JS/BlacoleRef.DD.38 in Firefox Cache Win 7 Moin liebe Board-User,
hab heute diese Meldung bekommen von AntiVir (und entfernen lassen), hoffe ich hab alles zusammen was benötigt wird: AntiVir meldet: Code:
AppData\Local\Mozilla\Firefox\Profiles\bvwq14qf.default\Cache\_CACHE_003_'
wurde ein Virus oder unerwünschtes Programm 'JS/BlacoleRef.DD.38' [virus] gefunden.
Ausgeführte Aktion: Zugriff verweigern DeFogger: Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:03 on 13/11/2013 (User)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=- FRST
FRST.txt: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2013
Ran by User (administrator) on User-PC on 13-11-2013 13:06:28
Running from C:\Users\User\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvwmi64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(FontExplorer X) C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontManagementServices.exe
(SafeNet Inc.) C:\Windows\system32\hasplms.exe
(Marvell) C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe
(Apache Software Foundation) C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
(Apache Software Foundation) C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(FontExplorer X) C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontExplorerX.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\spotify.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
() C:\Program Files (x86)\X-Rite\i1Profiler\i1ProfilerTray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Adobe Systems, Incorporated) C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\dynamiclink\7.0\dynamiclinkmanager.exe
(Joyent, Inc) C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop-node.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe InDesign CC (64 bit)\InDesign.exe
() C:\Program Files\Adobe\Adobe InDesign CC (64 bit)\Utilities\adb.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Program Files (x86)\Revolver Office\Revolver Office.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\avcenter.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472984 2013-06-13] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6549136 2012-07-09] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-10] (Realtek Semiconductor)
HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2722080 2013-08-09] ()
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Spotify Web Helper] - C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-15] (Spotify Ltd)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [FontExplorerX] - C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontExplorerX.exe [825656 2013-07-25] (FontExplorer X)
HKCU\...\Run: [Spotify] - C:\Users\User\AppData\Roaming\Spotify\spotify.exe [4752384 2013-10-15] (Spotify Ltd)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -update plugin [829832 2013-10-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [MSUTray] - C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe [1202216 2011-11-25] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe [3478392 2013-09-05] (Adobe Systems Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [681032 2013-09-30] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 172.16.6.9:3128
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x81D5CF7D25ACCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Tcpip\Parameters: [DhcpNameServer] 172.21.10.5 172.21.10.3
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\bvwq14qf.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: adobe.com/AdobeExManCCDetect32 - C:\Program Files (x86)\Adobe\Adobe Extension Manager CC\npAdobeExManCCDetect32.dll (Adobe Systems)
FF Plugin HKCU: adobe.com/AdobeExManCCDetect64 - C:\Program Files (x86)\Adobe\Adobe Extension Manager CC\npAdobeExManCCDetect64.dll (Adobe Systems)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: firebug - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\bvwq14qf.default\Extensions\firebug@software.joehewitt.com.xpi
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.48\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.48\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.48\pdf.dll ()
CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj\11.0.3.37_0
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440392 2013-09-30] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-09-30] (Avira Operations GmbH & Co. KG)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [233328 2012-01-23] (DTS, Inc)
R2 fexservice; C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\FontManagementServices.exe [48952 2013-07-25] (FontExplorer X)
R2 hasplms; C:\Windows\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.)
R2 MSUWebService; C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe [24645 2011-11-22] (Apache Software Foundation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [1248544 2013-08-09] (NVIDIA Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [598808 2013-06-06] (Wacom Technology, Corp.)
R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [82800 2013-07-02] (X-Rite Inc.)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105856 2013-09-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-09-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [83160 2013-09-30] (Avira Operations GmbH & Co. KG)
R3 e1qexpress; C:\Windows\System32\DRIVERS\e1q60x64.sys [244736 2009-06-10] (Intel Corporation)
S3 EyeOne; C:\Windows\System32\Drivers\i1_x64.sys [51600 2011-03-10] (Thesycon GmbH, Germany)
R3 Mv_Process; c:\windows\syswow64\mv_process.sys [14376 2011-11-22] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R3 ubohci; C:\Windows\System32\DRIVERS\ubohci.sys [114688 2007-10-04] (Unibrain S.A.)
R2 ubsbm; C:\Windows\System32\DRIVERS\ubsbm.sys [23040 2007-08-03] (Unibrain S.A.)
R2 ubumapi; C:\Windows\System32\DRIVERS\ubumapi.sys [78336 2007-08-03] (Unibrain S.A.)
R2 WinI2C-DDC; C:\Windows\system32\drivers\DDCDrv.sys [20832 2013-07-10] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\Windows\SysWow64\drivers\DDCDrv.sys [10240 2013-07-10] (Nicomsoft Ltd.)
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-13 13:06 - 2013-11-13 13:06 - 00018962 _____ C:\Users\User\Desktop\FRST.txt
2013-11-13 13:06 - 2013-11-13 13:06 - 00000000 ____D C:\FRST
2013-11-13 13:05 - 2013-11-13 13:05 - 01957610 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-11-13 13:03 - 2013-11-13 13:03 - 00050477 _____ C:\Users\User\Downloads\Defogger.exe
2013-11-13 13:03 - 2013-11-13 13:03 - 00000478 _____ C:\Users\User\Downloads\defogger_disable.log
2013-11-13 13:03 - 2013-11-13 13:03 - 00000000 _____ C:\Users\User\defogger_reenable
2013-11-11 13:49 - 2013-11-11 13:49 - 06026369 _____ C:\Users\User\Downloads\jsn_solid_docs.zip
2013-11-11 13:38 - 2013-11-11 13:40 - 43475453 _____ C:\Users\User\Downloads\jsn_solid_pro_standard_j25_quickstart.zip
2013-11-11 13:22 - 2013-11-11 13:23 - 00333095 _____ C:\Users\User\Downloads\de-DE_joomla_lang_full_2.5.16v1.zip
2013-11-11 12:55 - 2013-11-11 12:56 - 26055071 _____ C:\Users\User\Downloads\jsn_solid_free_j25_quickstart.zip
2013-11-06 13:12 - 2013-11-06 13:13 - 00000000 ____D C:\Users\User\Documents\Any Video Converter
2013-11-06 13:12 - 2013-11-06 13:12 - 00001199 _____ C:\Users\User\Desktop\Any Video Converter.lnk
2013-11-06 13:12 - 2013-11-06 13:12 - 00000000 ____D C:\Users\User\Documents\Any Video Converter Professional
2013-11-06 13:12 - 2013-11-06 13:12 - 00000000 ____D C:\Users\User\AppData\Roaming\AnvSoft
2013-11-06 13:11 - 2013-11-06 13:11 - 00000000 ____D C:\Program Files (x86)\AnvSoft
2013-11-06 13:09 - 2013-11-06 13:11 - 35631456 _____ (Any-Video-Converter.com ) C:\Users\User\Downloads\avc-free-5.0.9.exe
2013-11-06 13:07 - 2013-11-06 13:08 - 06982971 _____ C:\Users\User\Desktop\stalltuning_deutsch.....webm
2013-11-06 13:03 - 2013-11-06 13:06 - 11529424 _____ C:\Users\User\Desktop\stalltuning_deutsch.mp4
2013-11-06 12:58 - 2013-11-06 12:59 - 00000000 ____D C:\Users\User\AppData\Roaming\DVDVideoSoft
2013-11-06 12:58 - 2013-11-06 12:58 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft
2013-11-06 12:58 - 2013-11-06 12:58 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-06 12:50 - 2013-11-06 12:51 - 27454736 _____ (DVDVideoSoft Ltd. ) C:\Users\User\Downloads\FreeWebMVideoConverter.exe
2013-11-06 12:50 - 2013-10-31 16:32 - 183573266 _____ C:\Users\User\Desktop\PAl_Stalltuning_deutsch.mp4
2013-11-06 11:14 - 2013-11-06 11:14 - 00000000 ____D C:\Users\Public\Documents\Adobe
2013-11-06 11:14 - 2013-11-06 11:14 - 00000000 ____D C:\Users\User\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2013-11-06 11:14 - 2013-11-06 11:14 - 00000000 ____D C:\Users\User\AppData\Roaming\chc
2013-11-06 10:06 - 2013-11-06 10:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-05 08:20 - 2013-11-05 08:20 - 08095190 _____ C:\Users\User\Downloads\waxing beauty(1).zip
2013-11-04 15:29 - 2013-11-04 15:30 - 00000000 ____D C:\Users\User\Desktop\weh
2013-11-04 11:05 - 2013-11-04 11:05 - 00094985 _____ C:\Users\User\Downloads\Didact_Gothic.zip
2013-11-01 14:05 - 2013-11-01 11:27 - 00099514 _____ C:\Users\User\Downloads\sf_grandezza.zip
2013-11-01 12:51 - 2013-11-01 12:51 - 00091205 _____ C:\Users\User\Downloads\Friz Quadrata Regular Italic.ttf
2013-11-01 12:20 - 2013-11-01 12:20 - 00028993 _____ C:\Users\User\Downloads\blairmditc_tt_medium.zip
2013-11-01 11:48 - 2013-11-01 11:48 - 00014317 _____ C:\Users\User\Downloads\frquad.zip
2013-11-01 11:43 - 2013-11-01 11:43 - 00028542 _____ C:\Users\User\Downloads\Garogier.zip
2013-11-01 10:42 - 2013-11-01 10:42 - 01185346 _____ C:\Users\User\Desktop\actec_Logo_NEU_CMYK.eps
2013-11-01 10:37 - 2013-11-01 10:37 - 01342876 _____ C:\Users\User\Desktop\actec_Logo_NEU_CMYK.ai
2013-10-31 15:39 - 2013-10-31 15:39 - 00217172 _____ C:\Users\User\Downloads\Archivo_Narrow.zip
2013-10-31 14:48 - 2013-10-31 16:32 - 00000000 ____D C:\Users\User\Desktop\Pal_Lüftung_deutsch3 Ordner
2013-10-31 08:48 - 2013-11-06 13:09 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2013-10-31 08:48 - 2013-10-31 08:48 - 00000871 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-10-31 08:48 - 2013-10-31 08:48 - 00000000 ____D C:\Program Files\VideoLAN
2013-10-31 08:47 - 2013-10-31 08:47 - 23280480 _____ C:\Users\User\Downloads\vlc-2.1.0-win64.exe
2013-10-30 13:24 - 2013-10-30 13:24 - 03238389 _____ C:\Users\User\Downloads\quickstartguide.pdf.zip
2013-10-30 13:24 - 2013-10-30 13:24 - 02239606 _____ C:\Users\User\Downloads\com_akeeba-3.8.2-core.zip
2013-10-30 13:24 - 2013-10-30 13:24 - 00043927 _____ C:\Users\User\Downloads\akeebabackup-de-DE-j25.zip
2013-10-30 13:21 - 2013-10-30 13:21 - 00351624 _____ C:\Users\User\Downloads\ipricecalc_light_unzip1st.zip
2013-10-30 13:19 - 2013-10-30 13:19 - 00005117 _____ C:\Users\User\Downloads\mod_days_converter_1383135569.zip
2013-10-30 12:55 - 2013-10-30 12:55 - 03490991 _____ C:\Users\User\Desktop\Smart_Swap_Anz_A4 Ordner.zip
2013-10-30 12:54 - 2013-10-30 12:54 - 00724992 _____ C:\Users\User\Desktop\Smart_Swap_Anz_A4.indd
2013-10-30 12:05 - 2013-10-30 12:05 - 00085878 _____ C:\Users\User\Downloads\ufonts.com_univers_lt_47_condensed_light.ttf
2013-10-30 12:03 - 2013-10-30 12:03 - 00059790 _____ C:\Users\User\Downloads\ufonts.com_univers_lt_47_condensed_light_oblique.ttf
2013-10-30 08:43 - 2013-10-30 08:43 - 04460353 _____ C:\Users\User\Downloads\a_few_red_heart_vector_152565.zip
2013-10-29 15:23 - 2013-10-30 08:26 - 00000000 ____D C:\Users\User\AppData\Local\Apple Computer
2013-10-29 13:29 - 2013-10-29 13:29 - 04801925 _____ C:\Users\User\Downloads\sun_kissed_photoshop_action_by_elestrial-d36odpj.zip
2013-10-29 13:27 - 2013-10-29 13:27 - 00001633 _____ C:\Users\User\Downloads\photoshop-action-Smooth skin.zip
2013-10-29 13:26 - 2013-10-29 13:26 - 00000795 _____ C:\Users\User\Downloads\action_056___TEETH_WHITENING___by_ModernActions.atn
2013-10-29 13:25 - 2013-10-29 13:24 - 00007968 _____ C:\Users\User\Downloads\ACTIONS_3D_by_JonasFan93.atn
2013-10-29 13:18 - 2013-10-29 13:18 - 00012644 _____ C:\Users\User\Downloads\RoTP-All-Presets.zip
2013-10-28 14:10 - 2013-10-28 14:10 - 00004857 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-28 14:10 - 2013-10-28 14:10 - 00000000 ____D C:\ProgramData\Oracle
2013-10-28 14:10 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-28 14:10 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-28 14:10 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-28 14:10 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-25 08:30 - 2013-10-25 08:30 - 08095190 _____ C:\Users\User\Downloads\waxing beauty.zip
2013-10-25 08:29 - 2013-10-25 08:29 - 00012933 _____ C:\Users\User\Desktop\Labtop Wide.zip
2013-10-24 14:31 - 2013-10-24 14:31 - 00000053 _____ C:\Users\User\Downloads\google6be8a98ba3a92bff(1).html
2013-10-23 09:15 - 2013-10-23 09:20 - 00000000 ____D C:\Users\W-Lan\AppData\Roaming\FileZilla
2013-10-23 09:14 - 2013-10-23 09:14 - 07241860 _____ C:\Users\W-Lan\Downloads\FileZilla_3.7.3_win32.zip
2013-10-22 14:46 - 2013-10-22 14:46 - 00018630 _____ C:\Users\User\Downloads\Strait.zip
2013-10-21 14:22 - 2013-10-21 14:23 - 00000132 _____ C:\Users\W-Lan\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2013-10-21 14:20 - 2013-10-21 14:20 - 00000000 ____D C:\Users\W-Lan\AppData\Roaming\NVIDIA
2013-10-21 11:55 - 2013-10-21 11:55 - 00000000 ____D C:\Users\W-Lan\Desktop\RTL8188_8191_8192_SU_WindowsDriver_1086.48.0809.2011.F0049_12.P0406_UI_1.00.0187.L
2013-10-21 11:55 - 2011-08-11 12:46 - 00694376 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTL8192su.sys
2013-10-21 11:08 - 2013-10-21 11:10 - 88065608 _____ C:\Users\User\Downloads\Fotos_Original.rar
2013-10-21 08:35 - 2013-10-21 08:35 - 00037336 _____ C:\Users\User\Downloads\text-me-one.regular.ttf
2013-10-21 07:43 - 2013-10-21 07:43 - 00000881 _____ C:\Users\Public\Desktop\Mobilizer.lnk
2013-10-21 07:43 - 2013-10-21 07:43 - 00000000 ____D C:\Users\User\AppData\Roaming\com.springbox.mobilizer
2013-10-21 07:43 - 2013-10-21 07:43 - 00000000 ____D C:\Program Files (x86)\Mobilizer
2013-10-21 07:42 - 2013-10-21 07:43 - 02761523 _____ C:\Users\User\Downloads\Mobilizer.air
2013-10-17 10:53 - 2013-10-17 10:56 - 00104028 _____ C:\Users\User\Desktop\EXK_Beschnpfad_Ohne_207.txt
2013-10-17 10:41 - 2013-10-17 10:52 - 00283848 _____ C:\Users\User\Desktop\EXK_Beschnpfad_Ohne.txt
2013-10-15 15:54 - 2013-10-15 15:54 - 01182530 _____ C:\Users\User\Downloads\exo.zip
2013-10-15 15:54 - 2013-10-15 15:54 - 00000000 ____D C:\Users\User\Downloads\exo
2013-10-15 14:00 - 2013-10-31 08:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-10-15 11:33 - 2013-10-15 11:33 - 00000053 _____ C:\Users\User\Downloads\google6be8a98ba3a92bff.html
2013-10-14 15:32 - 2013-10-14 15:47 - 1663088084 _____ C:\Users\User\Desktop\France_2.avi
2013-10-14 14:52 - 2013-10-14 15:28 - 3307571434 _____ C:\Users\User\Desktop\France_1.avi
2013-10-14 13:49 - 2013-10-14 14:50 - 3496154838 _____ C:\Users\User\Desktop\France.avi
2013-10-14 13:10 - 2013-10-14 13:12 - 00393264 _____ C:\Users\User\Desktop\France_1.mov
2013-10-14 12:02 - 2013-10-14 12:05 - 04956424 _____ C:\Users\User\Desktop\Pal_Lüftung_Frankreich.aep
2013-10-14 11:33 - 2013-10-14 11:33 - 00024343 _____ C:\Users\User\Downloads\batch_search-n-replace_paths_v1.7.zip
==================== One Month Modified Files and Folders =======
2013-11-13 13:06 - 2013-11-13 13:06 - 00018962 _____ C:\Users\User\Desktop\FRST.txt
2013-11-13 13:06 - 2013-11-13 13:06 - 00000000 ____D C:\FRST
2013-11-13 13:06 - 2013-09-08 02:18 - 00000512 _____ C:\Windows\SysWOW64\za_mv_raid.ev
2013-11-13 13:06 - 2011-11-22 04:08 - 00067584 _____ C:\Windows\SysWOW64\freqdb.db
2013-11-13 13:05 - 2013-11-13 13:05 - 01957610 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-11-13 13:03 - 2013-11-13 13:03 - 00050477 _____ C:\Users\User\Downloads\Defogger.exe
2013-11-13 13:03 - 2013-11-13 13:03 - 00000478 _____ C:\Users\User\Downloads\defogger_disable.log
2013-11-13 13:03 - 2013-11-13 13:03 - 00000000 _____ C:\Users\User\defogger_reenable
2013-11-13 13:03 - 2013-09-09 15:16 - 00000000 ____D C:\Users\User\AppData\Roaming\Dropbox
2013-11-13 13:03 - 2013-09-08 00:50 - 00000000 ____D C:\Users\User
2013-11-13 12:59 - 2013-09-10 08:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-13 12:34 - 2013-09-08 14:37 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotify
2013-11-13 12:20 - 2013-09-08 01:05 - 00001114 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-13 11:48 - 2013-09-12 09:05 - 00000000 ____D C:\Users\User\AppData\Roaming\FileZilla
2013-11-13 08:37 - 2013-09-08 00:49 - 01166616 _____ C:\Windows\WindowsUpdate.log
2013-11-13 08:30 - 2013-09-08 01:00 - 00000000 ____D C:\Users\User\AppData\Local\Adobe
2013-11-13 08:28 - 2009-07-14 05:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-13 08:28 - 2009-07-14 05:45 - 00022064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-13 08:25 - 2011-04-12 08:43 - 00698514 _____ C:\Windows\system32\perfh007.dat
2013-11-13 08:25 - 2011-04-12 08:43 - 00148570 _____ C:\Windows\system32\perfc007.dat
2013-11-13 08:25 - 2009-07-14 06:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-13 08:24 - 2013-09-11 13:19 - 00001454 ____H C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job
2013-11-13 08:24 - 2013-09-08 14:52 - 00000000 ____D C:\Users\User\AppData\Local\Spotify
2013-11-13 08:24 - 2013-09-08 01:05 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-13 08:21 - 2013-09-08 02:18 - 00009828 _____ C:\Windows\SysWOW64\mvaccelerator.log
2013-11-13 08:20 - 2013-09-08 02:35 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-13 08:20 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-13 08:20 - 2009-07-14 05:51 - 00036459 _____ C:\Windows\setupact.log
2013-11-11 13:49 - 2013-11-11 13:49 - 06026369 _____ C:\Users\User\Downloads\jsn_solid_docs.zip
2013-11-11 13:40 - 2013-11-11 13:38 - 43475453 _____ C:\Users\User\Downloads\jsn_solid_pro_standard_j25_quickstart.zip
2013-11-11 13:33 - 2013-09-11 10:38 - 00000132 _____ C:\Users\User\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2013-11-11 13:23 - 2013-11-11 13:22 - 00333095 _____ C:\Users\User\Downloads\de-DE_joomla_lang_full_2.5.16v1.zip
2013-11-11 12:56 - 2013-11-11 12:55 - 26055071 _____ C:\Users\User\Downloads\jsn_solid_free_j25_quickstart.zip
2013-11-07 08:26 - 2013-09-08 00:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-07 08:26 - 2010-11-21 04:47 - 00012698 _____ C:\Windows\PFRO.log
2013-11-06 13:13 - 2013-11-06 13:12 - 00000000 ____D C:\Users\User\Documents\Any Video Converter
2013-11-06 13:12 - 2013-11-06 13:12 - 00001199 _____ C:\Users\User\Desktop\Any Video Converter.lnk
2013-11-06 13:12 - 2013-11-06 13:12 - 00000000 ____D C:\Users\User\Documents\Any Video Converter Professional
2013-11-06 13:12 - 2013-11-06 13:12 - 00000000 ____D C:\Users\User\AppData\Roaming\AnvSoft
2013-11-06 13:11 - 2013-11-06 13:11 - 00000000 ____D C:\Program Files (x86)\AnvSoft
2013-11-06 13:11 - 2013-11-06 13:09 - 35631456 _____ (Any-Video-Converter.com ) C:\Users\User\Downloads\avc-free-5.0.9.exe
2013-11-06 13:09 - 2013-10-31 08:48 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2013-11-06 13:08 - 2013-11-06 13:07 - 06982971 _____ C:\Users\User\Desktop\stalltuning_deutsch.....webm
2013-11-06 13:06 - 2013-11-06 13:03 - 11529424 _____ C:\Users\User\Desktop\stalltuning_deutsch.mp4
2013-11-06 12:59 - 2013-11-06 12:58 - 00000000 ____D C:\Users\User\AppData\Roaming\DVDVideoSoft
2013-11-06 12:58 - 2013-11-06 12:58 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft
2013-11-06 12:58 - 2013-11-06 12:58 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-06 12:51 - 2013-11-06 12:50 - 27454736 _____ (DVDVideoSoft Ltd. ) C:\Users\User\Downloads\FreeWebMVideoConverter.exe
2013-11-06 11:14 - 2013-11-06 11:14 - 00000000 ____D C:\Users\Public\Documents\Adobe
2013-11-06 11:14 - 2013-11-06 11:14 - 00000000 ____D C:\Users\User\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2013-11-06 11:14 - 2013-11-06 11:14 - 00000000 ____D C:\Users\User\AppData\Roaming\chc
2013-11-06 10:06 - 2013-11-06 10:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-06 08:36 - 2009-07-14 05:45 - 05344528 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-05 10:55 - 2013-09-08 12:26 - 00099728 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-05 08:20 - 2013-11-05 08:20 - 08095190 _____ C:\Users\User\Downloads\waxing beauty(1).zip
2013-11-04 16:10 - 2013-09-26 10:10 - 00013246 _____ C:\Users\User\Desktop\ps1102.txt
2013-11-04 15:30 - 2013-11-04 15:29 - 00000000 ____D C:\Users\User\Desktop\weh
2013-11-04 15:30 - 2013-09-30 14:04 - 00001456 _____ C:\Users\User\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2013-11-04 11:05 - 2013-11-04 11:05 - 00094985 _____ C:\Users\User\Downloads\Didact_Gothic.zip
2013-11-01 12:51 - 2013-11-01 12:51 - 00091205 _____ C:\Users\User\Downloads\Friz Quadrata Regular Italic.ttf
2013-11-01 12:20 - 2013-11-01 12:20 - 00028993 _____ C:\Users\User\Downloads\blairmditc_tt_medium.zip
2013-11-01 11:48 - 2013-11-01 11:48 - 00014317 _____ C:\Users\User\Downloads\frquad.zip
2013-11-01 11:43 - 2013-11-01 11:43 - 00028542 _____ C:\Users\User\Downloads\Garogier.zip
2013-11-01 11:27 - 2013-11-01 14:05 - 00099514 _____ C:\Users\User\Downloads\sf_grandezza.zip
2013-11-01 10:42 - 2013-11-01 10:42 - 01185346 _____ C:\Users\User\Desktop\actec_Logo_NEU_CMYK.eps
2013-11-01 10:37 - 2013-11-01 10:37 - 01342876 _____ C:\Users\User\Desktop\actec_Logo_NEU_CMYK.ai
2013-10-31 16:32 - 2013-11-06 12:50 - 183573266 _____ C:\Users\User\Desktop\PAl_Stalltuning_deutsch.mp4
2013-10-31 16:32 - 2013-10-31 14:48 - 00000000 ____D C:\Users\User\Desktop\Pal_Lüftung_deutsch3 Ordner
2013-10-31 15:39 - 2013-10-31 15:39 - 00217172 _____ C:\Users\User\Downloads\Archivo_Narrow.zip
2013-10-31 08:48 - 2013-10-31 08:48 - 00000871 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-10-31 08:48 - 2013-10-31 08:48 - 00000000 ____D C:\Program Files\VideoLAN
2013-10-31 08:47 - 2013-10-31 08:47 - 23280480 _____ C:\Users\User\Downloads\vlc-2.1.0-win64.exe
2013-10-31 08:24 - 2013-10-15 14:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-10-30 13:24 - 2013-10-30 13:24 - 03238389 _____ C:\Users\User\Downloads\quickstartguide.pdf.zip
2013-10-30 13:24 - 2013-10-30 13:24 - 02239606 _____ C:\Users\User\Downloads\com_akeeba-3.8.2-core.zip
2013-10-30 13:24 - 2013-10-30 13:24 - 00043927 _____ C:\Users\User\Downloads\akeebabackup-de-DE-j25.zip
2013-10-30 13:21 - 2013-10-30 13:21 - 00351624 _____ C:\Users\User\Downloads\ipricecalc_light_unzip1st.zip
2013-10-30 13:19 - 2013-10-30 13:19 - 00005117 _____ C:\Users\User\Downloads\mod_days_converter_1383135569.zip
2013-10-30 12:55 - 2013-10-30 12:55 - 03490991 _____ C:\Users\User\Desktop\Smart_Swap_Anz_A4 Ordner.zip
2013-10-30 12:54 - 2013-10-30 12:54 - 00724992 _____ C:\Users\User\Desktop\Smart_Swap_Anz_A4.indd
2013-10-30 12:05 - 2013-10-30 12:05 - 00085878 _____ C:\Users\User\Downloads\ufonts.com_univers_lt_47_condensed_light.ttf
2013-10-30 12:03 - 2013-10-30 12:03 - 00059790 _____ C:\Users\User\Downloads\ufonts.com_univers_lt_47_condensed_light_oblique.ttf
2013-10-30 12:02 - 2013-09-12 12:35 - 00000000 ___RD C:\Users\User\Virtual Machines
2013-10-30 10:59 - 2013-10-10 10:56 - 00000000 ____D C:\Users\User\Desktop\Bildbe_KuW
2013-10-30 08:43 - 2013-10-30 08:43 - 04460353 _____ C:\Users\User\Downloads\a_few_red_heart_vector_152565.zip
2013-10-30 08:26 - 2013-10-29 15:23 - 00000000 ____D C:\Users\User\AppData\Local\Apple Computer
2013-10-29 15:30 - 2013-09-08 21:07 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-29 13:29 - 2013-10-29 13:29 - 04801925 _____ C:\Users\User\Downloads\sun_kissed_photoshop_action_by_elestrial-d36odpj.zip
2013-10-29 13:27 - 2013-10-29 13:27 - 00001633 _____ C:\Users\User\Downloads\photoshop-action-Smooth skin.zip
2013-10-29 13:26 - 2013-10-29 13:26 - 00000795 _____ C:\Users\User\Downloads\action_056___TEETH_WHITENING___by_ModernActions.atn
2013-10-29 13:24 - 2013-10-29 13:25 - 00007968 _____ C:\Users\User\Downloads\ACTIONS_3D_by_JonasFan93.atn
2013-10-29 13:18 - 2013-10-29 13:18 - 00012644 _____ C:\Users\User\Downloads\RoTP-All-Presets.zip
2013-10-28 14:10 - 2013-10-28 14:10 - 00004857 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-28 14:10 - 2013-10-28 14:10 - 00000000 ____D C:\ProgramData\Oracle
2013-10-28 14:10 - 2013-09-08 21:37 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-25 08:30 - 2013-10-25 08:30 - 08095190 _____ C:\Users\User\Downloads\waxing beauty.zip
2013-10-25 08:29 - 2013-10-25 08:29 - 00012933 _____ C:\Users\User\Desktop\Labtop Wide.zip
2013-10-24 14:31 - 2013-10-24 14:31 - 00000053 _____ C:\Users\User\Downloads\google6be8a98ba3a92bff(1).html
2013-10-23 09:43 - 2013-10-09 08:22 - 00000000 ____D C:\Users\W-Lan\AppData\Local\Adobe
2013-10-23 09:20 - 2013-10-23 09:15 - 00000000 ____D C:\Users\W-Lan\AppData\Roaming\FileZilla
2013-10-23 09:14 - 2013-10-23 09:14 - 07241860 _____ C:\Users\W-Lan\Downloads\FileZilla_3.7.3_win32.zip
2013-10-23 09:14 - 2013-10-09 08:22 - 00091312 _____ C:\Users\W-Lan\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-22 14:46 - 2013-10-22 14:46 - 00018630 _____ C:\Users\User\Downloads\Strait.zip
2013-10-22 14:42 - 2013-09-27 10:40 - 00000132 _____ C:\Users\User\AppData\Roaming\Adobe GIF-Format CC - Voreinstellungen
2013-10-21 14:26 - 2013-10-09 08:22 - 00000000 ____D C:\Users\W-Lan\AppData\Roaming\Adobe
2013-10-21 14:23 - 2013-10-21 14:22 - 00000132 _____ C:\Users\W-Lan\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2013-10-21 14:20 - 2013-10-21 14:20 - 00000000 ____D C:\Users\W-Lan\AppData\Roaming\NVIDIA
2013-10-21 12:00 - 2013-09-10 08:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-21 12:00 - 2013-09-10 08:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-21 12:00 - 2013-09-10 08:34 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-21 11:55 - 2013-10-21 11:55 - 00000000 ____D C:\Users\W-Lan\Desktop\RTL8188_8191_8192_SU_WindowsDriver_1086.48.0809.2011.F0049_12.P0406_UI_1.00.0187.L
2013-10-21 11:10 - 2013-10-21 11:08 - 88065608 _____ C:\Users\User\Downloads\Fotos_Original.rar
2013-10-21 08:35 - 2013-10-21 08:35 - 00037336 _____ C:\Users\User\Downloads\text-me-one.regular.ttf
2013-10-21 07:43 - 2013-10-21 07:43 - 00000881 _____ C:\Users\Public\Desktop\Mobilizer.lnk
2013-10-21 07:43 - 2013-10-21 07:43 - 00000000 ____D C:\Users\User\AppData\Roaming\com.springbox.mobilizer
2013-10-21 07:43 - 2013-10-21 07:43 - 00000000 ____D C:\Program Files (x86)\Mobilizer
2013-10-21 07:43 - 2013-10-21 07:42 - 02761523 _____ C:\Users\User\Downloads\Mobilizer.air
2013-10-17 10:56 - 2013-10-17 10:53 - 00104028 _____ C:\Users\User\Desktop\EXK_Beschnpfad_Ohne_207.txt
2013-10-17 10:52 - 2013-10-17 10:41 - 00283848 _____ C:\Users\User\Desktop\EXK_Beschnpfad_Ohne.txt
2013-10-16 16:15 - 2013-09-08 01:05 - 00004110 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-16 16:15 - 2013-09-08 01:05 - 00003858 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-16 07:00 - 2013-09-11 13:19 - 00000388 _____ C:\Windows\Tasks\X-Rite Device Services Software Updater.job
2013-10-15 15:54 - 2013-10-15 15:54 - 01182530 _____ C:\Users\User\Downloads\exo.zip
2013-10-15 15:54 - 2013-10-15 15:54 - 00000000 ____D C:\Users\User\Downloads\exo
2013-10-15 11:33 - 2013-10-15 11:33 - 00000053 _____ C:\Users\User\Downloads\google6be8a98ba3a92bff.html
2013-10-14 15:47 - 2013-10-14 15:32 - 1663088084 _____ C:\Users\User\Desktop\France_2.avi
2013-10-14 15:28 - 2013-10-14 14:52 - 3307571434 _____ C:\Users\User\Desktop\France_1.avi
2013-10-14 14:50 - 2013-10-14 13:49 - 3496154838 _____ C:\Users\User\Desktop\France.avi
2013-10-14 13:58 - 2013-09-08 01:05 - 00000000 ____D C:\Users\User\AppData\Roaming\Adobe
2013-10-14 13:12 - 2013-10-14 13:10 - 00393264 _____ C:\Users\User\Desktop\France_1.mov
2013-10-14 12:28 - 2013-09-10 09:53 - 00000000 ____D C:\ProgramData\VideoCopilot
2013-10-14 12:05 - 2013-10-14 12:02 - 04956424 _____ C:\Users\User\Desktop\Pal_Lüftung_Frankreich.aep
2013-10-14 11:33 - 2013-10-14 11:33 - 00024343 _____ C:\Users\User\Downloads\batch_search-n-replace_paths_v1.7.zip
2013-10-14 10:50 - 2013-09-12 11:57 - 00001090 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-10-14 07:27 - 2013-09-09 09:00 - 00000000 ____D C:\Users\User\AppData\Local\Thunderbird
Files to move or delete:
====================
C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\avgnt.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\User\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\User\AppData\Local\Temp\Process.exe
C:\Users\User\AppData\Local\Temp\res1.tmp.exe
C:\Users\User\AppData\Local\Temp\twi1.tmp.exe
C:\Users\W-Lan\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-11 12:50
==================== End Of Log ============================ Addition.txt: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-11-2013
Ran by User at 2013-11-13 13:09:05
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.22 (x64 edition) (Version: 9.22.00.0)
Adobe Acrobat XI Pro (x32 Version: 11.0)
Adobe Acrobat XI Pro (x32 Version: 11.0.05)
Adobe After Effects CC (x32 Version: 12)
Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Audition CC (x32 Version: 6.0)
Adobe Bridge CC (64 Bit) (x32 Version: 6.0)
Adobe Creative Cloud (x32 Version: 2.1.2.232)
Adobe Dreamweaver CC (x32 Version: 13)
Adobe Edge Animate CC (x32 Version: 2.0.1)
Adobe Edge Code CC (x32 Version: 0.95)
Adobe Edge Inspect CC (x32 Version: 1.0.408)
Adobe Edge Reflow CC Preview (Version: 0.30.13098)
Adobe Exchange Panel (x32 Version: 1)
Adobe ExtendScript Toolkit CC (x32 Version: 4.0.0.0)
Adobe Extension Manager CC (x32 Version: 7.1)
Adobe Fireworks CS6 (x32 Version: 12.0.1)
Adobe Flash Builder 4.7 (64 Bit) (x32 Version: 4.7)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Flash Professional CC (x32 Version: 13.0)
Adobe Gaming SDK 1.2 (x32 Version: 1.2)
Adobe Help Manager (x32 Version: 4.0.244)
Adobe Illustrator CC (x32 Version: 17.0)
Adobe InCopy CC (x32 Version: 9.0)
Adobe InDesign CC (x32 Version: 9.0)
Adobe Muse (x32 Version: 6.0)
Adobe Muse (x32 Version: 6.0.751)
Adobe Photoshop CC (x32 Version: 14.0)
Adobe Photoshop Lightroom 5 64-bit (Version: 5.0.1)
Adobe Prelude CC (x32 Version: 2.0.0)
Adobe Premiere Pro CC (x32 Version: 7.0.1)
Adobe Scout CC (Version: 1.1.1.354079)
Adobe SpeedGrade CC (x32 Version: 7.0.0)
Adobe Touch App Plugins (x32 Version: 1.0)
Adobe® Content Viewer (x32 Version: 3.2.0)
Any Video Converter 5.0.9 (x32)
Apple Application Support (x32 Version: 2.3.4)
Apple Software Update (x32 Version: 2.1.3.127)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.16.2.0)
ASUS Network Utility (x32 Version: 2.7)
Avira Free Antivirus (x32 Version: 14.0.0.383)
bl (x32 Version: 1.0.0)
Bonjour (Version: 3.0.0.10)
Dropbox (HKCU Version: 2.0.26)
FontExplorer X Pro 2.4.1 (x32 Version: 002.004.0973)
Free WebM Video Converter version 5.0.29.925 (x32 Version: 5.0.29.925)
Google Chrome (x32 Version: 31.0.1650.48)
Google Update Helper (x32 Version: 1.3.21.165)
i1Profiler (x32 Version: 1.5.0)
iCloud (Version: 2.1.2.8)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
KONICA MINOLTA C360Series
LibreOffice 4.1.1.2 (x32 Version: 4.1.1.2)
Lightroom 5.0 (x32 Version: 5.0)
marvell 91xx driver (x32 Version: 1.2.0.1019)
Marvell Storage Utility V4 (x32 Version: 4.1.0.2003)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Image Composite Editor (Version: 1.4.4)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mobilizer (x32 Version: 0.9.6)
Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0)
Mozilla Maintenance Service (x32 Version: 25.0)
Mozilla Thunderbird 24.1.0 (x86 de) (x32 Version: 24.1.0)
MysticThumbs (Version: 1.9.8)
NVIDIA 3D Vision Controller-Treiber 320.49 (Version: 320.49)
NVIDIA 3D Vision Treiber 320.78 (Version: 320.78)
NVIDIA Grafiktreiber 320.78 (Version: 320.78)
NVIDIA HD-Audiotreiber 1.3.24.2 (Version: 1.3.24.2)
NVIDIA Install Application (Version: 2.1002.124.810)
NVIDIA nView 140.62 (Version: 140.62)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2078)
NVIDIA Systemsteuerung 320.78 (Version: 320.78)
NVIDIA WMI 2.12.0 (Version: 2.12.0)
Pantone Color Manager 1.0.2 (x32)
PDF Settings CC (x32 Version: 12.0)
ph (x32 Version: 1.0.0)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6680)
Revolver Office 8.4.6 (x32)
Scribus 1.4.3 (x32 Version: 1.4.3)
Spotify (HKCU Version: 0.9.4.185.g7545a404)
System Requirements Lab for Intel (x32 Version: 4.5.15.0)
TeamViewer 8 (x32 Version: 8.0.22298)
ubCoreFlat64 5.21 (Version: 5.21)
ubCoreFlat64 5.21 (x32 Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
VC_CRT_x64 (Version: 1.02.0000)
VLC media player 2.1.0 (Version: 2.1.0)
Wacom Tablett (Version: 6.3.6-3)
WebTablet FB Plugin 32 bit (x32 Version: 2.1.0.3)
WebTablet FB Plugin 64 bit (Version: 2.1.0.3)
Win7_x64 (x32 Version: 0.96.06)
Windows Driver Package - ASPEED (ASTGraphics) Display (09/05/2012 8.00.10.0096) (Version: 09/05/2012 8.00.10.0096)
Windows XP Mode (Version: 1.3.7600.16422)
XRD i1d3 (x32 Version: 1.0.135)
X-Rite Device Services Manager (x32 Version: 2.3.75)
==================== Restore Points =========================
04-11-2013 07:32:48 Windows-Sicherung
11-11-2013 07:37:10 Windows-Sicherung
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {157800F6-F221-45B4-B214-83276DD54A21} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-08] (Google Inc.)
Task: {34EF5749-0412-443B-8EA3-A9C1D5CD2C0B} - System32\Tasks\X-Rite Device Services Software Updater => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe [2013-07-02] (X-Rite Inc.)
Task: {48366A9B-9EFA-4E7C-9EA0-DDA33048B225} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-Tim => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-06-13] (Adobe Systems Incorporated)
Task: {48543F19-65BF-441E-8CBD-ED2FF37B4746} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-W-Lan => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-06-13] (Adobe Systems Incorporated)
Task: {7B6E0AC1-725E-45AE-AA05-3FC8C0F7EF4D} - System32\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4} => C:\Users\User\AppData\Local\Temp\is-EC2PL.tmp\XRD Manager.exe
Task: {7E4C7343-8938-4CBD-96D1-1E7206AE66C4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D030CB6F-E742-4249-9105-6E15C9FD3B92} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-08] (Google Inc.)
Task: {F75B3947-3B0E-4BCB-A066-59EAAB584804} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-21] (Adobe Systems Incorporated)
Task: {F78C8A67-1955-47CC-9BEF-10CA019810FB} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-User => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-06-13] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\X-Rite Device Services Software Updater.job => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe
Task: C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job => C:\Users\User\AppData\Local\Temp\is-EC2PL.tmp\XRD Manager.exe
==================== Loaded Modules (whitelisted) =============
2013-08-30 09:01 - 2013-08-30 09:01 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll
2013-04-05 11:58 - 2013-04-05 11:58 - 00021320 _____ () C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreamsPS64.dll
2013-04-05 11:58 - 2013-04-05 11:58 - 00954696 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll
2013-10-02 09:41 - 2013-06-06 03:09 - 01185048 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2013-04-24 13:05 - 2013-07-31 16:33 - 00082848 _____ () C:\Program Files\Adobe\Adobe InDesign CC (64 bit)\ASLSupport.dll
2013-04-24 13:05 - 2013-04-24 13:05 - 00216992 _____ () C:\Program Files\Adobe\Adobe InDesign CC (64 bit)\ASKLib.dll
2013-04-24 13:05 - 2013-07-31 16:33 - 00229792 _____ () C:\Program Files\Adobe\Adobe InDesign CC (64 bit)\AdamLib.dll
2013-04-24 13:05 - 2013-04-24 13:05 - 00082336 _____ () C:\Program Files\Adobe\Adobe InDesign CC (64 bit)\unihan.dll
2013-10-08 12:11 - 2013-09-30 10:01 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-11-22 03:48 - 2011-11-22 03:48 - 00073782 _____ () C:\Program Files (x86)\Marvell\storage\Apache2\bin\zlib1.dll
2013-06-21 12:29 - 2013-06-21 12:29 - 01588224 _____ () C:\Program Files (x86)\X-Rite\Devices\rm200\GoldenEye.dll
2013-06-21 12:29 - 2013-06-21 12:29 - 02633728 _____ () C:\Program Files (x86)\X-Rite\Devices\colormunki\colormunki.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-07-25 11:53 - 2013-07-25 11:53 - 00055608 _____ () C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\Infrastructure.Library.XmlSerializers.dll
2013-07-03 13:41 - 2013-07-03 13:41 - 00163840 _____ () C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\DevelopDotNet.Compression.dll
2013-07-25 11:51 - 2013-07-25 11:51 - 00023864 _____ () C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\LicenseAPI.dll
2013-07-25 11:51 - 2013-07-25 11:51 - 00315192 _____ () C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\libxmlsec.dll
2013-07-25 11:51 - 2013-07-25 11:51 - 00956216 _____ () C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\libxml2.dll
2013-07-25 11:51 - 2013-07-25 11:51 - 00143160 _____ () C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\libxmlsec-mscrypto.dll
2013-07-03 13:40 - 2013-07-03 13:40 - 00032768 _____ () C:\Program Files (x86)\FontExplorer X\FontExplorer X Pro\ZeroconfService.dll
2013-09-08 14:52 - 2013-10-15 07:19 - 34604032 _____ () C:\Users\User\AppData\Roaming\Spotify\Data\libcef.dll
2013-09-11 12:05 - 2013-05-30 23:57 - 44388864 _____ () C:\Program Files (x86)\X-Rite\i1Profiler\Prism.dll
2013-09-11 12:05 - 2013-05-31 10:58 - 03449344 _____ () C:\Program Files (x86)\X-Rite\i1Profiler\CxF2_VC90MD_2.1.dll
2013-09-11 12:05 - 2013-05-31 10:58 - 00898560 _____ () C:\Program Files (x86)\X-Rite\i1Profiler\libxml2.dll
2013-09-11 12:05 - 2013-05-31 10:58 - 00073728 _____ () C:\Program Files (x86)\X-Rite\i1Profiler\zlib1.dll
2013-09-11 12:05 - 2013-05-31 10:58 - 07982592 _____ () C:\Program Files (x86)\X-Rite\i1Profiler\QtGui4.dll
2013-09-11 12:05 - 2013-05-31 10:58 - 02147328 _____ () C:\Program Files (x86)\X-Rite\i1Profiler\QtCore4.dll
2013-09-03 14:25 - 2013-09-03 14:25 - 32726528 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libcef.dll
2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libcef.dll
2012-09-23 19:43 - 2012-09-23 19:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2013-03-13 12:42 - 2013-06-05 13:21 - 00071560 _____ () C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\zlib1.dll
2013-08-30 09:00 - 2013-08-30 09:00 - 00381808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CCInvokeAAM.dll
2013-09-25 07:28 - 2013-10-15 07:19 - 00747008 _____ () C:\Users\User\AppData\Roaming\Spotify\Data\libglesv2.dll
2013-09-25 07:28 - 2013-10-15 07:19 - 00137216 _____ () C:\Users\User\AppData\Roaming\Spotify\Data\libegl.dll
2013-10-15 14:00 - 2013-10-31 08:24 - 03008624 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-10-15 14:00 - 2013-10-31 08:24 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-10-15 14:00 - 2013-10-31 08:24 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00139264 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\Appearance Pak.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00098304 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\Browser Plugin.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00073728 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\Internet Encodings.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00098304 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MD5.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00151552 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\RegEx.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00098304 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\Shell.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 01364599 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\SSLSocket.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00405504 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\XML.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00059904 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHTypes6201.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00090112 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHCalCtrl5121.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00016384 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHBase6410101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00025088 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHMacBinary10101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00055296 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHZComp10101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00043008 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHEncrypt10101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00030720 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHBlowf10101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00043008 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHSha210101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00069120 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHZStream10101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00048640 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHAES10101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00223744 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHPng4101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00043520 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSABAddressbookPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00031232 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSNSBasePlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00030720 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSNSImagePlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00028160 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSNSAttributedStringPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00034816 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSNSColorPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00050176 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSNotificationPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00035328 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCalendarStorePlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00041984 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSPictureMacPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00026624 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSAppleScriptPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00031744 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSMacOSXPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00024576 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSScreenshotWindowPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00046080 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCGPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00031744 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCGGeometryPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00027136 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCGImagePlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00054784 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCFPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00033792 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCGPDFPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00027648 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCGColorPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00025600 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCGDataProviderPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00039936 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSRegistrationPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00120832 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSPicturePlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00058880 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSPictureRotatePlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00035840 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSScreenshotPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00065536 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSStringPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00030720 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSMathPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00037376 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSWinTransPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00033792 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSFolderitemsPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00033792 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSMemoryPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00056832 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSMainPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00038400 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSDateDifferencePlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00045056 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSProcessPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00029184 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSWindowPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00040960 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSCallsPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00047616 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSSystemInformationPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00052736 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSInternationalWinPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00055808 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\MBSWinPlugin16724.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00084992 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHEffects7511.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00065024 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHEffects37511.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00258048 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\PostgreSQLPlugin.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00024064 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHBitFuncs6111.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00056320 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHTLEncryption6201.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00056832 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHTLStreams6201.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00063488 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHGFShared4101.dll
2013-09-11 13:36 - 2012-02-17 12:44 - 00056320 _____ () C:\Program Files (x86)\Revolver Office\Revolver Office Libs\EHPEInterfaces7511.dll
2013-11-06 10:06 - 2013-11-06 10:06 - 03368048 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-10-21 12:00 - 2013-10-21 12:00 - 16233864 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll
2013-10-08 12:11 - 2013-09-30 10:01 - 00394824 _____ () C:\program files (x86)\avira\antivir desktop\sqlite3.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\User\Cookies:ges181AAR3hR86n207OKu3vd8dKk
AlternateDataStreams: C:\Users\User\AppData\Local\Temp:3I8JVgasKJCLge6Oo1agABTLfjm0S
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: 802.11n/b/g 2cm Wireless LAN USB2.0 Adapter
Description: 802.11n/b/g 2cm Wireless LAN USB2.0 Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: AboCom System, Inc.
Service: RTL8192su
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: SAS-Controller
Description: SAS-Controller
Class Guid:
Manufacturer:
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/13/2013 11:53:27 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/13/2013 10:20:02 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/13/2013 08:22:18 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/13/2013 08:20:49 AM) (Source: Apache Service) (User: )
Description: The Apache service named reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.201 for ServerName .
Error: (11/12/2013 11:15:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/12/2013 11:08:01 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/12/2013 10:56:46 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/12/2013 10:14:23 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/12/2013 09:29:01 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (11/12/2013 09:28:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
System errors:
=============
Error: (11/11/2013 08:27:00 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 08.11.2013 um 14:27:43 unerwartet heruntergefahren.
Error: (10/23/2013 09:13:44 AM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.104 mit dem Computer mit der
Netzwerkhardwareadresse 68-A8-6D-22-B7-A2 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.
Error: (10/07/2013 00:18:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Realtek11nSU" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (09/11/2013 00:06:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinI2C-DDC Kernel Mode Driver" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (09/11/2013 00:06:17 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\SysWow64\drivers\DDCDrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (09/08/2013 02:32:36 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet:
%%16405
Error: (09/08/2013 02:03:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (09/08/2013 02:03:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "avast! Antivirus" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (09/08/2013 02:03:24 PM) (Source: Service Control Manager) (User: )
Description: Dienst "MSU Web Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/08/2013 02:03:24 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Marvell Storage Management Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (11/13/2013 11:53:27 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Adobe Dreamweaver CC\Dreamweaver.exe
Error: (11/13/2013 10:20:02 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\Adobe\adobe dreamweaver cc\Dreamweaver.exe
Error: (11/13/2013 08:22:18 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (11/13/2013 08:20:49 AM) (Source: Apache Service)(User: )
Description: The Apache service namedreported the following error:
>>>httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.0.201 for ServerName
Error: (11/12/2013 11:15:58 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Adobe Dreamweaver CC\Dreamweaver.exe
Error: (11/12/2013 11:08:01 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Adobe Dreamweaver CC\Dreamweaver.exe
Error: (11/12/2013 10:56:46 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Adobe Dreamweaver CC\Dreamweaver.exe
Error: (11/12/2013 10:14:23 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\Adobe\adobe dreamweaver cc\Dreamweaver.exe
Error: (11/12/2013 09:29:01 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Adobe Dreamweaver CC\Dreamweaver.exe
Error: (11/12/2013 09:28:58 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\Adobe\Adobe Dreamweaver CC\Dreamweaver.exe
CodeIntegrity Errors:
===================================
Date: 2013-11-13 08:20:51.890
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-12 08:59:59.449
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-12 08:49:02.503
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-12 08:20:22.360
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-11 10:29:28.441
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-11 09:11:11.244
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-11 08:27:05.642
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-08 09:28:06.378
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-08 09:22:01.751
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-11-07 13:16:47.134
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 12%
Total physical RAM: 65485.7 MB
Available physical RAM: 57318.32 MB
Total Pagefile: 130969.57 MB
Available Pagefile: 121277.06 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:476.84 GB) (Free:215.85 GB) NTFS
Drive d: (Volume) (Fixed) (Total:1863.01 GB) (Free:1829.83 GB) NTFS
Drive e: (Volume) (Fixed) (Total:1862.82 GB) (Free:1527.97 GB) NTFS
Drive f: (Volume) (Fixed) (Total:1863.01 GB) (Free:1714.56 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 477 GB) (Disk ID: 3A0DEAA5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=477 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 69A21ED7)
Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT Partition Type
========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D8A12FFF)
Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)
==================== End Of Log ============================ GMER Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-11-13 13:35:18
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP10T0L0-a OCZ-VERTEX4 rev.1.5 476,94GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\User\AppData\Local\Temp\uwldqkow.sys
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe[2200] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe[2200] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe[2244] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe[2244] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe[2428] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe[2428] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe[2792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe[2792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[4056] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[4056] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\X-Rite\i1Profiler\i1ProfilerTray.exe[2584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\X-Rite\i1Profiler\i1ProfilerTray.exe[2584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe[4108] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe[4108] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe[3928] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe[3928] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe[3904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe[3904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe[4492] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe[4492] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
.text C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe[6812] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000760b1465 2 bytes [0B, 76]
.text C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe[6812] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000760b14bb 2 bytes [0B, 76]
.text ... * 2
? C:\Windows\system32\mssprxy.dll [3680] entry point in ".rdata" section 00000000726171e6
---- EOF - GMER 2.1 ---- |