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00019968 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00010752 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013312 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\Fuel.Foundation.dll

2012-08-06 13:24 - 2012-08-06 13:24 - 00037376 _____ (AMD) C:\ATI\ATI.ACE\Fuel\FUEL.Implementation.dll

2012-08-06 13:24 - 2012-08-06 13:24 - 00103424 _____ () C:\ATI\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

2012-08-06 13:03 - 2012-08-06 13:03 - 00479232 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\Localization.Foundation.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00352256 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\Localization.Foundation.Implementation.de_Localization.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00071168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Fusion.Aspects.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00012800 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DPPE.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00011264 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Fets.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.WiFi.Fuel.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00013824 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUPStates.Fuel.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00018944 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00018944 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00011264 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Runtime.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00015360 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00012800 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00011776 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Runtime.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00066048 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\APM.Server.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00024576 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\APM.Foundation.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007168 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Runtime.Extension.EEU.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00005632 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\AEM.Plugin.EEU.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00380928 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00036352 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Client.Shared.Private.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00007680 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Client.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 01395200 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.Private.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00413696 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Systemtray.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00175104 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\ResourceManagement.Foundation.Implementation.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00172032 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 01007616 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.Shared.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00028160 _____ (Advanced Mirco Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00057344 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 01406464 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects1.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00441344 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00369152 _____ () C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00032768 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00393216 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 02400256 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00024576 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MultiVPU2.Graphics.Shared.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00237568 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00159744 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00100864 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.OverDrive5.Graphics.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00021504 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00044544 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Audio.Graphics.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008704 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 01260032 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.User.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00026112 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.Fets.Fuel.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00021504 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.WiFi.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00048128 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DPPE.Fuel.Dashboard.dll

2012-08-06 13:07 - 2012-08-06 13:07 - 00029696 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUPStates.Fuel.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00037376 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00007680 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.Platform.Dashboard.dll

2012-08-06 13:08 - 2012-08-06 13:08 - 00039936 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Dashboard.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00008192 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Dashboard.dll

2012-08-06 13:04 - 2012-08-06 13:04 - 00307200 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Foundation.Client.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00060928 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Component.Dashboard.ProfileManager2.dll

2012-08-06 13:06 - 2012-08-06 13:06 - 00528384 _____ (Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.dll

2012-08-06 13:05 - 2012-08-06 13:05 - 00020480 _____ (Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.dll

2013-01-15 19:16 - 2012-04-11 20:06 - 01186816 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\TMSlite160.bpl

2013-01-15 19:16 - 2012-03-13 14:50 - 03660800 _____ (Project JEDI) E:\Programme\Avanquest\PDF Experte 8 Ultimate\Jcl160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00087552 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspropsaver160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02478080 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsvector160.bpl

2013-01-15 19:16 - 2012-03-29 18:00 - 04119552 _____ (visagesoft) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsgdi.dll

2013-01-15 19:16 - 2012-04-11 20:06 - 04680704 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfcore160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02693120 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\BBlite160.bpl

2013-01-15 19:16 - 2012-02-23 16:11 - 00025088 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vstrees160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00064512 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsprinters160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00064512 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprinter160.bpl

2013-01-15 19:16 - 2011-09-30 19:10 - 00684032 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\js32.dll

2013-01-15 19:16 - 2012-04-11 20:06 - 00097280 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\expertpdfcore160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00253952 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndySystem160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 02506752 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndyProtocols160.bpl

2013-01-15 19:16 - 2012-02-24 02:55 - 00387584 _____ (Chad Z. Hower a.k.a Kudzu and the Indy Pit Crew) E:\Programme\Avanquest\PDF Experte 8 Ultimate\IndyCore160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 02253824 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\PKIECtrl160.bpl

2013-01-15 19:16 - 2012-04-11 20:06 - 00517120 _____ () E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfeditor160.bpl

2013-01-15 19:16 - 2011-01-19 17:49 - 00156160 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\Snapu.dll

2013-01-15 19:16 - 2010-04-06 15:41 - 00316416 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\OLRegist.dll

2013-01-15 19:16 - 2010-08-05 10:57 - 00599296 _____ (Avanquest Software) E:\Programme\Avanquest\PDF Experte 8 Ultimate\bvrpctln.dll

2011-09-16 15:39 - 2011-09-16 15:39 - 00098664 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll

2013-02-13 04:38 - 2013-02-13 04:38 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
 

==================== Alternate Data Streams (whitelisted) ==========
 

AlternateDataStreams: C:\ProgramData\Microsoft:cJP8NoA3alrUCM20

AlternateDataStreams: C:\ProgramData\Microsoft:V6rvehwmRjYqRAkFBpLsBNz

AlternateDataStreams: C:\Users\Marko\Cookies:xfyRDFyvnvb5tEWMQke9kc

AlternateDataStreams: C:\Users\Marko\Lokale Einstellungen:ESx4L4fSedPdx1ERV9rqEL

AlternateDataStreams: C:\Users\Marko\AppData\Local:ESx4L4fSedPdx1ERV9rqEL

AlternateDataStreams: C:\Users\Marko\AppData\Local\Anwendungsdaten:ESx4L4fSedPdx1ERV9rqEL
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/20/2013 08:26:02 AM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/19/2013 04:10:55 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (09/19/2013 04:10:55 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (09/19/2013 04:10:53 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (09/19/2013 02:09:23 PM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/18/2013 09:45:45 PM) (Source: MemeoBackgroundService) (User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/18/2013 07:35:11 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 15.0.4535.1000, Zeitstempel: 0x51de6fa2

Name des fehlerhaften Moduls: oart.dll, Version: 15.0.4535.1000, Zeitstempel: 0x51de6f17

Ausnahmecode: 0xc00002b4

Fehleroffset: 0x0026fc12

ID des fehlerhaften Prozesses: 0x674

Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0

Pfad der fehlerhaften Anwendung: WINWORD.EXE1

Pfad des fehlerhaften Moduls: WINWORD.EXE2

Berichtskennung: WINWORD.EXE3
 

Error: (09/18/2013 07:15:06 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 15.0.4535.1000, Zeitstempel: 0x51de6fa2

Name des fehlerhaften Moduls: oart.dll, Version: 15.0.4535.1000, Zeitstempel: 0x51de6f17

Ausnahmecode: 0xc00002b4

Fehleroffset: 0x0026fc12

ID des fehlerhaften Prozesses: 0x131c

Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0

Pfad der fehlerhaften Anwendung: WINWORD.EXE1

Pfad des fehlerhaften Moduls: WINWORD.EXE2

Berichtskennung: WINWORD.EXE3
 

Error: (09/18/2013 04:03:56 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (09/18/2013 04:03:56 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
 

System errors:

=============

Error: (09/20/2013 08:28:25 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/20/2013 08:28:25 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/20/2013 08:28:25 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/20/2013 08:28:25 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/20/2013 08:28:25 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/20/2013 08:28:25 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/20/2013 08:26:09 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/20/2013 08:26:09 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 

Error: (09/20/2013 08:26:09 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%2
 

Error: (09/20/2013 08:26:09 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Arbeitsstationsdienst" wurde mit folgendem Fehler beendet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (09/20/2013 08:26:02 AM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/19/2013 04:10:55 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Programme\Nero\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe
 

Error: (09/19/2013 04:10:55 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Programme\Nero\Nero\Nero8\Nero PhotoSnap\PhotoSnap.exe
 

Error: (09/19/2013 04:10:53 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestE:\Programme\Nero\Nero\Nero8\Nero Toolkit\DiscSpeed.exe
 

Error: (09/19/2013 02:09:23 PM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/18/2013 09:45:45 PM) (Source: MemeoBackgroundService)(User: )

Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)

   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)

   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)

   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)

   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)

   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)

   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)
 

Error: (09/18/2013 07:35:11 PM) (Source: Application Error)(User: )

Description: WINWORD.EXE15.0.4535.100051de6fa2oart.dll15.0.4535.100051de6f17c00002b40026fc1267401ceb4956b91adb4C:\Program Files\Microsoft Office 15\Root\Office15\WINWORD.EXEC:\Program Files\Microsoft Office 15\Root\Office15\oart.dllaaf8a8e7-2088-11e3-a1f4-1c6f6581d4c8
 

Error: (09/18/2013 07:15:06 PM) (Source: Application Error)(User: )

Description: WINWORD.EXE15.0.4535.100051de6fa2oart.dll15.0.4535.100051de6f17c00002b40026fc12131c01ceb4929cfacadcC:\Program Files\Microsoft Office 15\Root\Office15\WINWORD.EXEC:\Program Files\Microsoft Office 15\Root\Office15\oart.dlldc807212-2085-11e3-a1f4-1c6f6581d4c8
 

Error: (09/18/2013 04:03:56 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Programme\Nero\Nero\Nero8\Nero PhotoSnap\PhotoSnapViewer.exe
 

Error: (09/18/2013 04:03:56 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestE:\Programme\Nero\Nero\Nero8\Nero PhotoSnap\PhotoSnap.exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-09-05 15:33:31.315

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-05 15:33:31.185

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-06-28 13:37:59.118

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.117

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.114

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.100

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.099

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-28 13:37:59.096

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-05-08 11:24:41.256

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-05-08 11:24:41.254

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 24%

Total physical RAM: 8188.54 MB

Available physical RAM: 6159.38 MB

Total Pagefile: 16375.25 MB

Available Pagefile: 13859.04 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (Windows) (Fixed) (Total:104.75 GB) (Free:24.8 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (FreeAgent GoFlex Drive) (Fixed) (Total:465.76 GB) (Free:401.88 GB) NTFS

Drive e: (Programme) (Fixed) (Total:41.22 GB) (Free:12.24 GB) NTFS

Drive f: (Daten) (Fixed) (Total:180.27 GB) (Free:43.81 GB) NTFS

Drive g: (Backup) (Fixed) (Total:89.52 GB) (Free:16.88 GB) NTFS

Drive h: (Laufwerk) (Fixed) (Total:50 GB) (Free:27.1 GB) NTFS

Drive k: (Sicherung) (Fixed) (Total:931.51 GB) (Free:23.09 GB) NTFS

Drive p: (SEAGATE_EXP) (Fixed) (Total:1907.32 GB) (Free:1885.23 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C4086204)

Partition 1: (Active) - (Size=105 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=361 GB) - (Type=OF Extended)
 

========================================================

Disk: 1 (Size: 932 GB) (Disk ID: 56A6B2F7)

Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (Size: 466 GB) (Disk ID: 76942D58)

Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 3.
 

==================== End Of Log ============================

mk72	20.09.2013 17:11

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01

Ran by Marko (administrator) on KOBOLT on 20-09-2013 15:27:53

Running from C:\Users\Marko\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avshadow.exe

(AMD) C:\Windows\system32\atiesrxx.exe

(AMD) C:\Windows\system32\atieclxx.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe

(Advanced Micro Devices, Inc.) C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe

(mst software GmbH, Germany) E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Deutsche Telekom AG) E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe

(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

(StarWind Software) e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

(Logitech, Inc.) C:\Program Files\Logitech\FlowScroll\KhalScroll.exe

(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE

(Logitech, Inc.) E:\Programme\Logitech\SetPointP\SetPoint.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(IvoSoft) E:\Programme\Classic Shell\ClassicStartMenu.exe

(Blue Onion Software) E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe

(Microsoft) E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

() C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

(Visagesoft) E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Avira Operations GmbH & Co. KG) E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe

() E:\Programme\Rainmeter\Rainmeter.exe

(Adobe Systems Incorporated) E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

() e:\Programme\Ocster Backup\bin\backupService-ox.exe

() e:\Programme\Ocster Backup\bin\oxHelper.exe

(TomTom) E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe

(Advanced Micro Devices Inc.) C:\ATI\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\ATI\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

HKLM\...\Run: [LogiScrollApp] - C:\Program Files\Logitech\FlowScroll\KhalScroll.exe [166680 2012-02-08] (Logitech, Inc.)

HKLM\...\Run: [EvtMgr6] - E:\Programme\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2000-01-01] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)

HKLM\...\Run: [Ocster Backup] - E:\Programme\Ocster Backup\bin\backupClient-ox.exe [312488 2013-07-02] ()

HKLM\...\Run: [Classic Start Menu] - E:\Programme\Classic Shell\ClassicStartMenu.exe [151552 2013-06-29] (IvoSoft)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKCU\...\Run: [DeskDriveStartup] - E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe [66048 2009-12-06] (Blue Onion Software)

HKCU\...\Run: [BrowserMask] - E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe [101280 2011-06-21] (Microsoft)

HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-01-31] ()

HKLM-x32\...\Run: [DivXMediaServer] - e:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC)

HKLM-x32\...\Run: [vspdfprsrv.exe] - e:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe [6082560 2012-04-23] (Visagesoft)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [StartCCC] - C:\ATI\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-13] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [Memeo Instant Backup] - C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2011-09-16] (Memeo Inc.)

HKLM-x32\...\Run: [avgnt] - E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk

ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk

ShortcutTarget: Mediencenter.lnk -> C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)

Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk

ShortcutTarget: Rainmeter.lnk -> E:\Programme\Rainmeter\Rainmeter.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.jan-records.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x10F897CE9304CA01

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKCU - {B8043587-EBE9-4754-9E02-4BD5899FE7BA} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=971163&p={searchTerms}

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll (Logitech, Inc.)

BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)

BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - e:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programme\Java\bin\ssv.dll (Oracle Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Programme\Java\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Logitech Flow Scroll - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll (Logitech, Inc.)

BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Winsock: Catalog9 01 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 20 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 01 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 02 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 03 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 04 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 05 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 06 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 07 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 08 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9-x64 20 E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231480] (Avira Operations GmbH & Co. KG)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-812850846-3816870413-364722810-1001\FireFox

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @canon.com/MycameraPlugin - E:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)

FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - e:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - e:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - E:\Programme\Java\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}] - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt

FF Extension: Logitech Flow Scroll - C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt

FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5

FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF StartMenuInternet: FIREFOX.EXE - e:\Programme\Mozilla Firefox\firefox.exe
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-07-17] (Adobe Systems)

R2 AdobeActiveFileMonitor11.0; E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)

R2 AMD FUEL Service; C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.)

R2 AntiVirSchedulerService; E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; E:\Programme\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()

S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)

R2 DfSdkS; E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)

S2 LanmanWorkstation; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation)

R2 MCSWASVR; E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe [12800 2011-11-23] (Deutsche Telekom AG)

S4 Nero BackItUp Scheduler 3; E:\Programme\Nero\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)

S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)

R2 ocster_backup; e:\Programme\Ocster Backup\bin\backupService-ox.exe [23720 2013-07-02] ()

R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1901752 2013-07-22] (Microsoft Corporation)

S3 SandraAgentSrv; E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe [68760 2008-09-05] (SiSoftware)

R2 StarWindServiceAE; e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)

R2 TomTomHOMEService; E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe [92632 2012-08-28] (TomTom)

S4 McComponentHostService; "C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe" [x]

S4 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 AODDriver4.1; C:\ATI\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)

R2 cpuz135; C:\Windows\system32\drivers\cpuz135_x64.sys [21992 2011-09-21] (CPUID)

S3 etdrv; C:\Windows\etdrv.sys [25640 2012-02-01] (Windows (R) Server 2003 DDK provider)

S3 etdrv; C:\Windows\etdrv.sys [25640 2012-02-01] (Windows (R) Server 2003 DDK provider)

S3 gdrv; C:\Windows\gdrv.sys [25640 2012-10-09] (Windows (R) Server 2003 DDK provider)

S3 gdrv; C:\Windows\gdrv.sys [25640 2012-10-09] (Windows (R) Server 2003 DDK provider)

S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG)

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-02-01] ()

S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-02-01] ()

R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39728 2011-11-04] (Paragon Software Group)

R0 oodrvled; C:\Windows\System32\DRIVERS\oodrvled.sys [30800 2011-03-02] (O&O Software GmbH)

R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)

S3 SANDRA; E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\Sandra.sys [23112 2009-08-08] (SiSoftware)

S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-11-07] (Duplex Secure Ltd.)

R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-04] (Windows (R) 2000 DDK provider)

R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-04] (Paragon)

R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-04] (Paragon)

S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [x]

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

S0 TPkd; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-20 15:27 - 2013-09-20 15:27 - 00000940 _____ C:\Users\Marko\Desktop\Neues Textdokument.txt

2013-09-20 15:26 - 2013-09-20 15:26 - 01950622 _____ (Farbar) C:\Users\Marko\Desktop\FRST64.exe

2013-09-20 15:25 - 2013-09-20 15:26 - 01950622 _____ (Farbar) C:\Users\Marko\Downloads\FRST64.exe

2013-09-20 15:23 - 2013-09-20 15:23 - 05369204 _____ C:\Users\Marko\Downloads\tweaking.com_windows_repair_aio_setup.exe

2013-09-20 08:26 - 2013-09-20 14:26 - 98474815 _____ C:\Windows\SysWOW64\ទ㤃뻼¡

2013-09-19 23:15 - 2013-09-19 23:16 - 64196136 _____ (Avanquest software) C:\Users\Marko\Downloads\PDF_Experte_V9_Ultimate_DEU_TRIAL.exe

2013-09-18 21:43 - 2013-09-18 21:43 - 00000000 ____D C:\_OTL

2013-09-18 15:04 - 2013-09-18 15:04 - 00602112 _____ (OldTimer Tools) C:\Users\Marko\Downloads\OTL.exe

2013-09-18 15:04 - 2013-09-18 15:04 - 00602112 _____ (OldTimer Tools) C:\Users\Marko\Desktop\OTL.exe

2013-09-11 10:01 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-11 10:01 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-11 10:01 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-11 10:01 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-11 10:01 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-11 10:01 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-11 10:01 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-11 10:01 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-11 10:01 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-11 10:01 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-11 10:01 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-11 10:01 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-11 10:01 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-11 10:01 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-11 09:41 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-11 09:41 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-11 09:41 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-11 09:41 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-11 09:41 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-11 09:41 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-11 09:41 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-11 09:41 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-11 09:41 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-11 09:41 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-11 09:41 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-11 09:41 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-11 09:41 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-11 09:41 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-11 09:41 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-11 09:41 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-11 09:41 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-11 09:41 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-11 09:41 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-11 09:41 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-11 09:41 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-11 09:41 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 09:41 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-11 09:41 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-11 09:41 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-11 09:41 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-11 09:41 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-09-09 15:22 - 2013-09-09 15:22 - 02347384 _____ (ESET) C:\Users\Marko\Downloads\esetsmartinstaller_enu.exe

2013-09-09 15:00 - 2013-09-09 15:00 - 00000000 ____D C:\Users\Marko\Desktop\Polli

2013-09-06 15:13 - 2013-09-06 15:13 - 09999832 _____ C:\Users\Marko\Downloads\FreeFileSync_5.21_Windows_Setup.exe

2013-09-06 15:05 - 2013-09-06 15:05 - 04410648 _____ C:\Users\Marko\Downloads\CloudConnectforOffice1.1.0.exe

2013-09-06 15:05 - 2013-09-06 15:05 - 04138776 _____ C:\Users\Marko\Downloads\CloudConnectforOutlook1.0.0.exe

2013-09-06 15:04 - 2013-09-06 15:04 - 00836632 _____ C:\Users\Marko\Downloads\ASUSWebStorageRemoteDrive1.0.0.171.exe

2013-09-06 12:18 - 2013-09-06 12:18 - 00000000 ____D C:\Windows\ERUNT

2013-09-06 11:32 - 2013-09-06 11:44 - 00000000 ____D C:\AdwCleaner

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-06 11:00 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-06 10:59 - 2013-09-06 10:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Marko\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-05 15:26 - 2013-09-05 15:52 - 00000000 ____D C:\Qoobox

2013-09-05 15:26 - 2013-09-05 15:48 - 00000000 ____D C:\Windows\erdnt

2013-09-05 15:26 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2013-09-05 15:26 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2013-09-05 15:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2013-09-05 15:26 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2013-09-05 15:22 - 2013-09-20 15:25 - 00000000 ____D C:\Users\Marko\Desktop\Trojaner-Board

2013-09-04 14:43 - 2013-09-04 14:43 - 00276496 _____ C:\Windows\Minidump\090413-21590-01.dmp

2013-09-04 14:22 - 2013-09-04 14:22 - 00000000 ____D C:\FRST

2013-09-04 14:08 - 2013-09-04 14:08 - 00000344 _____ C:\Users\Marko\defogger_reenable

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(3).exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(2).exe

2013-09-04 13:51 - 2013-09-04 13:51 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(1).exe

2013-09-02 17:15 - 2013-09-02 17:15 - 00000787 _____ C:\Users\Marko\Desktop\DivX Movies.lnk

2013-09-02 17:15 - 2013-09-02 17:15 - 00000754 _____ C:\Users\Public\Desktop\DivX Plus Player.lnk

2013-08-29 08:59 - 2013-08-29 08:59 - 05192704 _____ (Geza Kovacs) C:\Users\Marko\Downloads\unetbootin-windows-585.exe

2013-08-29 08:53 - 2013-08-29 08:53 - 00000000 ____D C:\Users\Marko\Desktop\Hausbau

2013-08-28 19:23 - 2013-08-28 19:23 - 616382464 _____ C:\Users\Marko\Downloads\rescue-system.iso

2013-08-28 16:21 - 2013-08-28 16:21 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Avira

2013-08-28 16:18 - 2013-09-04 11:36 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-08-28 16:17 - 2013-09-04 11:36 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-08-28 16:17 - 2013-09-04 11:36 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-08-28 16:17 - 2013-08-28 16:17 - 00000000 ____D C:\ProgramData\Avira

2013-08-28 16:17 - 2013-03-06 16:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-08-28 15:58 - 2013-08-28 15:59 - 110344048 _____ C:\Users\Marko\Downloads\avira_free4045_antivirus_de.exe

2013-08-28 15:46 - 2013-08-28 15:46 - 02733958 _____ C:\Users\Marko\Downloads\tdsskiller.zip

2013-08-28 15:40 - 2013-08-28 15:40 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck.exe

2013-08-27 13:39 - 2013-09-18 21:45 - 00103784 _____ C:\Windows\PFRO.log

2013-08-26 14:38 - 2013-08-26 15:04 - 00000000 ____D C:\Users\Marko\Desktop\Kaspersky

2013-08-25 18:15 - 2013-08-27 22:03 - 00000000 ____D C:\Users\Marko\AppData\Local\BewerbungsMaster

2013-08-25 18:14 - 2013-08-27 23:00 - 00000000 ____D C:\Users\Marko\Documents\BewerbungsMaster

2013-08-25 18:13 - 2013-08-25 18:13 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2013-08-25 18:07 - 2013-08-25 18:14 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2013-08-25 18:07 - 2013-08-25 18:14 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2013-08-25 18:06 - 2013-08-25 18:06 - 11616256 _____ C:\Users\Marko\Downloads\master71.exe

2013-08-25 17:23 - 2013-09-19 14:35 - 00000000 ____D C:\Users\Marko\Desktop\Nick_Ausbildung

2013-08-24 11:32 - 2013-09-20 08:25 - 00002621 _____ C:\Windows\setupact.log

2013-08-24 11:32 - 2013-08-24 11:32 - 00000000 _____ C:\Windows\setuperr.log

2013-08-22 15:01 - 2013-08-22 15:01 - 00000000 ____D C:\Users\Marko\AppData\Roaming\dvdcss

2013-08-22 14:58 - 2013-08-22 14:58 - 00000687 _____ C:\Users\Marko\Desktop\MediaCoder x64.lnk

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Broad Intelligence

2013-08-22 14:55 - 2013-08-22 14:57 - 68913986 _____ C:\Users\Marko\Downloads\MediaCoder-x64-0.8.25.5553.exe
 

==================== One Month Modified Files and Folders =======
 

2013-09-20 15:27 - 2013-09-20 15:27 - 00000940 _____ C:\Users\Marko\Desktop\Neues Textdokument.txt

2013-09-20 15:26 - 2013-09-20 15:26 - 01950622 _____ (Farbar) C:\Users\Marko\Desktop\FRST64.exe

2013-09-20 15:26 - 2013-09-20 15:25 - 01950622 _____ (Farbar) C:\Users\Marko\Downloads\FRST64.exe

2013-09-20 15:25 - 2013-09-05 15:22 - 00000000 ____D C:\Users\Marko\Desktop\Trojaner-Board

2013-09-20 15:23 - 2013-09-20 15:23 - 05369204 _____ C:\Users\Marko\Downloads\tweaking.com_windows_repair_aio_setup.exe

2013-09-20 15:17 - 2012-09-14 10:49 - 00000338 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job

2013-09-20 15:15 - 2012-03-21 16:30 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-20 14:57 - 2012-01-16 23:34 - 01675803 _____ C:\Windows\WindowsUpdate.log

2013-09-20 14:26 - 2013-09-20 08:26 - 98474815 _____ C:\Windows\SysWOW64\ទ㤃뻼¡

2013-09-20 11:15 - 2012-03-21 16:30 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-20 08:36 - 2012-08-03 17:25 - 00000000 ____D C:\Users\Marko\AppData\Local\Adobe

2013-09-20 08:35 - 2009-07-14 06:45 - 00015856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-20 08:35 - 2009-07-14 06:45 - 00015856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-20 08:25 - 2013-08-24 11:32 - 00002621 _____ C:\Windows\setupact.log

2013-09-20 08:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-20 00:15 - 2012-03-29 22:15 - 00078423 _____ C:\Windows\system32\log.xml

2013-09-20 00:15 - 2012-03-29 22:15 - 00000008 _____ C:\Windows\system32\log-suffix.xml

2013-09-19 23:16 - 2013-09-19 23:15 - 64196136 _____ (Avanquest software) C:\Users\Marko\Downloads\PDF_Experte_V9_Ultimate_DEU_TRIAL.exe

2013-09-19 22:41 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-09-19 14:35 - 2013-08-25 17:23 - 00000000 ____D C:\Users\Marko\Desktop\Nick_Ausbildung

2013-09-18 21:45 - 2013-08-27 13:39 - 00103784 _____ C:\Windows\PFRO.log

2013-09-18 21:43 - 2013-09-18 21:43 - 00000000 ____D C:\_OTL

2013-09-18 15:07 - 2013-03-01 12:06 - 00000000 ____D C:\Program Files\Microsoft Office 15

2013-09-18 15:04 - 2013-09-18 15:04 - 00602112 _____ (OldTimer Tools) C:\Users\Marko\Downloads\OTL.exe

2013-09-18 15:04 - 2013-09-18 15:04 - 00602112 _____ (OldTimer Tools) C:\Users\Marko\Desktop\OTL.exe

2013-09-18 14:51 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-09-16 14:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-16 13:48 - 2012-04-02 11:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-16 13:48 - 2011-12-05 22:08 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-15 11:27 - 2011-12-05 17:51 - 00000000 ___RD C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-15 11:27 - 2011-12-05 17:51 - 00000000 ___RD C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-11 10:37 - 2011-12-05 17:31 - 00000000 ____D C:\Windows\Panther

2013-09-11 10:37 - 2009-07-14 06:45 - 03584480 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-11 10:01 - 2013-07-11 11:28 - 00000000 ____D C:\Windows\system32\MRT

2013-09-11 09:48 - 2011-12-06 14:35 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-09 15:25 - 2009-07-14 19:58 - 00700370 _____ C:\Windows\system32\perfh007.dat

2013-09-09 15:25 - 2009-07-14 19:58 - 00149184 _____ C:\Windows\system32\perfc007.dat

2013-09-09 15:25 - 2009-07-14 07:13 - 01622098 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-09 15:22 - 2013-09-09 15:22 - 02347384 _____ (ESET) C:\Users\Marko\Downloads\esetsmartinstaller_enu.exe

2013-09-09 15:00 - 2013-09-09 15:00 - 00000000 ____D C:\Users\Marko\Desktop\Polli

2013-09-06 15:13 - 2013-09-06 15:13 - 09999832 _____ C:\Users\Marko\Downloads\FreeFileSync_5.21_Windows_Setup.exe

2013-09-06 15:05 - 2013-09-06 15:05 - 04410648 _____ C:\Users\Marko\Downloads\CloudConnectforOffice1.1.0.exe

2013-09-06 15:05 - 2013-09-06 15:05 - 04138776 _____ C:\Users\Marko\Downloads\CloudConnectforOutlook1.0.0.exe

2013-09-06 15:04 - 2013-09-06 15:04 - 00836632 _____ C:\Users\Marko\Downloads\ASUSWebStorageRemoteDrive1.0.0.171.exe

2013-09-06 12:18 - 2013-09-06 12:18 - 00000000 ____D C:\Windows\ERUNT

2013-09-06 11:44 - 2013-09-06 11:32 - 00000000 ____D C:\AdwCleaner

2013-09-06 11:44 - 2011-12-05 17:51 - 00000000 ____D C:\Users\Marko

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-06 11:00 - 2013-09-06 11:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-06 10:59 - 2013-09-06 10:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Marko\Downloads\mbam-setup-1.75.0.1300.exe

2013-09-05 16:46 - 2012-04-26 22:27 - 00003234 _____ C:\Windows\System32\Tasks\SidebarExecute

2013-09-05 15:52 - 2013-09-05 15:26 - 00000000 ____D C:\Qoobox

2013-09-05 15:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2013-09-05 15:48 - 2013-09-05 15:26 - 00000000 ____D C:\Windows\erdnt

2013-09-05 15:40 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2013-09-04 14:43 - 2013-09-04 14:43 - 00276496 _____ C:\Windows\Minidump\090413-21590-01.dmp

2013-09-04 14:43 - 2012-04-19 20:27 - 00000000 ____D C:\Windows\Minidump

2013-09-04 14:22 - 2013-09-04 14:22 - 00000000 ____D C:\FRST

2013-09-04 14:08 - 2013-09-04 14:08 - 00000344 _____ C:\Users\Marko\defogger_reenable

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(3).exe

2013-09-04 13:52 - 2013-09-04 13:52 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(2).exe

2013-09-04 13:51 - 2013-09-04 13:51 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck(1).exe

2013-09-04 11:36 - 2013-08-28 16:18 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-09-04 11:36 - 2013-08-28 16:17 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-09-04 11:36 - 2013-08-28 16:17 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-09-02 17:43 - 2012-04-04 12:07 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Mp3tag

2013-09-02 17:16 - 2012-03-19 17:27 - 00000000 ____D C:\Users\Marko\Desktop\Auto

2013-09-02 17:15 - 2013-09-02 17:15 - 00000787 _____ C:\Users\Marko\Desktop\DivX Movies.lnk

2013-09-02 17:15 - 2013-09-02 17:15 - 00000754 _____ C:\Users\Public\Desktop\DivX Plus Player.lnk

2013-09-02 17:15 - 2012-08-21 13:36 - 00000000 ____D C:\ProgramData\DivX

2013-08-29 17:02 - 2013-02-03 18:03 - 00000000 ____D C:\Users\Marko\AppData\Local\Microsoft Help

2013-08-29 16:39 - 2013-07-19 13:45 - 00000000 ____D C:\Users\Marko\AppData\Roaming\onOne Software

2013-08-29 08:59 - 2013-08-29 08:59 - 05192704 _____ (Geza Kovacs) C:\Users\Marko\Downloads\unetbootin-windows-585.exe

2013-08-29 08:53 - 2013-08-29 08:53 - 00000000 ____D C:\Users\Marko\Desktop\Hausbau

2013-08-28 19:23 - 2013-08-28 19:23 - 616382464 _____ C:\Users\Marko\Downloads\rescue-system.iso

2013-08-28 16:21 - 2013-08-28 16:21 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Avira

2013-08-28 16:17 - 2013-08-28 16:17 - 00000000 ____D C:\ProgramData\Avira

2013-08-28 15:59 - 2013-08-28 15:58 - 110344048 _____ C:\Users\Marko\Downloads\avira_free4045_antivirus_de.exe

2013-08-28 15:47 - 2013-08-15 11:34 - 00000000 ____D C:\Users\Marko\Downloads\tdsskiller

2013-08-28 15:46 - 2013-08-28 15:46 - 02733958 _____ C:\Users\Marko\Downloads\tdsskiller.zip

2013-08-28 15:40 - 2013-08-28 15:40 - 00623003 _____ (No company) C:\Users\Marko\Downloads\LanmanCheck.exe

2013-08-27 23:00 - 2013-08-25 18:14 - 00000000 ____D C:\Users\Marko\Documents\BewerbungsMaster

2013-08-27 22:03 - 2013-08-25 18:15 - 00000000 ____D C:\Users\Marko\AppData\Local\BewerbungsMaster

2013-08-26 16:55 - 2012-03-23 11:34 - 00000000 ____D C:\ProgramData\firebird

2013-08-26 15:04 - 2013-08-26 14:38 - 00000000 ____D C:\Users\Marko\Desktop\Kaspersky

2013-08-26 14:53 - 2013-05-24 12:28 - 00002453 _____ C:\Users\Public\Desktop\SeaTools for Windows.lnk

2013-08-25 21:41 - 2013-08-19 14:10 - 00000000 ____D C:\Users\Marko\MEDION NAS TOOL

2013-08-25 18:14 - 2013-08-25 18:07 - 00335872 ____N (Microsoft Corporation) C:\Windows\Setup1.exe

2013-08-25 18:14 - 2013-08-25 18:07 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE

2013-08-25 18:13 - 2013-08-25 18:13 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

2013-08-25 18:06 - 2013-08-25 18:06 - 11616256 _____ C:\Users\Marko\Downloads\master71.exe

2013-08-24 11:32 - 2013-08-24 11:32 - 00000000 _____ C:\Windows\setuperr.log

2013-08-23 20:20 - 2013-07-29 14:57 - 00000370 _____ C:\Windows\Tasks\One-Click Optimizer.job

2013-08-23 13:05 - 2013-04-21 20:07 - 00001147 _____ C:\Users\Marko\Desktop\Mediencenter.lnk

2013-08-23 13:05 - 2013-04-21 20:07 - 00001133 _____ C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mediencenter.lnk

2013-08-22 15:01 - 2013-08-22 15:01 - 00000000 ____D C:\Users\Marko\AppData\Roaming\dvdcss

2013-08-22 14:58 - 2013-08-22 14:58 - 00000687 _____ C:\Users\Marko\Desktop\MediaCoder x64.lnk

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

2013-08-22 14:58 - 2013-08-22 14:58 - 00000000 ____D C:\Users\Marko\AppData\Roaming\Broad Intelligence

2013-08-22 14:57 - 2013-08-22 14:55 - 68913986 _____ C:\Users\Marko\Downloads\MediaCoder-x64-0.8.25.5553.exe

2013-08-22 14:33 - 2012-01-03 18:30 - 00018944 _____ C:\Users\Marko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-08-22 14:31 - 2012-08-21 13:39 - 00000000 ____D C:\Users\Marko\AppData\Roaming\DivX

2013-08-22 14:30 - 2012-02-28 17:45 - 00000124 _____ C:\Users\Marko\Documents\ax_files.xml

2013-08-21 12:09 - 2011-12-06 19:45 - 00000000 ____D C:\ProgramData\ashampoo
 

Some content of TEMP:

====================

C:\Users\Marko\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-16 14:06
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Die anderen Tools lasse ich jetzt durchlaufen.

mk72	20.09.2013 20:19

Hier das OTL-log

Code:

OTL logfile created on: 20.09.2013 18:15:50 - Run 2

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Marko\Desktop

64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16686)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

8,00 Gb Total Physical Memory | 6,02 Gb Available Physical Memory | 75,26% Memory free

15,99 Gb Paging File | 13,52 Gb Available in Paging File | 84,54% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 104,75 Gb Total Space | 24,84 Gb Free Space | 23,71% Space Free | Partition Type: NTFS

Drive D: | 465,76 Gb Total Space | 401,88 Gb Free Space | 86,28% Space Free | Partition Type: NTFS

Drive E: | 41,22 Gb Total Space | 12,24 Gb Free Space | 29,70% Space Free | Partition Type: NTFS

Drive F: | 180,27 Gb Total Space | 43,81 Gb Free Space | 24,30% Space Free | Partition Type: NTFS

Drive G: | 89,52 Gb Total Space | 16,88 Gb Free Space | 18,86% Space Free | Partition Type: NTFS

Drive H: | 50,00 Gb Total Space | 27,10 Gb Free Space | 54,20% Space Free | Partition Type: NTFS

Drive K: | 931,51 Gb Total Space | 23,09 Gb Free Space | 2,48% Space Free | Partition Type: NTFS

Drive P: | 1907,32 Gb Total Space | 1885,23 Gb Free Space | 98,84% Space Free | Partition Type: FAT32

 

Computer Name: KOBOLT | User Name: Marko | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2013.09.18 15:04:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Marko\Desktop\OTL.exe

PRC - [2013.09.04 11:36:37 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe

PRC - [2013.09.04 11:36:27 | 000,347,192 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe

PRC - [2013.09.04 11:36:27 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe

PRC - [2013.05.22 20:50:40 | 000,400,704 | ---- | M] () -- C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

PRC - [2013.02.13 04:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

PRC - [2012.09.17 07:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) -- E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

PRC - [2012.08.28 08:41:08 | 000,092,632 | ---- | M] (TomTom) -- E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe

PRC - [2012.04.23 15:42:36 | 006,082,560 | ---- | M] (Visagesoft) -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe

PRC - [2011.09.16 15:39:24 | 000,115,048 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

PRC - [2011.05.24 11:33:30 | 001,840,128 | ---- | M] (MAGIX AG) -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

PRC - [2009.12.23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2013.05.22 20:50:40 | 000,400,704 | ---- | M] () -- C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

MOD - [2013.02.13 04:38:06 | 000,100,688 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

MOD - [2013.02.13 04:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

MOD - [2012.04.11 20:06:12 | 000,517,120 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfeditor160.bpl

MOD - [2012.04.11 20:06:12 | 000,097,280 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\expertpdfcore160.bpl

MOD - [2012.04.11 20:06:10 | 004,680,704 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfcore160.bpl

MOD - [2012.04.11 20:06:08 | 002,478,080 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsvector160.bpl

MOD - [2012.04.11 20:06:08 | 000,064,512 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vsprinters160.bpl

MOD - [2012.04.11 20:06:08 | 000,064,512 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprinter160.bpl

MOD - [2012.04.11 20:06:06 | 000,087,552 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vspropsaver160.bpl

MOD - [2012.04.11 20:06:04 | 002,693,120 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\bblite160.bpl

MOD - [2012.04.11 20:06:04 | 002,253,824 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\PKIECtrl160.bpl

MOD - [2012.04.11 20:06:02 | 001,186,816 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\TMSlite160.bpl

MOD - [2012.02.23 16:11:28 | 000,025,088 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\vstrees160.bpl

MOD - [2011.09.30 19:10:22 | 000,684,032 | ---- | M] () -- E:\Programme\Avanquest\PDF Experte 8 Ultimate\js32.dll

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2013.07.22 00:25:30 | 001,901,752 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe -- (OfficeSvc)

SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2012.04.26 11:14:06 | 002,438,696 | ---- | M] (mobile concepts GmbH) [On_Demand | Stopped] -- C:\Program Files\CyberGhost VPN\CGVPNCliService.exe -- (CGVPNCliSrvc)

SRV:64bit: - [2012.04.06 04:16:02 | 000,236,544 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2011.09.27 21:04:08 | 000,359,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)

SRV:64bit: - [2010.04.06 17:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)

SRV:64bit: - [2009.07.14 03:41:19 | 000,045,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lpdsvc.dll -- (LPDSVC)

SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV:64bit: - [2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\svchost.exe -- (LanmanWorkstation)

SRV - [2013.09.04 11:36:37 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2013.09.04 11:36:29 | 000,815,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Disabled | Stopped] -- E:\Programme\Antivir\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)

SRV - [2013.09.04 11:36:27 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2013.07.02 17:21:20 | 000,023,720 | ---- | M] () [Auto | Running] -- e:\Programme\Ocster Backup\bin\backupService-ox.exe -- (ocster_backup)

SRV - [2013.04.18 11:06:42 | 000,737,616 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2013.01.16 22:09:27 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.09.17 07:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- E:\Programme\Adobe\Photoshop Elements 11\Elements 11 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor11.0)

SRV - [2012.08.28 08:41:08 | 000,092,632 | ---- | M] (TomTom) [Auto | Running] -- E:\Programme\TomTom\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)

SRV - [2012.08.06 13:24:22 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\ATI\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)

SRV - [2011.11.23 14:02:07 | 000,012,800 | ---- | M] (Deutsche Telekom AG) [Auto | Running] -- E:\Programme\Telekom\Mediencenter\DTAG.Mediencenter.BackgroundService.exe -- (MCSWASVR)

SRV - [2011.09.16 01:16:48 | 000,025,824 | ---- | M] (Memeo) [Auto | Running] -- C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe -- (MemeoBackgroundService)

SRV - [2011.05.24 11:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)

SRV - [2011.04.26 14:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)

SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009.12.23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- e:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)

SRV - [2009.09.20 11:55:20 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)

SRV - [2009.08.24 22:16:12 | 000,544,768 | ---- | M] (mst software GmbH, Germany) [Auto | Running] -- E:\Programme\Ashampoo\Ashampoo WinOptimizer 10\DfSdkS64.exe -- (DfSdkS)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2008.09.05 02:09:02 | 000,068,760 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\RpcAgentSrv.exe -- (SandraAgentSrv)

SRV - [2007.05.31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)

SRV - [2007.05.31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - File not found [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys -- (AODDriver4.01)

DRV:64bit: - [2013.09.04 11:36:39 | 000,132,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)

DRV:64bit: - [2013.09.04 11:36:39 | 000,105,344 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)

DRV:64bit: - [2013.07.29 14:31:56 | 000,045,856 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)

DRV:64bit: - [2013.03.06 16:13:37 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)

DRV:64bit: - [2013.02.22 07:32:08 | 000,160,256 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ser2pl64.sys -- (Ser2pl)

DRV:64bit: - [2013.02.12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)

DRV:64bit: - [2013.01.23 10:31:52 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)

DRV:64bit: - [2013.01.23 10:31:52 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)

DRV:64bit: - [2013.01.23 10:31:52 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)

DRV:64bit: - [2013.01.23 10:31:52 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)

DRV:64bit: - [2012.10.17 14:53:46 | 000,026,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)

DRV:64bit: - [2012.08.27 20:39:20 | 000,226,696 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)

DRV:64bit: - [2012.08.27 20:39:16 | 000,107,912 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)

DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012.08.10 04:01:00 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2012.06.05 14:45:16 | 000,237,968 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)

DRV:64bit: - [2012.04.12 01:30:00 | 000,708,200 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2012.04.06 07:22:40 | 011,174,400 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2012.04.06 03:10:44 | 000,343,040 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2012.03.30 16:49:08 | 000,056,448 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)

DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.12.15 20:29:42 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)

DRV:64bit: - [2011.11.04 16:13:22 | 000,059,184 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uimx64.sys -- (UimBus)

DRV:64bit: - [2011.11.04 16:13:20 | 000,572,336 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Uim_IMx64.sys -- (Uim_IM)

DRV:64bit: - [2011.11.04 16:13:20 | 000,352,816 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uim_vimx64.sys -- (Uim_VIM)

DRV:64bit: - [2011.11.04 16:13:18 | 000,039,728 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hotcore3.sys -- (hotcore3)

DRV:64bit: - [2011.11.02 11:48:26 | 000,021,616 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)

DRV:64bit: - [2011.09.21 11:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)

DRV:64bit: - [2011.09.02 08:30:46 | 000,042,776 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)

DRV:64bit: - [2011.09.02 08:30:36 | 000,060,696 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)

DRV:64bit: - [2011.09.02 08:30:24 | 000,076,056 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LEqdUsb.sys -- (LEqdUsb)

DRV:64bit: - [2011.09.02 08:30:24 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)

DRV:64bit: - [2011.09.02 08:30:24 | 000,015,128 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidEqd.sys -- (LHidEqd)

DRV:64bit: - [2011.03.02 17:48:56 | 000,030,800 | ---- | M] (O&O Software GmbH) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\OODrvled.sys -- (oodrvled)

DRV:64bit: - [2010.11.20 06:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 03:43:58 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)

DRV:64bit: - [2010.10.29 17:11:42 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV:64bit: - [2010.06.14 10:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)

DRV:64bit: - [2010.02.18 10:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)

DRV:64bit: - [2009.12.21 17:39:40 | 000,051,712 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtTeam60.sys -- (TEAM)

DRV:64bit: - [2009.12.21 17:39:40 | 000,051,712 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtTeam60.sys -- (RTTEAMPT)

DRV:64bit: - [2009.10.07 12:13:34 | 000,070,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2009.10.07 12:13:34 | 000,028,728 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2009.07.20 04:27:34 | 000,027,136 | ---- | M] (Realtek                                            ) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\RtNdPt60.sys -- (RtNdPt60)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.05.04 18:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)

DRV:64bit: - [2009.02.20 18:09:18 | 000,054,272 | ---- | M] (Siemens Home and Office Communication Devices GmbH & Co. KG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GigasetGenericUSB_x64.sys -- (GigasetGenericUSB_x64)

DRV:64bit: - [2007.12.03 04:20:54 | 000,024,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtVlan60.sys -- (RTVLANPT)

DRV:64bit: - [2000.01.01 02:00:00 | 000,096,896 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2000.01.01 02:00:00 | 000,082,560 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)

DRV:64bit: - [2000.01.01 02:00:00 | 000,042,624 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)

DRV - [2012.10.09 16:22:55 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)

DRV - [2012.03.05 17:04:30 | 000,053,888 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\ATI\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1)

DRV - [2012.02.01 13:47:46 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)

DRV - [2012.02.01 13:43:38 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv)

DRV - [2010.06.14 10:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)

DRV - [2009.08.08 00:46:56 | 000,023,112 | ---- | M] (SiSoftware) [Kernel | On_Demand | Stopped] -- E:\Programme\SiSoftware\SiSoftware Sandra Lite 2012.SP5c\WNt500x64\sandra.sys -- (SANDRA)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

DRV - [2006.10.05 17:07:28 | 000,072,608 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysWow64\drivers\TPkd.sys -- (TPkd)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.jan-records.de/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 10 F8 97 CE 93 04 CA 01  [binary data]

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR

IE - HKCU\..\SearchScopes\{B8043587-EBE9-4754-9E02-4BD5899FE7BA}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=971163&p={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box;192.168.178.1

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledAddons: DeviceDetection%40logitech.com:1.24.0.9

FF - prefs.js..extensions.enabledAddons: maps%40ovi.com:5.9.2.0

FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10

FF - prefs.js..extensions.enabledAddons: %7B5D3F3872-91E9-4d59-AD9F-AA174A3145DD%7D:4.00.33

FF - prefs.js..extensions.enabledAddons: %7BCE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B%7D:3.9

FF - prefs.js..extensions.enabledAddons: fb_add_on%40avm.de:1.7.0

FF - prefs.js..extensions.enabledAddons: %7Bd49175b3-3fd8-43b8-b28e-da5d47f3c398%7D:1.0.51

FF - prefs.js..extensions.enabledAddons: %7B9AA46F4F-4DC7-4c06-97AF-5035170634FE%7D:7.1

FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21

FF - prefs.js..extensions.enabledAddons: %7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.182

FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20130917

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF - HKLM\Software\MozillaPlugins\@canon.com/MycameraPlugin: E:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Plus Web Player Plug-In,version=1.0.0: e:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: e:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: E:\Programme\Java\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{5D3F3872-91E9-4d59-AD9F-AA174A3145DD}: C:\Program Files\Logitech\FlowScroll\LogiSmoothFirefoxExt [2012.04.19 15:08:03 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.09.14 09:48:59 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: e:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013.09.02 17:15:46 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Components: e:\Programme\Mozilla Firefox\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Plugins: e:\Programme\Mozilla Firefox\plugins [2013.08.18 14:19:58 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012.09.14 09:48:59 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: E:\Programme\Mozilla Firefox\components

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: E:\Programme\Mozilla Firefox\plugins [2013.08.18 14:19:58 | 000,000,000 | ---D | M]

 

[2012.08.03 13:09:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\Extensions

[2012.08.03 13:09:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\Extensions\home2@tomtom.com

[2013.09.18 18:57:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions

[2013.09.18 18:57:59 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

[2013.08.28 13:20:33 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2012.04.19 14:55:30 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\DeviceDetection@logitech.com

[2013.04.16 21:36:24 | 000,000,000 | ---D | M] ("FRITZ!Box AddOn") -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\fb_add_on@avm.de

[2012.05.25 16:40:50 | 000,000,000 | ---D | M] (Nokia Maps 3D browser plugin) -- C:\Users\Marko\AppData\Roaming\mozilla\Firefox\Profiles\s0d1rked.default\extensions\maps@ovi.com

[2013.08.21 16:06:56 | 000,346,097 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\langpack-de@firefox.mozilla.org.xpi

[2013.08.25 17:31:49 | 000,149,240 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi

[2013.02.12 15:27:59 | 000,328,332 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}.xpi

[2013.08.15 12:00:58 | 000,395,932 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi

[2011.12.05 22:33:54 | 000,434,392 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi

[2012.03.05 16:40:50 | 000,000,003 | ---- | M] () (No name found) -- C:\Users\Marko\AppData\Roaming\mozilla\firefox\profiles\s0d1rked.default\extensions\maps@ovi.com\plugins\package.XPI

[2012.04.19 15:08:03 | 000,000,000 | ---D | M] (Logitech Flow Scroll) -- C:\PROGRAM FILES\LOGITECH\FLOWSCROLL\LOGISMOOTHFIREFOXEXT

[2013.09.02 17:15:46 | 000,000,000 | ---D | M] (No name found) -- E:\PROGRAMME\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5

 

O1 HOSTS File: ([2013.09.05 15:38:01 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

O2:64bit: - BHO: (ExplorerBHO Class) - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

O2:64bit: - BHO: (Logitech Flow Scroll) - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\LogiSmooth.dll (Logitech, Inc.)

O2:64bit: - BHO: (ClassicIE9BHO Class) - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - e:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

O2 - BHO: (ExplorerBHO Class) - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programme\Java\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Programme\Java\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (Logitech Flow Scroll) - {E11DB59D-5008-42ff-9069-535843BC0BE1} - C:\Program Files\Logitech\FlowScroll\32-bit\LogiSmooth.dll (Logitech, Inc.)

O2 - BHO: (ClassicIE9BHO Class) - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - E:\Programme\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)

O3:64bit: - HKLM\..\Toolbar: (Classic Explorer Bar) - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer64.dll (IvoSoft)

O3 - HKLM\..\Toolbar: (Classic Explorer Bar) - {553891B7-A0D5-4526-BE18-D3CE461D6310} - E:\Programme\Classic Shell\ClassicExplorer32.dll (IvoSoft)

O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)

O4:64bit: - HKLM..\Run: [Classic Start Menu] E:\Programme\Classic Shell\ClassicStartMenu.exe (IvoSoft)

O4:64bit: - HKLM..\Run: [EvtMgr6] E:\Programme\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)

O4:64bit: - HKLM..\Run: [LogiScrollApp] C:\Program Files\Logitech\FlowScroll\KhalScroll.exe (Logitech, Inc.)

O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)

O4:64bit: - HKLM..\Run: [Ocster Backup] E:\Programme\Ocster Backup\bin\backupClient-ox.exe ()

O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4 - HKLM..\Run: []  File not found

O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [avgnt] E:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [DivXMediaServer] e:\Programme\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)

O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()

O4 - HKLM..\Run: [Memeo Instant Backup] C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe (Memeo Inc.)

O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)

O4 - HKLM..\Run: [StartCCC] C:\ATI\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [vspdfprsrv.exe] e:\Programme\Avanquest\PDF Experte 8 Ultimate\vspdfprsrv.exe (Visagesoft)

O4 - HKCU..\Run: [AmazonMP3DownloaderHelper] C:\Users\Marko\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe ()

O4 - HKCU..\Run: [BrowserMask] E:\Programme\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe (Microsoft)

O4 - HKCU..\Run: [DeskDriveStartup] E:\Programme\Blue Onion Software\Desk Drive\DeskDrive.exe (Blue Onion Software)

O4 - Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

O4 - Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

O4 - Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk = C:\Users\Marko\AppData\Roaming\Telekom\MediencenterSync\Mediencenter.exe (Deutsche Telekom AG)

O4 - Startup: C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = E:\Programme\Rainmeter\Rainmeter.exe ()

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)

O8:64bit: - Extra context menu item: Nach Microsoft &Excel exportieren - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found

O8:64bit: - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)

O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)

O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Classic IE9 Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - E:\Programme\Classic Shell\ClassicIE9_32.exe (IvoSoft)

O9:64bit: - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Classic IE9 Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - E:\Programme\Classic Shell\ClassicIE9_32.exe (IvoSoft)

O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - E:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O13 - gopher Prefix: missing

O15 - HKCU\..Trusted Ranges: Range1 ([*] in Local intranet)

O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx (Dldrv2 Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.25.2)

O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.25.2)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{439A6B06-4174-4A81-B708-0B408A600E04}: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D357B98D-C73F-4A93-BF6C-65F5C3794884}: DhcpNameServer = 192.168.178.1

O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found

O18:64bit: - Protocol\Handler\osf - No CLSID value found

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.09.20 15:26:40 | 001,950,622 | ---- | C] (Farbar) -- C:\Users\Marko\Desktop\FRST64.exe

[2013.09.18 21:43:58 | 000,000,000 | ---D | C] -- C:\_OTL

[2013.09.18 15:04:53 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Marko\Desktop\OTL.exe

[2013.09.09 15:00:48 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Polli

[2013.09.06 12:18:09 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2013.09.06 11:32:15 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2013.09.06 11:00:09 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

[2013.09.06 11:00:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2013.09.06 11:00:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware

[2013.09.06 11:00:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2013.09.05 15:40:12 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN

[2013.09.05 15:26:22 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe

[2013.09.05 15:26:22 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe

[2013.09.05 15:26:22 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe

[2013.09.05 15:26:17 | 000,000,000 | ---D | C] -- C:\Qoobox

[2013.09.05 15:26:03 | 000,000,000 | ---D | C] -- C:\Windows\erdnt

[2013.09.05 15:22:02 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Trojaner-Board

[2013.09.04 14:22:03 | 000,000,000 | ---D | C] -- C:\FRST

[2013.08.29 08:53:12 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Hausbau

[2013.08.28 16:21:52 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\Avira

[2013.08.28 16:18:51 | 000,081,112 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013.08.28 16:17:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

[2013.08.28 16:17:09 | 000,132,088 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013.08.28 16:17:09 | 000,105,344 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013.08.28 16:17:09 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys

[2013.08.28 16:17:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira

[2013.08.26 14:38:50 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Kaspersky

[2013.08.25 18:15:23 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Local\BewerbungsMaster

[2013.08.25 18:14:01 | 000,000,000 | ---D | C] -- C:\Users\Marko\Documents\BewerbungsMaster

[2013.08.25 18:13:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

[2013.08.25 18:13:16 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BewerbungsMaster

[2013.08.25 17:23:38 | 000,000,000 | ---D | C] -- C:\Users\Marko\Desktop\Nick_Ausbildung

[2013.08.22 15:01:48 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\dvdcss

[2013.08.22 14:58:17 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64

[2013.08.22 14:58:05 | 000,000,000 | ---D | C] -- C:\Users\Marko\AppData\Roaming\Broad Intelligence

[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.09.20 18:17:00 | 000,000,338 | ---- | M] () -- C:\Windows\tasks\HP Photo Creations Communicator.job

[2013.09.20 18:15:00 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013.09.20 18:12:43 | 000,000,370 | ---- | M] () -- C:\Windows\tasks\One-Click Optimizer.job

[2013.09.20 15:26:03 | 001,950,622 | ---- | M] (Farbar) -- C:\Users\Marko\Desktop\FRST64.exe

[2013.09.20 11:15:00 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013.09.20 08:35:40 | 000,015,856 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013.09.20 08:35:40 | 000,015,856 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013.09.20 08:25:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013.09.20 00:15:01 | 000,078,423 | ---- | M] () -- C:\Windows\SysNative\log.xml

[2013.09.20 00:15:01 | 000,000,008 | ---- | M] () -- C:\Windows\SysNative\log-suffix.xml

[2013.09.19 23:24:09 | 000,026,638 | ---- | M] () -- C:\Users\Marko\Desktop\Kaspersky-pure2-code.pdf

[2013.09.18 15:04:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Marko\Desktop\OTL.exe

[2013.09.11 10:37:18 | 003,584,480 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2013.09.09 15:25:00 | 001,622,098 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013.09.09 15:25:00 | 000,700,370 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2013.09.09 15:25:00 | 000,655,092 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013.09.09 15:25:00 | 000,149,184 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2013.09.09 15:25:00 | 000,121,964 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013.09.05 15:38:01 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2013.09.04 14:08:33 | 000,000,344 | ---- | M] () -- C:\Users\Marko\defogger_reenable

[2013.09.04 11:36:39 | 000,132,088 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013.09.04 11:36:39 | 000,105,344 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013.09.04 11:36:39 | 000,081,112 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013.09.02 17:15:46 | 000,000,787 | ---- | M] () -- C:\Users\Marko\Desktop\DivX Movies.lnk

[2013.09.02 17:15:40 | 000,000,754 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk

[2013.08.29 20:08:36 | 000,001,066 | ---- | M] () -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk

[2013.08.26 14:53:05 | 000,002,453 | ---- | M] () -- C:\Users\Public\Desktop\SeaTools for Windows.lnk

[2013.08.23 13:05:58 | 000,001,147 | ---- | M] () -- C:\Users\Marko\Desktop\Mediencenter.lnk

[2013.08.23 13:05:58 | 000,001,139 | ---- | M] () -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mediencenter.lnk

[2013.08.22 14:58:17 | 000,000,687 | ---- | M] () -- C:\Users\Marko\Desktop\MediaCoder x64.lnk

[2013.08.22 14:33:38 | 000,018,944 | ---- | M] () -- C:\Users\Marko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2013.08.22 14:30:49 | 000,000,124 | ---- | M] () -- C:\Users\Marko\Documents\ax_files.xml

[8 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2013.09.05 15:26:22 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe

[2013.09.05 15:26:22 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe

[2013.09.05 15:26:22 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe

[2013.09.05 15:26:22 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe

[2013.09.05 15:26:22 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe

[2013.09.04 14:08:33 | 000,000,344 | ---- | C] () -- C:\Users\Marko\defogger_reenable

[2013.09.02 17:15:46 | 000,000,787 | ---- | C] () -- C:\Users\Marko\Desktop\DivX Movies.lnk

[2013.09.02 17:15:40 | 000,000,754 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk

[2013.08.29 20:08:36 | 000,001,066 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk

[2013.08.22 14:58:17 | 000,000,687 | ---- | C] () -- C:\Users\Marko\Desktop\MediaCoder x64.lnk

[2013.06.24 16:22:35 | 000,000,132 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\Adobe CS5-Voreinstellungen für BMP-Format

[2013.06.07 10:07:28 | 000,000,019 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\Network Meter_Usage.ini

[2013.02.28 21:03:46 | 000,544,256 | ---- | C] () -- C:\Windows\SysWow64\janGraphics.dll

[2012.11.01 19:48:10 | 011,624,448 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\Sandra.mdb

[2012.10.22 14:54:56 | 000,164,352 | ---- | C] () -- C:\Windows\SysWow64\UNRAR.DLL

[2012.10.22 14:54:56 | 000,075,264 | ---- | C] () -- C:\Windows\SysWow64\UNACEV2.DLL

[2012.10.01 17:08:09 | 000,000,624 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\All CPU MeterV3_Settings.ini

[2012.09.14 11:41:21 | 000,019,159 | ---- | C] () -- C:\Windows\hpqins13.dat.temp

[2012.09.14 11:40:35 | 000,019,159 | ---- | C] () -- C:\Windows\hpqins13.dat

[2012.09.14 11:19:19 | 000,181,225 | ---- | C] () -- C:\Windows\hpoins29.dat.temp

[2012.09.14 11:19:19 | 000,000,457 | ---- | C] () -- C:\Windows\hpomdl29.dat.temp

[2012.09.14 10:01:52 | 000,000,000 | ---- | C] () -- C:\Windows\HPMProp.INI

[2012.09.14 09:46:47 | 000,221,040 | ---- | C] () -- C:\Windows\hpoins30.dat

[2012.09.14 09:46:47 | 000,000,587 | ---- | C] () -- C:\Windows\hpomdl30.dat

[2012.08.29 22:00:20 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib

[2012.08.15 11:58:52 | 000,000,021 | ---- | C] () -- C:\Users\Marko\AppData\Local\mc.pixel.data

[2012.05.22 11:07:10 | 000,091,136 | ---- | C] () -- C:\Windows\SendToClip.exe

[2012.04.26 22:38:20 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2012.03.09 06:31:26 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat

[2012.03.09 06:31:26 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat

[2012.02.28 17:41:26 | 000,725,514 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\unins000.exe

[2012.02.28 17:41:26 | 000,559,104 | ---- | C] () -- C:\Windows\SysWow64\lame.exe

[2012.02.28 17:41:26 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll

[2012.02.28 17:41:26 | 000,110,080 | ---- | C] () -- C:\Windows\SysWow64\advd.dll

[2012.02.28 17:41:26 | 000,023,040 | ---- | C] () -- C:\Windows\SysWow64\auth.dll

[2012.02.28 17:41:26 | 000,007,232 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\unins000.dat

[2012.02.01 13:17:14 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys

[2012.01.31 07:00:24 | 000,016,896 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll

[2012.01.03 18:30:21 | 000,018,944 | ---- | C] () -- C:\Users\Marko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.12.30 19:51:46 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini

[2011.12.28 18:56:34 | 001,599,056 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2011.12.09 14:00:24 | 000,007,597 | ---- | C] () -- C:\Users\Marko\AppData\Local\Resmon.ResmonCfg

[2011.12.09 13:08:03 | 000,000,026 | ---- | C] () -- C:\Windows\Irremote.ini

[2011.12.06 19:30:03 | 000,010,349 | ---- | C] () -- C:\Windows\Q-Dir.ini

[2011.12.06 16:22:02 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI

[2011.12.05 21:44:45 | 000,000,412 | ---- | C] () -- C:\Users\Marko\AppData\Roaming\All CPU Meter_Settings.ini

[2011.12.05 21:03:06 | 000,180,939 | ---- | C] () -- C:\Windows\hpoins29.dat

[2011.12.05 21:03:06 | 000,000,457 | ---- | C] () -- C:\Windows\hpomdl29.dat

[2011.12.05 18:35:13 | 000,017,408 | ---- | C] () -- C:\Users\Marko\AppData\Local\WebpageIcons.db

[2011.10.25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OVDecoder.dll

[2011.06.27 13:53:01 | 000,002,855 | ---- | C] () -- C:\Users\Marko\log.xml

[2011.06.27 13:53:01 | 000,000,008 | ---- | C] () -- C:\Users\Marko\log-suffix.xml

[2008.12.27 20:33:10 | 000,001,024 | ---- | C] () -- C:\Users\Marko\.rnd

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 05:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2013.07.24 15:09:10 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Amazon

[2012.05.22 09:40:32 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\AntiBrowserSpy 2009

[2013.07.25 15:35:23 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Ashampoo

[2012.06.04 22:22:23 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\becker

[2013.08.22 14:58:05 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Broad Intelligence

[2012.02.01 10:36:17 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Canon

[2012.08.13 13:45:38 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

[2012.08.03 17:26:09 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

[2012.02.28 17:41:26 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\concept design

[2012.11.07 14:31:42 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\DAEMON Tools Lite

[2012.10.22 15:33:01 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Dateicommander

[2012.04.17 13:42:53 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\DxO Labs

[2012.04.17 13:43:05 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\DxO_Labs

[2013.03.20 14:14:11 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\EurekaLog

[2012.08.16 13:49:03 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\FileZilla

[2011.12.20 15:54:35 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Foxit Software

[2012.02.28 17:41:26 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Franzis

[2013.07.10 14:18:11 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\GeoSetter

[2012.05.22 11:11:28 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Hyperionics

[2012.09.13 22:16:36 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\IT-Service Christian Hau (www.a-bit-more.de)

[2012.09.13 22:13:10 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\IT-Service Christian Hau - www.a-bit-more.de

[2013.03.08 22:26:35 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\KeePass

[2012.01.03 21:55:41 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Leadertech

[2012.11.30 10:51:40 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\MAGIX

[2012.03.12 17:56:46 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\map&guide

[2013.08.19 14:00:16 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Memeo

[2013.09.02 17:43:47 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Mp3tag

[2013.01.25 15:12:58 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\NetSpeedMonitor

[2011.12.06 19:47:32 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Nitro PDF

[2012.12.11 18:26:56 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\No Company Name

[2012.07.24 12:02:42 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Nokia

[2012.07.24 12:01:51 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Nokia Suite

[2012.05.24 08:25:37 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\OfficeRecovery

[2012.05.24 08:25:37 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\OfficeRecovery.b3c38332

[2013.08.29 16:39:56 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\onOne Software

[2012.04.17 13:40:41 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PACE Anti-Piracy

[2012.09.17 17:47:05 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PC Suite

[2012.09.25 17:35:55 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PDAppFlex

[2013.03.18 22:57:12 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PDF Experte 8

[2013.01.14 16:07:53 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\PDF Writer

[2011.12.06 19:35:21 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Q-Dir

[2013.03.13 19:29:23 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Rainmeter

[2012.01.04 18:37:52 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Samsung

[2012.05.24 08:57:51 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\SmartTools

[2013.04.21 20:07:30 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Telekom

[2012.08.03 13:09:55 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\TomTom

[2012.09.14 10:49:44 | 000,000,000 | ---D | M] -- C:\Users\Marko\AppData\Roaming\Visan

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < :OTL >

[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT

[2009.07.14 07:08:49 | 000,032,632 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[2012.03.21 16:30:26 | 000,001,104 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

[2012.03.21 16:30:27 | 000,001,108 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

[2012.09.14 10:49:17 | 000,000,338 | ---- | C] () -- C:\Windows\Tasks\HP Photo Creations Communicator.job

[2013.07.29 14:57:22 | 000,000,370 | ---- | C] () -- C:\Windows\Tasks\One-Click Optimizer.job

 
 < SRV - [2011.12.05 22:16:03 | 000,114,000 | ---- | M] (Joosoft.com GmbH) [Auto | Running] -- C:\Windows\SysWOW64\UpdSvc.dll -- (Update-Service) >

 
 < :files >

 
 < C:\Windows\SysWOW64\UpdSvc.dll >

 
 < :reg >

 
 < [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] >

 
 < "Update-Service-Installer-Service"=- >

 
 < "Update-Service"=- >

 
 < [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] >

 
 < "Update-Service-Installer-Service"=- >

 
 < "Update-Service"=- >

 
 < :commands >

 
 < [reboot] >

 
 <           >

 
 ========== Files - Unicode (All) ==========

[2013.09.20 14:26:48 | 098,474,815 | ---- | M] ()(C:\Windows\SysWow64\???¡) -- C:\Windows\SysWow64\ទ㤃뻼¡

[2013.09.20 08:26:54 | 098,474,815 | ---- | C] ()(C:\Windows\SysWow64\???¡) -- C:\Windows\SysWow64\ទ㤃뻼¡

 
 ========== Alternate Data Streams ==========

 

@Alternate Data Stream - 1213 bytes -> C:\ProgramData\Microsoft:V6rvehwmRjYqRAkFBpLsBNz

@Alternate Data Stream - 1190 bytes -> C:\ProgramData\Microsoft:cJP8NoA3alrUCM20
 

< End of report >

mk72	20.09.2013 22:33

Liste der Anhänge anzeigen (Anzahl: 1)

Das Programm bietet in der jetzigen Version nicht die Möglichkeit einen Advanced Mode anzuklicken- soll ich so auf start gehen?

Siehe angehängte Grafik(ich weiß nicht, wie ich ein Bild im Text eingefügt bekomme, das Logo zum Bilder einfügen verlangt eine URL?)

schrauber

21.09.2013 11:55

Ja einfach auf Start, dann die Kästchen anhaken :)

mk72	23.09.2013 16:29

Code:

Farbar Service Scanner Version: 13-09-2013

Ran by Marko (administrator) on 23-09-2013 at 17:27:55

Running from "C:\Users\Marko\Desktop"

Microsoft Windows 7 Professional  Service Pack 1 (X64)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Action Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\System32\nsisvc.dll => MD5 is legit

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit

C:\Windows\System32\dhcpcore.dll => MD5 is legit

C:\Windows\System32\drivers\afd.sys => MD5 is legit

C:\Windows\System32\drivers\tdx.sys => MD5 is legit

C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit

C:\Windows\System32\dnsrslvr.dll => MD5 is legit

C:\Windows\System32\mpssvc.dll => MD5 is legit

C:\Windows\System32\bfe.dll => MD5 is legit

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit

C:\Windows\System32\SDRSVC.dll => MD5 is legit

C:\Windows\System32\vssvc.exe => MD5 is legit

C:\Windows\System32\wscsvc.dll => MD5 is legit

C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\System32\wuaueng.dll => MD5 is legit

C:\Windows\System32\qmgr.dll => MD5 is legit

C:\Windows\System32\es.dll => MD5 is legit

C:\Windows\System32\cryptsvc.dll => MD5 is legit

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit

C:\Windows\System32\ipnathlp.dll => MD5 is legit

C:\Windows\System32\iphlpsvc.dll => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit
 
 

**** End of log ****

schrauber

23.09.2013 18:12

much better :)

Noch Probleme?

mk72	24.09.2013 13:01

Hallo Schrauber,

wenn ich deinen letzten Beitrag richtig interpretiere sind wir erstmal durch?

Das bedeutet, das ich jetzt mal versuchen kann ob Kaspersky wieder nach der Installation zu aktivieren geht?

Wenn ja, sage ich erst einmal vielen Dank für die ganze Mühe.
:party:
Ich gebe dann Bescheid, ob KIS wieder geht!

Update:

zu früh gefreut, der Arbeitsstationsdienst ist vom System immer noch nicht zu finden und somit kann ich KIS nicht aktivieren! War also alle Mühe vergebens!

mk72	24.09.2013 14:29

Hallo Schrauber,

ich habe noch mal bei Kaspersky auf der Internetseite nachgeschaut und habe gesehen, das die schon KIS 2014 zum Download anbieten. Habe es mir gleich geholt und installiert und siehe da, mein Schlüssel wurde ohne meckern genommen. Geht jetzt wohl auch ohne den Anmeldedienst :applaus:Sie scheinen das Problem in der neuen Version erst einmal ausgemerzt zu haben, war wohl ein KIS 2013-Problem + die Dinge, die du entfernt hast.

Vielen Dank noch mal, ich denke, es ist erst mal alles gut und das Thema kann ad acta gelegt werden.

:abklatsch:

schrauber

24.09.2013 19:06

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

mk72	27.09.2013 09:25

Hallo Schrauber,

ich denke mal, im Moment läuft alles. Du kannst dich gern hiervon verabschieden. Abschließen sage ich noch einmal herzlichen Dank für die Mühe!

schrauber

27.09.2013 17:16

Gern Geschehen :)

Alle Zeitangaben in WEZ +1. Es ist jetzt 08:50 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19