Pc braucht lange zum hochfahren
Hallo,
Mein Pc braucht ewig zum Starten.
Ich habe mit CCleaner bereinigt, dabei Cleaner und Registry ausgeführt.
Ich habe mit Microsoft Security Essentials nach Viren gescannt ohne Fund.
Ich habe in Systemkonfiguration einige Dienste und Systemstarts beendet/deaktiviert das eventuell nicht so gut war (was genau weiß ich nur vereinzelt).
Sollte etwas fehlen oder ich was falsch gemacht haben, was bei mir üblich ist, bitte bescheid sagen.
Lg Raini
MALEWARE SCAN Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 14.10.2014
Scan Time: 09:33:33
Logfile: Malewarebytes, Scan Log.txt
Administrator: Yes
Version: 2.00.3.1025
Malware Database: v2014.10.14.07
Rootkit Database: v2014.10.11.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Rainer
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 379272
Time Elapsed: 9 min, 21 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 0
(No malicious items detected)
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 0
(No malicious items detected)
Physical Sectors: 0
(No malicious items detected)
(end)
DEFOGGER Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 08:36 on 14/10/2014 (Rainer)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST.txt Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-10-2014 02
Ran by Rainer (administrator) on RAINER-PC on 14-10-2014 08:15:00
Running from C:\Users\Rainer\Desktop
Loaded Profile: Rainer (Available profiles: Rainer & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\inetsrv\inetinfo.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
() C:\Windows\DAODx.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AsDLNAServerReal.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-10-04] (Advanced Micro Devices, Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1467966622-3244609854-4136879408-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd)
HKU\S-1-5-21-1467966622-3244609854-4136879408-1000\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-08-20] (Raptr, Inc)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-05-25] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll (Microsoft Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpWinExt,version=5.0 -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-08-29]
FF HKLM-x32\...\Firefox\Extensions: [msntoolbar@msn.com] - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox
FF Extension: Bing Bar - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox [2014-06-03]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2014-06-03]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.at/"
CHR Profile: C:\Users\Rainer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-22]
CHR Extension: (Google Drive) - C:\Users\Rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-22]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-25]
CHR Extension: (Google-Suche) - C:\Users\Rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-25]
CHR Extension: (Google Wallet) - C:\Users\Rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-25]
CHR Extension: (Google Mail) - C:\Users\Rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-25]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-10-04] (Advanced Micro Devices, Inc.) [File not signed]
S4 amdacpusrsvc; C:\AMD\amdacpusrsvc.exe [82432 2014-04-17] () [File not signed]
S4 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2013-09-17] (ASUSTeK Computer Inc.)
S4 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.)
S4 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.00\AsusFanControlService.exe [1632256 2012-11-09] (ASUSTeK Computer Inc.) [File not signed]
S4 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-08-22] (Hi-Rez Studios) [File not signed]
R2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-20] (Microsoft Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
S4 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
S4 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S4 SftService; "H:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2013-01-28] (ASUSTek Computer Inc.)
R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [293064 2014-10-04] (Advanced Micro Devices)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2013-01-15] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)
S3 GemCCID; C:\Windows\System32\DRIVERS\GemCCID.sys [130688 2014-03-14] (Gemalto)
R2 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-10-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 USBMULCD; C:\Windows\System32\drivers\CM10664.sys [1310720 2010-08-12] (C-Media Electronics Inc)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-14 08:15 - 2014-10-14 08:15 - 00014350 _____ () C:\Users\Rainer\Desktop\FRST.txt
2014-10-14 07:57 - 2014-10-14 07:57 - 00003092 _____ () C:\Windows\DPINST.LOG
2014-10-14 07:42 - 2014-10-14 07:42 - 00050477 _____ () C:\Users\Rainer\Desktop\Defogger.exe
2014-10-14 07:04 - 2014-10-14 07:04 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-10-14 06:08 - 2014-10-14 06:08 - 00078272 _____ () C:\Users\Rainer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-14 06:07 - 2014-10-14 08:00 - 00001045 _____ () C:\Windows\setupact.log
2014-10-14 06:07 - 2014-10-14 06:07 - 00327992 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-14 06:07 - 2014-10-14 06:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-14 05:56 - 2014-10-14 08:15 - 00000000 ____D () C:\FRST
2014-10-14 05:55 - 2014-10-14 05:56 - 02110464 _____ (Farbar) C:\Users\Rainer\Desktop\FRST64.exe
2014-10-14 05:26 - 2014-10-14 05:26 - 00165376 _____ () C:\Users\Rainer\Desktop\SystemLook_x64.exe
2014-10-13 17:05 - 2014-10-13 17:07 - 285634304 _____ (AMD Inc.) C:\Users\Rainer\Downloads\amd-catalyst-14.9.1beta-64bit-win8.1-win7-oct6.exe
2014-10-13 16:52 - 2014-10-13 16:52 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-10-13 16:49 - 2014-10-13 16:49 - 00000000 ____D () C:\Users\Rainer\Downloads\AMD_Chipset_Win7_8_VER809030
2014-10-13 16:48 - 2014-10-13 16:49 - 274672248 _____ () C:\Users\Rainer\Downloads\AMD_Chipset_Win7_8_VER809030.zip
2014-10-13 16:04 - 2014-10-13 16:04 - 00347816 _____ (Microsoft Corporation) C:\Users\Rainer\Downloads\MicrosoftFixit.Devices.Run.exe
2014-10-13 12:13 - 2014-10-13 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debugging Tools for Windows (x64)
2014-10-13 12:13 - 2014-10-13 12:13 - 00000000 ____D () C:\Program Files\Debugging Tools for Windows (x64)
2014-10-13 12:06 - 2014-10-13 12:06 - 00163917 _____ () C:\Users\Rainer\Downloads\ReleaseNotes_Win7_1RTMSDK (1).Htm
2014-10-13 12:02 - 2014-10-13 12:02 - 00163917 _____ () C:\Users\Rainer\Downloads\ReleaseNotes_Win7_1RTMSDK.Htm
2014-10-13 12:01 - 2014-10-13 12:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Windows SDK v7.1
2014-10-13 12:01 - 2014-10-13 12:01 - 00000000 ____D () C:\Program Files\Microsoft SDKs
2014-10-13 12:00 - 2014-10-13 12:00 - 00509264 _____ (Microsoft Corporation) C:\Users\Rainer\Downloads\winsdk_web.exe
2014-10-13 11:25 - 2014-10-13 11:25 - 00509336 _____ () C:\Users\Rainer\Downloads\303867_ENU_i386_zip.exe
2014-10-13 10:50 - 2014-10-13 10:50 - 00003608 ____N () C:\bootsqm.dat
2014-10-12 16:04 - 2014-10-12 16:06 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-12 16:03 - 2014-10-12 16:03 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-12 16:03 - 2014-10-12 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-12 16:03 - 2014-10-12 16:03 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-12 16:03 - 2014-10-12 16:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-12 16:03 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-12 16:03 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-12 16:03 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-12 16:02 - 2014-10-12 16:03 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Rainer\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-10-12 16:01 - 2014-10-12 16:01 - 00000000 ____D () C:\Users\Rainer\Downloads\mbam-chameleon-3.1.4.0
2014-10-12 16:00 - 2014-10-12 16:00 - 04872677 _____ () C:\Users\Rainer\Downloads\mbam-chameleon-3.1.4.0.zip
2014-10-12 13:06 - 2014-10-12 13:06 - 00002984 _____ () C:\Windows\System32\Tasks\{9A43998A-CC3A-4996-A9D6-6AD6C4332F4D}
2014-10-11 16:12 - 2014-10-11 16:12 - 00000003 _____ () C:\Windows\system32\HRUPPROG.TXT
2014-10-11 16:12 - 2014-10-11 16:12 - 00000003 _____ () C:\Windows\system32\HRUPPROG.EXIT
2014-10-11 16:05 - 2014-10-11 16:06 - 00000000 ____D () C:\Program Files (x86)\Hi-Rez Studios
2014-10-11 16:05 - 2014-10-11 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2014-10-11 16:05 - 2014-10-11 16:05 - 00000000 ____D () C:\ProgramData\Hi-Rez Studios
2014-10-11 16:01 - 2014-10-11 16:02 - 65751896 _____ () C:\Users\Rainer\Desktop\SmiteInstaller.exe
2014-10-11 13:38 - 2014-10-14 08:04 - 00000000 ____D () C:\Users\Rainer\AppData\Roaming\Raptr
2014-10-11 13:38 - 2014-10-13 17:13 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-10-11 13:38 - 2014-10-11 13:38 - 00000000 ____D () C:\Users\Rainer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2014-10-11 13:38 - 2014-10-11 13:38 - 00000000 ____D () C:\ProgramData\ATI
2014-10-11 13:37 - 2014-10-11 13:37 - 00062096 _____ () C:\Windows\SysWOW64\CCCInstall_201410111337489318.log
2014-10-11 13:37 - 2014-10-11 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-10-11 13:37 - 2014-10-11 13:37 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-10-10 17:54 - 2014-10-10 17:54 - 00062096 _____ () C:\Windows\SysWOW64\CCCInstall_201410101754354800.log
2014-10-10 11:12 - 2014-10-10 11:12 - 00128108 _____ () C:\Users\Rainer\AppData\Local\recently-used.xbel
2014-10-06 12:09 - 2014-10-06 12:09 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-10-06 12:03 - 2014-10-06 12:03 - 01101648 _____ () C:\Users\Rainer\Downloads\Windows Media Player - CHIP-Installer.exe
2014-10-06 11:35 - 2014-10-06 11:35 - 25766024 _____ (Microsoft Corporation) C:\Users\Rainer\Downloads\wmp11-windowsxp-x86-DE-DE (3).exe
2014-10-04 21:08 - 2014-10-04 21:08 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2014-10-04 21:08 - 2014-10-04 21:08 - 00126848 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2014-10-04 21:08 - 2014-10-04 21:08 - 00118096 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2014-10-04 21:08 - 2014-10-04 21:08 - 00100032 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2014-10-04 21:08 - 2014-10-04 21:08 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-10-04 21:08 - 2014-10-04 21:08 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-10-04 21:08 - 2014-10-04 21:08 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-10-04 21:08 - 2014-10-04 21:08 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-10-04 21:07 - 2014-10-04 21:07 - 09254184 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2014-10-04 21:07 - 2014-10-04 21:07 - 07207592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2014-10-04 21:07 - 2014-10-04 21:07 - 07028336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2014-10-04 21:07 - 2014-10-04 21:07 - 01113576 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2014-10-04 21:05 - 2014-10-04 21:05 - 00293064 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-10-04 21:04 - 2014-10-04 21:04 - 16750080 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-10-04 20:50 - 2014-10-04 20:50 - 33867264 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-10-04 20:50 - 2014-10-04 20:50 - 00235008 _____ () C:\Windows\system32\clinfo.exe
2014-10-04 20:50 - 2014-10-04 20:50 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-10-04 20:50 - 2014-10-04 20:50 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-10-04 20:50 - 2014-10-04 20:50 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-10-04 20:50 - 2014-10-04 20:50 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-10-04 20:49 - 2014-10-04 20:49 - 28770304 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2014-10-04 20:49 - 2014-10-04 20:49 - 27918336 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-10-04 20:48 - 2014-10-04 20:48 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-10-04 20:48 - 2014-10-04 20:48 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-10-04 20:44 - 2014-10-04 20:44 - 23375360 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-10-04 20:43 - 2014-10-04 20:43 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-10-04 20:42 - 2014-10-04 20:42 - 05639168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-10-04 20:42 - 2014-10-04 20:42 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-10-04 20:42 - 2014-10-04 20:42 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-10-04 20:42 - 2014-10-04 20:42 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-10-04 20:40 - 2014-10-04 20:40 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-10-04 20:40 - 2014-10-04 20:40 - 00609280 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-10-04 20:40 - 2014-10-04 20:40 - 00609280 _____ () C:\Windows\system32\atiapfxx.blb
2014-10-04 20:40 - 2014-10-04 20:40 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-10-04 20:40 - 2014-10-04 20:40 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-10-04 20:40 - 2014-10-04 20:40 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-10-04 20:40 - 2014-10-04 20:40 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-10-04 20:40 - 2014-10-04 20:40 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-10-04 20:39 - 2014-10-04 20:39 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-10-04 20:39 - 2014-10-04 20:39 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-10-04 20:39 - 2014-10-04 20:39 - 04480000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-10-04 20:37 - 2014-10-04 20:37 - 00091648 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-10-04 20:37 - 2014-10-04 20:37 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-10-04 20:35 - 2014-10-04 20:35 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-10-04 20:35 - 2014-10-04 20:35 - 00619008 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-10-04 20:35 - 2014-10-04 20:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-10-04 20:35 - 2014-10-04 20:35 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-10-04 20:35 - 2014-10-04 20:35 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-10-04 20:35 - 2014-10-04 20:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-10-04 20:32 - 2014-10-04 20:32 - 00095744 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2014-10-04 20:32 - 2014-10-04 20:32 - 00090112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2014-10-04 20:32 - 2014-10-04 20:32 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 01210880 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 00900608 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 00576000 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-10-04 20:31 - 2014-10-04 20:31 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-10-04 20:31 - 2014-10-04 20:31 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-10-04 14:54 - 2014-10-04 14:54 - 00051200 _____ () C:\Windows\system32\kdbsdk64.dll
2014-10-04 14:52 - 2014-10-04 14:52 - 00038912 _____ () C:\Windows\SysWOW64\kdbsdk32.dll
2014-10-02 13:05 - 2014-10-05 10:09 - 05955560 _____ () C:\Users\Rainer\Documents\kugl.xcf
2014-10-01 17:27 - 2014-10-10 11:12 - 01018469 _____ () C:\Users\Rainer\Desktop\20130420_UW_NellyMeyer_042.xcf
2014-10-01 09:56 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 09:56 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-30 13:57 - 2014-09-30 13:57 - 01909550 _____ () C:\Users\Rainer\Downloads\fantasiebild11.xcf
2014-09-26 07:40 - 2014-09-26 13:31 - 07761779 _____ () C:\Users\Rainer\Documents\muster.xcf
2014-09-24 05:18 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-24 05:18 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-23 17:53 - 2014-09-23 17:53 - 03196706 _____ () C:\Users\Rainer\Downloads\Eyelashes_Photoshop_Brushes_by_redheadstock.zip
2014-09-23 17:53 - 2014-09-23 17:53 - 00000000 ____D () C:\Users\Rainer\Downloads\Eyelashes_Photoshop_Brushes_by_redheadstock
2014-09-21 19:35 - 2014-09-21 19:35 - 06602514 _____ () C:\Users\Rainer\Documents\sternenfarbe3.xcf
2014-09-20 17:03 - 2014-09-20 17:03 - 01229697 _____ () C:\Users\Rainer\Documents\fantasie.xcf
2014-09-20 13:02 - 2014-09-20 13:02 - 02162503 _____ () C:\Users\Rainer\Documents\muster66.xcf
2014-09-20 11:38 - 2014-09-20 11:39 - 74675720 _____ (DVDVideoSoft Ltd. ) C:\Users\Rainer\Downloads\FreeStudio (2).exe
2014-09-20 11:38 - 2014-09-20 11:39 - 02859008 _____ (OOO TIMP LTD (1604)) C:\Users\Rainer\Downloads\DownloadFileSetup_93HCo.exe
2014-09-20 11:38 - 2014-09-20 11:38 - 74675720 _____ (DVDVideoSoft Ltd. ) C:\Users\Rainer\Downloads\FreeStudio (1).exe
2014-09-18 04:50 - 2014-09-18 04:50 - 00000000 ____D () C:\ProgramData\ASUS
2014-09-17 19:49 - 2014-09-17 19:49 - 00002980 _____ () C:\Windows\System32\Tasks\{8FFD371F-B091-46B5-AC8A-01D4CEA1AFD8}
2014-09-17 19:48 - 2014-09-17 19:48 - 00002980 _____ () C:\Windows\System32\Tasks\{A00AE453-4FB0-41A0-AD9C-237C44C7D720}
2014-09-17 19:47 - 2014-09-17 19:47 - 00002980 _____ () C:\Windows\System32\Tasks\{7A7CD5EC-1ADB-4A74-B494-2F50E606CAAF}
2014-09-17 19:46 - 2014-09-17 19:46 - 00002980 _____ () C:\Windows\System32\Tasks\{BE1E8294-8AE8-4483-94DC-E567C692E1D6}
2014-09-16 00:31 - 2014-10-04 21:08 - 00118096 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-09-16 00:31 - 2014-10-04 21:07 - 08296296 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-09-16 00:31 - 2014-10-04 21:07 - 08044976 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-09-15 23:59 - 2014-10-04 20:33 - 00827392 _____ (AMD) C:\Windows\system32\coinst_14.30.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-14 08:11 - 2014-05-25 09:59 - 00000000 ____D () C:\Users\Rainer
2014-10-14 08:10 - 2009-07-14 06:45 - 00023376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-14 08:10 - 2009-07-14 06:45 - 00023376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-14 08:06 - 2014-06-06 08:15 - 01497847 _____ () C:\Windows\WindowsUpdate.log
2014-10-14 08:03 - 2014-05-25 18:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-14 08:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-10-14 08:02 - 2014-05-25 10:05 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-14 08:00 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-14 07:59 - 2014-05-25 17:31 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-10-14 07:56 - 2014-07-05 18:19 - 00000000 ____D () C:\Users\Rainer\AppData\Local\NokiaAccount
2014-10-14 07:56 - 2014-07-05 18:18 - 00000000 ____D () C:\ProgramData\Nokia
2014-10-14 07:56 - 2014-07-05 18:17 - 00000000 ____D () C:\Program Files (x86)\Nokia
2014-10-14 07:56 - 2014-06-05 21:07 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-10-14 07:27 - 2014-05-25 10:05 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-14 06:31 - 2014-09-11 17:52 - 00015872 ___SH () C:\Users\Rainer\Thumbs.db
2014-10-13 15:50 - 2014-07-04 15:58 - 00000000 ____D () C:\Program Files\Recuva
2014-10-13 15:50 - 2014-06-03 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-10-13 15:48 - 2014-06-03 10:33 - 00004565 _____ () C:\ProgramData\hpzinstall.log
2014-10-13 12:01 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-10-13 11:54 - 2014-06-06 21:20 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-10-13 06:38 - 2014-06-09 05:12 - 00000000 ____D () C:\Windows\Minidump
2014-10-13 06:37 - 2014-05-26 10:05 - 00007660 _____ () C:\Users\Rainer\AppData\Local\Resmon.ResmonCfg
2014-10-12 15:45 - 2014-05-26 09:09 - 00000000 ____D () C:\Program Files\CCleaner
2014-10-12 15:38 - 2014-06-03 10:34 - 00000000 ____D () C:\Program Files (x86)\HP
2014-10-12 15:32 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-10-11 16:05 - 2014-05-25 10:07 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-11 15:49 - 2014-06-08 11:20 - 00000000 ____D () C:\Program Files (x86)\Diablo II
2014-10-11 15:46 - 2014-06-08 15:38 - 00000000 ____D () C:\Users\Rainer\Documents\Diablo III
2014-10-11 13:37 - 2014-05-25 17:24 - 00000000 ____D () C:\ProgramData\AMD
2014-10-11 13:37 - 2014-05-25 17:20 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-10-11 13:30 - 2014-05-25 17:24 - 00000000 ____D () C:\AMD
2014-10-11 13:25 - 2014-05-25 13:14 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-10-10 17:56 - 2014-06-02 08:56 - 00000000 ____D () C:\Users\Rainer\.gimp-2.8
2014-10-09 06:49 - 2014-05-26 19:20 - 00000000 ____D () C:\Users\Rainer\Desktop\fotos
2014-10-08 19:22 - 2014-08-25 10:18 - 00000000 ____D () C:\Users\Rainer\AppData\Roaming\vlc
2014-10-07 11:58 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-06 14:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-06 12:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-10-06 11:51 - 2009-07-14 19:58 - 00774600 _____ () C:\Windows\system32\perfh007.dat
2014-10-06 11:51 - 2009-07-14 19:58 - 00175568 _____ () C:\Windows\system32\perfc007.dat
2014-10-06 11:51 - 2009-07-14 07:13 - 01808542 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-04 21:08 - 2014-05-23 04:28 - 01335544 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2014-10-04 21:08 - 2014-05-23 04:28 - 00144328 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2014-10-04 21:07 - 2014-05-23 04:27 - 10826488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2014-10-03 10:56 - 2014-06-02 08:59 - 00000000 ____D () C:\Users\Rainer\AppData\Local\gtk-2.0
2014-09-26 09:29 - 2014-08-23 14:28 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-09-22 08:42 - 2014-05-25 10:37 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-21 17:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-20 20:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Vss
2014-09-20 11:40 - 2014-06-02 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-09-20 11:40 - 2014-06-02 15:07 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-09-20 11:39 - 2014-06-02 15:06 - 00000000 ____D () C:\Users\Rainer\AppData\Roaming\DVDVideoSoft
2014-09-17 19:33 - 2014-06-06 13:09 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-09-15 06:12 - 2014-06-06 13:37 - 00000000 _____ () C:\Windows\Path.idx
2014-09-15 06:07 - 2014-06-06 13:24 - 01048576 _____ () C:\Windows\PE_Rom.dll
Some content of TEMP:
====================
C:\Users\Rainer\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Rainer\AppData\Local\Temp\raptrpatch.exe
C:\Users\Rainer\AppData\Local\Temp\raptr_stub.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-06 14:52
==================== End Of Log ============================
ADDITIONAL Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-10-2014 02
Ran by Rainer at 2014-10-14 08:15:45
Running from C:\Users\Rainer\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
3600_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
ACP Application (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AION Free-to-Play (HKLM-x32\...\{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1) (Version: - Gameforge)
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.2.0.591 - Amazon Services LLC)
Amazon Music Importer (HKLM-x32\...\com.amazon.music.uploader) (Version: 3.0.0 - Amazon Services LLC)
Amazon Music Importer (x32 Version: 3.0.0 - Amazon Services LLC) Hidden
AMD Accelerated Video Transcoding (Version: 13.30.100.41004 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.1004.1447.24752 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{B800192A-2B6D-7DF6-CC68-B3A1D3653E17}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2014.1004.1447.24752 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80911.2216 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In (Version: 2.07.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.10.0 - Asmedia Technology)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bing Bar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 5.0.1449.0 - Microsoft Corporation)
Bing Bar Platform (x32 Version: 5.0.1449.0 - Microsoft Corporation) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BPD_Scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.1004.1447.24752 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.1004.1447.24752 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.1004.1447.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.1004.1446.24752 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.1004.1447.24752 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
CrystalDiskInfo 6.1.12 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.1.12 - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Debugging Tools for Windows (x64) (HKLM\...\{DBFC6AAE-DCCB-4C23-B01C-3EDDDC03298B}) (Version: 6.12.2.633 - Microsoft Corporation)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
Diablo II (HKLM-x32\...\Diablo II) (Version: - Blizzard Entertainment)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
DocProc (x32 Version: 140.0.100.000 - Hewlett-Packard) Hidden
DriverTuner 3.5.0.1 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.5.0.1 - LionSea Software co., ltd)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fax (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free Audio Converter version 5.0.47.906 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.47.906 - DVDVideoSoft Ltd.)
Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.3.9.906 - DVDVideoSoft Ltd.)
Free Video Editor version 1.4.4.904 (HKLM-x32\...\Free Video Editor_is1) (Version: 1.4.4.904 - DVDVideoSoft Ltd.)
Free Video to MP3 Converter version 5.0.44.623 (HKLM-x32\...\Free Video to MP3 Converter_is1) (Version: 5.0.44.623 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.2.41.623 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.41.623 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.4 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.4 - Gameforge)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Hi-Rez Studios Games (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP OfficeJet J3600 (HKLM\...\{269402AB-D600-4961-80EF-779CB346D29E}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HPProductAssistant (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
J3600 (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Default Manager (x32 Version: 2.1.55.0 - Microsoft Corporation) Hidden
Microsoft Search Enhancement Pack (x32 Version: 3.0.126.0 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.6.0305.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Windows SDK for Windows 7 (7.1) (HKLM\...\SDKSetup_7.1.7600.0.30514) (Version: 7.1.7600.0.30514 - Microsoft Corporation)
Microsoft Windows SDK for Windows 7 (7.1) (Version: 7.1.30514 - Microsoft Corporation) Hidden
Microsoft Windows SDK for Windows 7 Redistributable Components for Windows Debugging Tools (30514) (Version: 7.1.30514 - Microsoft Corporation) Hidden
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
ProductContext (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
Raptr (HKLM-x32\...\Raptr) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.85.423.2014 - Realtek)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Scan (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
USB Multi-Channel Audio Device (HKLM\...\C-Media CM106 Like Sound Driver) (Version: - )
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebReg (x32 Version: 140.0.213.017 - Hewlett-Packard) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
22-07-2014 03:14:59 Windows Update
22-07-2014 08:15:05 Windows Live Essentials
22-07-2014 08:15:50 DirectX wurde installiert
22-07-2014 08:16:23 DirectX wurde installiert
22-07-2014 08:16:56 DirectX wurde installiert
22-07-2014 08:18:04 WLSetup
24-07-2014 10:27:56 Windows Update
28-07-2014 09:15:03 Windows Update
31-07-2014 09:22:51 Windows Update
31-07-2014 09:29:58 Windows Update
01-08-2014 06:57:04 Installed Java 7 Update 65
03-08-2014 18:35:21 Windows Update
05-08-2014 11:51:19 Installed Java 7 Update 67
07-08-2014 14:15:54 Windows Update
11-08-2014 15:56:37 Windows Update
13-08-2014 20:39:44 Windows Update
17-08-2014 13:33:18 Windows Update
21-08-2014 09:08:15 Windows Update
25-08-2014 05:14:52 Windows Update
25-08-2014 07:55:30 Windows Modules Installer
25-08-2014 12:30:56 Removed Apple Application Support
25-08-2014 12:32:04 Removed Apple Software Update
25-08-2014 12:32:50 Removed Apple Mobile Device Support
25-08-2014 12:34:03 Removed iTunes
28-08-2014 15:40:32 Windows Update
31-08-2014 09:48:04 Installed HP Update.
01-09-2014 11:24:23 Windows Update
05-09-2014 07:28:32 Windows Update
08-09-2014 09:02:09 Windows Update
10-09-2014 11:24:00 Windows Update
11-09-2014 04:23:45 Installed Krita Desktop (x86) "2.8.3.0"
11-09-2014 04:29:28 Removed Krita Desktop (x86) "2.8.3.0"
13-09-2014 20:16:42 Windows Update
17-09-2014 05:23:48 Windows Update
20-09-2014 14:03:31 Windows Update
24-09-2014 03:22:54 Windows Update
24-09-2014 10:06:59 Windows Update
27-09-2014 13:52:58 Windows Update
01-10-2014 15:02:16 Windows Update
01-10-2014 15:54:09 Windows Update
05-10-2014 07:32:41 Windows Update
06-10-2014 10:07:57 Windows Modules Installer
09-10-2014 04:24:16 Windows Update
10-10-2014 15:49:38 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
10-10-2014 15:50:41 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
11-10-2014 11:32:11 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
11-10-2014 11:32:54 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
11-10-2014 11:34:35 Gerätetreiber-Paketinstallation: Advanced Micro Devices, Inc. Grafikkarte
11-10-2014 14:04:06 Installiert Hi-Rez Studios Games
12-10-2014 13:30:44 Windows Update
13-10-2014 10:12:41 Installed Debugging Tools for Windows (x64)
13-10-2014 13:48:49 Removed HP Support Solutions Framework
13-10-2014 13:49:53 Removed HP Update.
13-10-2014 15:10:26 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
13-10-2014 15:11:06 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
14-10-2014 05:54:40 Nokia Connectivity Cable Driver wird entfernt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0FDF5EF2-2CD8-4901-80A9-B498500B99BE} - System32\Tasks\{7A7CD5EC-1ADB-4A74-B494-2F50E606CAAF} => C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe [2012-08-07] (ASUSTeK Computer Inc.)
Task: {11039E8D-0641-47CE-AA5B-5619CFB852EC} - System32\Tasks\{F214DE48-3175-4F8A-A5AC-E6E5CDC43978} => C:\Program Files (x86)\Diablo II\Diablo II.exe [2014-06-08] (Blizzard North)
Task: {163053E2-C3D1-4485-8C0E-E0538A96D805} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)
Task: {1AF88C7E-92E4-4B57-A7EF-CDAC60B93B49} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {20A8723C-71B3-4EC3-9ECE-721052FEC87C} - System32\Tasks\ASUS\ASUS WiFi GO! Server Execute => C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe [2013-08-26] (ASUSTeK Computer Inc.)
Task: {23FAF253-B780-4C20-98EB-FD2893CCA642} - System32\Tasks\{A00AE453-4FB0-41A0-AD9C-237C44C7D720} => C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe [2012-08-07] (ASUSTeK Computer Inc.)
Task: {39711E80-CFED-4A8C-AD8E-107051A446AF} - System32\Tasks\Microsoft\Windows\PLA\System\{424E33BB-DEFB-4199-AFA8-E249CE4F970B}_System Diagnostics => Rundll32.exe C:\Windows\system32\pla.dll,PlaHost "system\System Diagnostics" "$(Arg0)"
Task: {39D252D1-F30F-4A0E-A0D9-0D67139D3290} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25] (Google Inc.)
Task: {6813E7C4-6CF5-4F73-9941-38E12DE694A7} - System32\Tasks\{9A43998A-CC3A-4996-A9D6-6AD6C4332F4D} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2014-05-12] (Malwarebytes Corporation)
Task: {68FE80A7-66EF-434F-BD92-A07A2F50254E} - System32\Tasks\{BE1E8294-8AE8-4483-94DC-E567C692E1D6} => C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe [2012-08-07] (ASUSTeK Computer Inc.)
Task: {92BD5061-9EB5-4AC0-9526-F9565C0F1064} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
Task: {A0B0A182-EDE4-4BC6-8B77-0361ACFD08F7} - System32\Tasks\{8FFD371F-B091-46B5-AC8A-01D4CEA1AFD8} => C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe [2012-08-07] (ASUSTeK Computer Inc.)
Task: {A4C50DFD-616B-412E-915B-1F474A3C3007} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-09] ()
Task: {A4DD683D-FCA1-4BC3-BFCB-470C24FF777F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-25] (Google Inc.)
Task: {ADB42FF2-029E-4921-BE46-58CD9E7C12AB} - System32\Tasks\ASUS\ASUS Network iControl Help Execute => C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe [2013-02-07] (ASUSTeK Computer Inc.)
Task: {B85F48A1-9C48-4775-972F-13A23A3C24E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-25] (Adobe Systems Incorporated)
Task: {E7B8163E-38C8-4B76-86E7-51B54C9D083F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {F5F5FD52-94CA-4527-BC71-0653F8095684} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {FD549BC3-03C1-40DF-BEEA-49DB1B06F607} - System32\Tasks\ASUS\RunDAOD => C:\Windows\DAODx.exe [2009-03-30] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2009-03-30 08:32 - 2009-03-30 08:32 - 00032768 ____R () C:\Windows\DAODx.exe
2014-09-25 20:44 - 2014-09-25 20:44 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-04-14 21:41 - 2014-04-14 21:41 - 00039192 _____ () C:\Program Files\CCleaner\branding.dll
2014-06-06 13:18 - 2012-05-02 18:04 - 00233472 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\AudioProjection.dll
2014-06-06 13:18 - 2010-12-14 17:46 - 00067584 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\CoreAudioCap.dll
2014-06-06 13:18 - 2013-08-05 11:14 - 00176128 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\DLCapPP.dll
2014-06-06 13:18 - 2013-06-11 12:06 - 00425984 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\awiscale.DLL
2014-06-06 13:18 - 2010-10-29 18:58 - 00221184 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\JpegCD.DLL
2014-06-06 13:18 - 2013-08-06 20:04 - 02502656 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\xH264E.DLL
2014-06-06 13:18 - 2012-01-12 16:44 - 00475136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFiGO_HookKey.dll
2014-06-06 13:18 - 2013-06-13 17:37 - 00156160 _____ () C:\Program Files (x86)\InstallShield Installation Information\{104BE4B8-D1DB-4170-977B-364960893DC8}\CloudAPI\CloudAPI.dll
2014-06-06 13:18 - 2013-03-21 19:38 - 00716800 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiMoveHelp.dll
2014-06-06 13:18 - 2012-04-25 14:47 - 00659456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\PhoneCtrlAPI.dll
2014-06-06 13:13 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll
2014-09-25 07:29 - 2014-09-23 06:06 - 01098056 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libglesv2.dll
2014-09-25 07:29 - 2014-09-23 06:06 - 00174408 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libegl.dll
2014-09-25 07:29 - 2014-09-23 06:07 - 08577864 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll
2014-09-25 07:29 - 2014-09-23 06:07 - 00331592 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll
2014-09-25 07:29 - 2014-09-23 06:06 - 01660232 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ffmpegsumo.dll
2014-09-25 07:29 - 2014-09-23 06:07 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: AMD FUEL Service => 2
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: asComSvc => 3
MSCONFIG\Services: asHmComSvc => 3
MSCONFIG\Services: AsSysCtrlService => 3
MSCONFIG\Services: AsusFanControlService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HiPatchService => 2
MSCONFIG\Services: HPSupportSolutionsFrameworkService => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LBTServ => 3
MSCONFIG\Services: ServiceLayer => 3
MSCONFIG\Services: SftService => 2
MSCONFIG\Services: WMPNetworkSvc => 3
MSCONFIG\Services: WSearch => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Rainer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Produktregistrierung.lnk => C:\Windows\pss\Logitech . Produktregistrierung.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amazon Cloud Player => "C:\Users\Rainer\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe"
MSCONFIG\startupreg: Amazon Music => "C:\Users\Rainer\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: ASUS AiChargerPlus Execute => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
MSCONFIG\startupreg: ASUS WiFi GO! FileTransfer Execute => C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFile\WiFileTransfer.exe
MSCONFIG\startupreg: Bing Bar => "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe"
MSCONFIG\startupreg: Cm106Sound => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: Microsoft Default Manager => "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
========================= Accounts: ==========================
Administrator (S-1-5-21-1467966622-3244609854-4136879408-500 - Administrator - Disabled)
Gast (S-1-5-21-1467966622-3244609854-4136879408-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-1467966622-3244609854-4136879408-1004 - Limited - Enabled)
Rainer (S-1-5-21-1467966622-3244609854-4136879408-1000 - Administrator - Enabled) => C:\Users\Rainer
==================== Faulty Device Manager Devices =============
Name: Generic Bluetooth Adapter
Description: Generic Bluetooth Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: GenericAdapter
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/14/2014 08:05:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AI Suite II.exe, Version: 2.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0x1274
Startzeit der fehlerhaften Anwendung: 0xAI Suite II.exe0
Pfad der fehlerhaften Anwendung: AI Suite II.exe1
Pfad des fehlerhaften Moduls: AI Suite II.exe2
Berichtskennung: AI Suite II.exe3
Error: (10/14/2014 08:03:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: EPUHelp.exe, Version: 1.0.0.31, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0x8a4
Startzeit der fehlerhaften Anwendung: 0xEPUHelp.exe0
Pfad der fehlerhaften Anwendung: EPUHelp.exe1
Pfad des fehlerhaften Moduls: EPUHelp.exe2
Berichtskennung: EPUHelp.exe3
Error: (10/14/2014 08:02:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TurboVHelp.exe, Version: 1.0.1.36, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0x478
Startzeit der fehlerhaften Anwendung: 0xTurboVHelp.exe0
Pfad der fehlerhaften Anwendung: TurboVHelp.exe1
Pfad des fehlerhaften Moduls: TurboVHelp.exe2
Berichtskennung: TurboVHelp.exe3
Error: (10/14/2014 08:02:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbamservice.exe, Version: 3.0.2.0, Zeitstempel: 0x5318d363
Name des fehlerhaften Moduls: mbamservice.exe, Version: 3.0.2.0, Zeitstempel: 0x5318d363
Ausnahmecode: 0x40000015
Fehleroffset: 0x0007da8a
ID des fehlerhaften Prozesses: 0x7f0
Startzeit der fehlerhaften Anwendung: 0xmbamservice.exe0
Pfad der fehlerhaften Anwendung: mbamservice.exe1
Pfad des fehlerhaften Moduls: mbamservice.exe2
Berichtskennung: mbamservice.exe3
Error: (10/14/2014 07:55:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x564
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (10/14/2014 07:54:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x87c
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (10/14/2014 06:43:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: EPUHelp.exe, Version: 1.0.0.31, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0x1358
Startzeit der fehlerhaften Anwendung: 0xEPUHelp.exe0
Pfad der fehlerhaften Anwendung: EPUHelp.exe1
Pfad des fehlerhaften Moduls: EPUHelp.exe2
Berichtskennung: EPUHelp.exe3
Error: (10/14/2014 06:43:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TurboVHelp.exe, Version: 1.0.1.36, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0xd90
Startzeit der fehlerhaften Anwendung: 0xTurboVHelp.exe0
Pfad der fehlerhaften Anwendung: TurboVHelp.exe1
Pfad des fehlerhaften Moduls: TurboVHelp.exe2
Berichtskennung: TurboVHelp.exe3
Error: (10/14/2014 06:43:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AI Suite II.exe, Version: 2.0.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0xcc0
Startzeit der fehlerhaften Anwendung: 0xAI Suite II.exe0
Pfad der fehlerhaften Anwendung: AI Suite II.exe1
Pfad des fehlerhaften Moduls: AI Suite II.exe2
Berichtskennung: AI Suite II.exe3
Error: (10/14/2014 06:43:06 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7847
System errors:
=============
Error: (10/14/2014 08:03:21 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%997
Error: (10/14/2014 08:03:21 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%997
Error: (10/14/2014 08:03:21 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%997
Error: (10/14/2014 08:03:21 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%997
Error: (10/14/2014 08:03:21 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%997
Error: (10/14/2014 08:03:21 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%997
Error: (10/14/2014 08:03:21 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x800703e5
Error: (10/14/2014 08:03:21 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x800703e5
Error: (10/14/2014 08:03:21 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x800703e5
Error: (10/14/2014 08:03:11 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%997
Microsoft Office Sessions:
=========================
Error: (10/14/2014 08:05:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: AI Suite II.exe2.0.0.000000000KERNELBASE.dll6.1.7601.1840953159a860eedfade0000c42d127401cfe7748e42e49bC:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exeC:\Windows\syswow64\KERNELBASE.dll0b9c698d-5368-11e4-9d04-e03f49a4f5c1
Error: (10/14/2014 08:03:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: EPUHelp.exe1.0.0.3100000000KERNELBASE.dll6.1.7601.1840953159a860eedfade0000c42d8a401cfe7747da91088C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exeC:\Windows\syswow64\KERNELBASE.dllcbf1a200-5367-11e4-9d04-e03f49a4f5c1
Error: (10/14/2014 08:02:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: TurboVHelp.exe1.0.1.3600000000KERNELBASE.dll6.1.7601.1840953159a860eedfade0000c42d47801cfe7746f61c40bC:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exeC:\Windows\syswow64\KERNELBASE.dllba76295e-5367-11e4-9d04-e03f49a4f5c1
Error: (10/14/2014 08:02:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbamservice.exe3.0.2.05318d363mbamservice.exe3.0.2.05318d363400000150007da8a7f001cfe77452c55cfaC:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exea1921cda-5367-11e4-9d04-e03f49a4f5c1
Error: (10/14/2014 07:55:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd56401cfe773772213e9C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dllb4f63437-5366-11e4-89eb-e03f49a4f5c1
Error: (10/14/2014 07:54:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd87c01cfe773593da99dC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll97ddcf77-5366-11e4-89eb-e03f49a4f5c1
Error: (10/14/2014 06:43:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: EPUHelp.exe1.0.0.3100000000KERNELBASE.dll6.1.7601.1840953159a860eedfade0000c42d135801cfe7696c264f9eC:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exeC:\Windows\syswow64\KERNELBASE.dlla9dbba05-535c-11e4-89eb-e03f49a4f5c1
Error: (10/14/2014 06:43:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: TurboVHelp.exe1.0.1.3600000000KERNELBASE.dll6.1.7601.1840953159a860eedfade0000c42dd9001cfe76969287fb1C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exeC:\Windows\syswow64\KERNELBASE.dlla6dba026-535c-11e4-89eb-e03f49a4f5c1
Error: (10/14/2014 06:43:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: AI Suite II.exe2.0.0.000000000KERNELBASE.dll6.1.7601.1840953159a860eedfade0000c42dcc001cfe7693e490515C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exeC:\Windows\syswow64\KERNELBASE.dll97cbee29-535c-11e4-89eb-e03f49a4f5c1
Error: (10/14/2014 06:43:06 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7847
CodeIntegrity Errors:
===================================
Date: 2014-06-06 07:55:12.313
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Rainer\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-06 07:55:12.240
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Rainer\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-06 07:55:12.122
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-06 07:55:12.050
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: AMD FX(tm)-8320 Eight-Core Processor
Percentage of memory in use: 19%
Total physical RAM: 12182.57 MB
Available physical RAM: 9749.43 MB
Total Pagefile: 30453.75 MB
Available Pagefile: 27711.29 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:1325.81 GB) (Free:887.89 GB) NTFS
Drive e: (Volume) (Fixed) (Total:146.48 GB) (Free:95.8 GB) NTFS
Drive g: (Volume) (Fixed) (Total:390.62 GB) (Free:335.56 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 4EF27132)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1325.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=390.6 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=146.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
GMER Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-10-14 08:33:12
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000069 SAMSUNG_ rev.1AQ1 1863,02GB
Running: Gmer-19357.exe; Driver: C:\Users\Rainer\AppData\Local\Temp\ufdiqpog.sys
---- Processes - GMER 2.1 ----
Library c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{3F79F783-4FA3-43CC-A7A1-48AB8DD6C673}\offreg.dll (*** suspicious ***) @ c:\Program Files\Microsoft Security Client\MsMpEng.exe [960](2014-10-14 06:17:34) 000007fefb7d0000
Library C:\Program Files (x86)\InstallShield Installation Information\{104BE4B8-D1DB-4170-977B-364960893DC8}\CloudAPI\CloudAPI.dll (*** suspicious ***) @ C:\Program Files (x86)\ASUS\AI Suite II\Remote GO!\AssistTools\WiFi GO! Server.exe [2156](2014-06-06 11:18:17) 00000000741d0000
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00163839be03
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00163839be03@ac932f9ab00c 0x92 0xEF 0x7B 0x70 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch@Epoch 5812
Reg HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch2@Epoch 2968
Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{C494897B-CEF9-4D69-B305-75A119898DA0}@DhcpIPAddress 10.0.0.3
Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{C494897B-CEF9-4D69-B305-75A119898DA0}@Lease 81764
Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{C494897B-CEF9-4D69-B305-75A119898DA0}@LeaseObtainedTime 1413266452
Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{C494897B-CEF9-4D69-B305-75A119898DA0}@T1 1413307334
Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{C494897B-CEF9-4D69-B305-75A119898DA0}@T2 1413335951
Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{C494897B-CEF9-4D69-B305-75A119898DA0}@LeaseTerminatesTime 1413348216
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00163839be03 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00163839be03@ac932f9ab00c 0x92 0xEF 0x7B 0x70 ...
---- EOF - GMER 2.1 ----
|
AdwCleaner auf deinen Desktop.
SecurityCheck und:
