| Leopold18 | 15.01.2015 19:25 |
Windows 7: Virus compatibilitycheck.exe spielt Werbung im Hintergrund ab
Hi Leute,
Hab ein Schadprogramm auf meinem Rechner es wird unter Prozesse mit dem Namen compatibilitycheck.exe aufgeführt und zieht ordentlich am Arbeitsspeicher zusätzlich spielt ständig Werbung im Hintergrund(Herkunft unbekannt). Die ganzen Logs hab ich schonmal vorbereitet.
Danke schonmal für eure Hilfe Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2015
Ran by ***** (administrator) on *****-PC on 15-01-2015 18:09:08
Running from C:\Users\*****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MA56RC77
Loaded Profiles: ***** (Available profiles: *****)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files\004\rqpbhevlkc64.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe
() C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_16_0_0_257_ActiveX.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
() C:\Users\*****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T2WY18QI\Defogger.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2013-05-30] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2461504 2014-09-17] (NVIDIA Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-11] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-227974254-1585915756-987249782-1000\...\Run: [KPeerNexonEU] => C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-05-30] (NEXON Inc.)
HKU\S-1-5-21-227974254-1585915756-987249782-1000\...\MountPoints2: E - E:\LaunchU3.exe -a
HKU\S-1-5-21-227974254-1585915756-987249782-1000\...\MountPoints2: {b718c5e7-09ed-11e3-b9b8-8f2c15aac824} - E:\LaunchU3.exe -a
HKU\S-1-5-18\...\Run: [Raptr] => C:\PROGRA~2\Raptr\raptrstub.exe --startup
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-06-01] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => "C:\PROGRA~2\SupTab\SEARCH~1.DLL" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA3100 Setup-Assistent.lnk
ShortcutTarget: NETGEAR WNA3100 Setup-Assistent.lnk -> C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-227974254-1585915756-987249782-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7f1382a-71b2-2f6c-3d3c-e0d93a0fa864&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=25/12/2013&type=hp1000
HKU\S-1-5-21-227974254-1585915756-987249782-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-227974254-1585915756-987249782-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-227974254-1585915756-987249782-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7f1382a-71b2-2f6c-3d3c-e0d93a0fa864&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=25/12/2013&type=hp1000
SearchScopes: HKLM -> {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_dnldstr_14_22_ie&cd=2XzuyEtN2Y1L1QzutAtDyEyCzy0AtByE0AzztDtDzy0DyBtDtN0D0Tzu0SzzyByBtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAtDyB0EyDtD0B0AtG0EtA0D0FtGyCyDyB0CtGyC0E0FyBtGtCyC0AyEtAyE0DzztCyCyBzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0F0E0CyDtAtAtAtGzzzzyEzztGzzyDtAzztGzytC0ByEtGyDzz0BtAzz0EyEtC0AyD0DyC2Q&cr=11409976&ir=
SearchScopes: HKU\S-1-5-21-227974254-1585915756-987249782-1000 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7f1382a-71b2-2f6c-3d3c-e0d93a0fa864&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=25/12/2013&type=hp1000
SearchScopes: HKU\S-1-5-21-227974254-1585915756-987249782-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7f1382a-71b2-2f6c-3d3c-e0d93a0fa864&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=25/12/2013&type=hp1000
SearchScopes: HKU\S-1-5-21-227974254-1585915756-987249782-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-227974254-1585915756-987249782-1000 -> {31090377-0740-419E-BEFC-A56E50500D5B} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKU\S-1-5-21-227974254-1585915756-987249782-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Winsock: Catalog9 01 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 01 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 02 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 03 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 04 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 05 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 06 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 07 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 08 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 19 C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll [523344] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-227974254-1585915756-987249782-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - No Path
CHR HKU\S-1-5-21-227974254-1585915756-987249782-1000\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - No Path
CHR HKLM-x32\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [805112 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [992560 2014-12-11] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-06-01] () [File not signed]
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [175136 2014-09-30] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-09-17] (NVIDIA Corporation)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-07-18] (Hi-Rez Studios) [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-09-17] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-30] ()
R2 rqpbhevlkc64; C:\Program Files\004\rqpbhevlkc64.exe [709120 2014-05-27] () [File not signed]
R2 Verifies and fixes application compatibility issues; C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe [91304 2015-01-12] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WSWNA3100; C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [278528 2010-01-12] () [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-09-16] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-09-16] ()
S3 NPF; C:\Windows\System32\DRIVERS\npf.sys [47632 2009-10-20] (CACE Technologies, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 USBMULCD; system32\drivers\CM10664.sys [X]
S3 XFDriver64; \??\C:\Program Files (x86)\Xfire2\XFDriver64.sys [X]
U3 uwdirpod; \??\C:\Users\*****\AppData\Local\Temp\uwdirpod.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-15 18:07 - 2015-01-15 18:08 - 00000474 _____ () C:\Users\*****\Desktop\defogger_disable.log
2015-01-15 18:07 - 2015-01-15 18:07 - 00000000 _____ () C:\Users\*****\defogger_reenable
2015-01-15 17:57 - 2015-01-15 18:09 - 00000000 ____D () C:\FRST
2015-01-14 20:50 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 20:50 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 20:50 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 20:50 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 20:50 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 20:50 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 20:50 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-13 19:15 - 2015-01-13 19:43 - 00000000 ____D () C:\RevoUninstallerPortable
2015-01-13 18:29 - 2015-01-15 18:07 - 00000112 _____ () C:\ProgramData\vKR874V.dat
2015-01-11 18:16 - 2015-01-13 19:43 - 00000000 ____D () C:\Users\*****\Documents\StarCitizen
2015-01-08 17:56 - 2015-01-15 17:44 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Compatibility Verifier
2015-01-04 19:49 - 2015-01-04 19:49 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-21 01:58 - 2014-12-21 01:58 - 00000000 ____D () C:\Users\*****\AppData\Local\Introversion
2014-12-17 20:09 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-17 20:09 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-15 18:07 - 2013-05-30 17:00 - 00000000 ____D () C:\Users\*****
2015-01-15 17:42 - 2013-05-30 16:50 - 01410096 _____ () C:\Windows\WindowsUpdate.log
2015-01-15 17:40 - 2013-06-02 18:07 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{088C1252-3DEA-4C20-BC5F-9DDF24126420}
2015-01-15 17:34 - 2013-05-30 17:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-15 03:30 - 2009-07-14 05:45 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-15 03:30 - 2009-07-14 05:45 - 00023152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-15 03:23 - 2014-08-20 20:59 - 00024651 _____ () C:\Windows\setupact.log
2015-01-15 03:23 - 2013-05-30 17:22 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-15 03:23 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-14 21:21 - 2013-05-30 19:16 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-14 21:13 - 2013-05-30 17:09 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-14 20:59 - 2013-05-30 22:38 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2015-01-14 20:59 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-01-14 20:54 - 2014-08-22 15:02 - 00002238 _____ () C:\Windows\PFRO.log
2015-01-14 20:54 - 2013-07-16 23:11 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 20:40 - 2013-05-31 01:10 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 20:37 - 2009-07-14 18:58 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-01-14 20:37 - 2009-07-14 18:58 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-01-14 20:37 - 2009-07-14 06:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-14 20:34 - 2013-05-30 17:55 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-14 20:34 - 2013-05-30 17:55 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-14 20:34 - 2013-05-30 17:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-13 19:44 - 2014-07-29 16:55 - 00000000 ____D () C:\Users\*****\AppData\Roaming\VOPackage
2015-01-13 19:44 - 2014-07-29 16:55 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2015-01-13 19:44 - 2014-05-23 00:31 - 00000000 ____D () C:\Program Files (x86)\Supraball
2015-01-13 19:44 - 2013-06-15 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudioExpert
2015-01-13 19:44 - 2013-06-15 16:36 - 00000000 ____D () C:\Program Files (x86)\AudioExpert
2015-01-13 19:44 - 2013-05-30 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics
2015-01-13 19:44 - 2013-05-30 17:44 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics
2015-01-13 19:43 - 2014-10-03 20:51 - 00000000 ____D () C:\NVIDIA
2015-01-13 19:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-01-11 18:16 - 2013-08-26 21:07 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-01-11 17:27 - 2013-08-26 21:07 - 00000000 ___HD () C:\Windows\msdownld.tmp
2015-01-11 17:27 - 2012-09-28 17:36 - 00000000 ____D () C:\temp
2015-01-09 17:20 - 2013-06-15 16:36 - 00000000 ____D () C:\Users\*****\AppData\Roaming\AudioXP
2015-01-06 05:48 - 2013-05-30 18:17 - 00000000 ____D () C:\Users\*****\AppData\Roaming\TS3Client
2015-01-06 04:53 - 2013-11-23 23:40 - 00000000 ____D () C:\Users\*****\AppData\Local\Arma 3
2015-01-06 00:04 - 2013-08-31 21:06 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-31 17:03 - 2014-05-27 18:25 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Skype
2014-12-26 15:34 - 2013-05-30 19:47 - 00000000 ____D () C:\Windows\System32\Tasks\Games
Files to move or delete:
====================
C:\ProgramData\vKR874V.dat
Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\avgnt.exe
C:\Users\*****\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\*****\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\*****\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\*****\AppData\Local\Temp\nvStInst.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-15 03:53
==================== End Of Log ============================
Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 18:08 on 15/01/2015 (*****)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2015
Ran by ***** at 2015-01-15 18:13:47
Running from C:\Users\*****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MA56RC77
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version: - The Fun Pimps)
7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )
Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{123A22CB-6D84-4135-A71F-886C9119E996}) (Version: 99.9 - Eyeo GmbH)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.257 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Antivirus Pro (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Archeage (HKLM-x32\...\Glyph Archeage) (Version: - Trion Worlds, Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
Assassin's Creed (HKLM-x32\...\{8CFA9151-6404-409A-AF22-4632D04582FD}) (Version: 1.02 - Ubisoft)
AudioExpert 9.6 (HKLM-x32\...\{B65893CF-96D3-4085-917B-D79CBB69257A}_is1) (Version: - Ulrich Decker Software Entwicklung)
AwesomiumSetup (HKLM-x32\...\{19EF99D1-7EE6-4B5E-ABEE-0B3825F703B0}) (Version: 1.00.0000 - SIX Networks GmbH)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
CCG Launcher version 0.4 (HKLM-x32\...\{E8BE34DD-02E6-4445-A96B-70931D747024}_is1) (Version: 0.4 - Custom Combat Gaming)
CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{D7ECDD70-EBAB-42AD-8BE3-2F4D1CEC70A7}) (Version: 0.92.79 - Dotjosh Studios)
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version: - Capcom Game Studio Vancouver)
Dead Space™ (HKLM-x32\...\{4D87DC92-C328-46EC-A7B4-9C88129DC696}) (Version: 1.0.222.0 - Electronic Arts)
Dead Space™ 2 (HKLM-x32\...\{96D06FDD-6AF4-4309-BC1B-1C9588B0575E}) (Version: 1.0.948.0 - Electronic Arts)
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
DEFIANCE (HKLM-x32\...\{570174D7-87BF-4B48-878F-29C57E387D38}) (Version: 1.00.0000 - Trion Worlds, Inc.)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
From Dust (HKLM-x32\...\Steam App 33460) (Version: - Ubisoft Montpellier)
From The Depths (HKLM-x32\...\Steam App 268650) (Version: - Brilliant Skies Ltd.)
Glyph (HKLM-x32\...\Glyph) (Version: - Trion Worlds, Inc.)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version: - Reto-Moto)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
How to Survive (HKLM-x32\...\Steam App 250400) (Version: - )
Installer (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version: - Squad)
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Life is Feudal: Your Own (HKLM-x32\...\Steam App 290080) (Version: - Bitbox Ltd.)
Lost Planet 3 (HKLM-x32\...\Steam App 226720) (Version: - Spark Unlimited)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
My Game Long Name (HKLM\...\UDK-3a6f8a36-0960-42e5-bc9b-a1bdb648d3a7) (Version: - Epic Games, Inc.)
My Game Long Name (HKLM\...\UDK-9e19f136-ffbf-41bd-9062-2a4f023d3d0b) (Version: - Epic Games, Inc.)
NETGEAR WNA3100 wireless USB 2.0 adapter (HKLM-x32\...\{C2425F91-1F7B-4037-9A05-9F290184798D}) (Version: 1.01.206 - NETGEAR)
Nexon Game Manager (HKLM-x32\...\{EA2DB6E0-72C5-4ef9-A3A0-E6705F4A6A9E}) (Version: - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.3.3 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.1.15.109 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version: - Ndemic Creations)
Planetary Annihilation (HKLM-x32\...\Steam App 233250) (Version: - Uber Entertainment)
Prison Architect (HKLM-x32\...\Steam App 233450) (Version: - Introversion Software)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.11.1127.2009 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5995 - Realtek Semiconductor Corp.)
Red Faction: Guerrilla (x32 Version: 1.0.0003.131 - THQ) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.30.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden
Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)
Silent Hunter 5: Battle of the Atlantic (HKLM-x32\...\Steam App 48110) (Version: - Ubisoft Entertainment)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2107.1 - Hi-Rez Studios)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )
SpeedRunners (HKLM-x32\...\Steam App 207140) (Version: - DoubleDutch Games)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Supraball (HKLM-x32\...\Supraball) (Version: - Supra Games Gbr)
TeamSpeak 3 Client (HKU\S-1-5-21-227974254-1585915756-987249782-1000\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Forest (HKLM-x32\...\Steam App 242760) (Version: - Endnight Games Ltd)
The Stomping Land (HKLM-x32\...\Steam App 263440) (Version: - SuperCrit)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - )
theHunter (HKLM-x32\...\Steam App 253710) (Version: - Expansive Worlds)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.7.2 - Electronic Arts)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vindictus (HKLM-x32\...\Vindictus) (Version: - )
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version: - )
Viscera Cleanup Detail: Santa's Rampage (HKLM-x32\...\Steam App 265210) (Version: - RuneStorm)
Viscera Cleanup Detail: Shadow Warrior (HKLM-x32\...\Steam App 255520) (Version: - RuneStorm)
War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
Wing Commander III (HKLM-x32\...\{F96B9930-E22A-44D6-81B5-6C8E92C21B4B}) (Version: 2.0.0.2 - Electronic Arts)
WinRAR 5.10 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.1 - win.rar GmbH)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
14-01-2015 21:13:02 Entfernt Red Faction Guerrilla
15-01-2015 03:00:50 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {04B84437-5207-4EED-86A8-39DFA796342F} - System32\Tasks\DSite => C:\Users\*****\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {0ACE1E5B-F719-413C-A200-9984311D1723} - System32\Tasks\4784 => Wscript.exe C:\Users\*****\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {0F6421C4-D9DA-4FC7-9890-E0A096FBAC90} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-14] (Adobe Systems Incorporated)
Task: {1D134B48-7B04-42FB-B48D-2D12D321F7E1} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader Updater\YourFileUpdater.exe <==== ATTENTION
Task: {2500DE3B-A929-4078-B13E-2DC18AD4EC2F} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {3A44978A-2649-4215-86CB-F5CD229C72E6} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {4A20F1C2-6FEE-4DD7-964B-960AEFF5479A} - System32\Tasks\UpdaterEX => C:\Users\*****\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {64938A2F-B2B2-4BAF-8764-47B46125CF6B} - System32\Tasks\pricemeterdownloader => C:\Users\*****\AppData\Local\PriceMeter\pricemeterd.exe <==== ATTENTION
Task: {66219FFF-53F3-45AF-A28B-90A23393DB02} - System32\Tasks\{19527989-AFFA-4AAA-9DF7-3E45EFD7C8B1} => pcalua.exe -a C:\Users\*****\AppData\Roaming\sweet-page\UninstallManager.exe -c -ptid=cor
Task: {6ACFDC1A-D25D-4A41-A728-FC6D66190E4F} - System32\Tasks\{F8277B30-C5AA-49C6-BF77-A9FE39AB0527} => pcalua.exe -a C:\Users\*****\Documents\ARMA2_OA_Build_105785\ARMA2_OA_Build_105785.exe -d C:\Users\*****\Documents\ARMA2_OA_Build_105785
Task: {80BB77C6-9B25-455B-88A8-F2DED9303F44} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {8A7C9C93-81FA-4A52-862D-B569FF4299ED} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {988203A2-DE67-492F-8136-07B41FB3CF2C} - System32\Tasks\DealPly => C:\Users\*****\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {A14F58D0-4986-4DA6-ADD3-89112631F7F9} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {BEA4284A-CD3A-4D73-A387-7C10C9032DBA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)
Task: {E9F8E123-92DC-4580-BD8F-7F35CFD2592A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\UpdaterEX.job => C:\Users\*****\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2013-06-01 22:49 - 2013-10-30 21:18 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-27 11:34 - 2014-05-27 11:34 - 00709120 _____ () C:\Program Files\004\rqpbhevlkc64.exe
2015-01-14 20:33 - 2015-01-12 13:55 - 00091304 _____ () C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe
2013-05-30 17:09 - 2010-01-12 10:11 - 00278528 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe
2013-05-30 17:21 - 2014-09-13 22:53 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-05-30 17:09 - 2010-01-20 16:44 - 04562944 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe
2015-01-14 20:33 - 2015-01-13 23:12 - 51548328 _____ () C:\Users\*****\AppData\Roaming\Compatibility Verifier\compatibilitycheck.exe
2015-01-15 18:06 - 2015-01-15 18:06 - 00050477 _____ () C:\Users\*****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T2WY18QI\Defogger.exe
2013-05-30 17:09 - 2009-12-11 10:56 - 00368640 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WifiLib.dll
2013-05-30 17:09 - 2009-08-28 15:50 - 00282624 _____ () C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvcLib.dll
2015-01-14 20:34 - 2015-01-07 22:22 - 01360552 _____ () C:\Users\*****\AppData\Roaming\Compatibility Verifier\libglesv2.dll
2015-01-08 17:56 - 2015-01-07 22:22 - 00214184 _____ () C:\Users\*****\AppData\Roaming\Compatibility Verifier\libegl.dll
2015-01-14 20:34 - 2015-01-07 22:22 - 00985768 _____ () C:\Users\*****\AppData\Roaming\Compatibility Verifier\ffmpegsumo.dll
2015-01-14 20:34 - 2015-01-07 22:22 - 16827048 _____ () C:\Users\*****\AppData\Roaming\Compatibility Verifier\NPSWF32_15_0_0_189.dll
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-227974254-1585915756-987249782-500 - Administrator - Disabled)
Gast (S-1-5-21-227974254-1585915756-987249782-501 - Limited - Disabled)
***** (S-1-5-21-227974254-1585915756-987249782-1000 - Administrator - Enabled) => C:\Users\*****
==================== Faulty Device Manager Devices =============
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Realtek PCIe GBE Family Controller
Description: Realtek PCIe GBE Family Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8167
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/15/2015 06:12:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x2568
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3
Error: (01/15/2015 03:53:45 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (01/14/2015 08:49:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm IEXPLORE.EXE, Version 11.0.9600.17496 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1148
Startzeit: 01d03032f56d315c
Endzeit: 13
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID:
Error: (01/14/2015 08:31:32 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: Die Lizenzdatei enthält keine gültige Lizenz. Der Dienst wird beendet!
Error: (01/13/2015 08:19:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: divE72.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Name des fehlerhaften Moduls: divE72.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005724a
ID des fehlerhaften Prozesses: 0x1150
Startzeit der fehlerhaften Anwendung: 0xdivE72.tmp0
Pfad der fehlerhaften Anwendung: divE72.tmp1
Pfad des fehlerhaften Moduls: divE72.tmp2
Berichtskennung: divE72.tmp3
Error: (01/13/2015 08:18:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: divEFEB.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Name des fehlerhaften Moduls: divEFEB.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005724a
ID des fehlerhaften Prozesses: 0x410
Startzeit der fehlerhaften Anwendung: 0xdivEFEB.tmp0
Pfad der fehlerhaften Anwendung: divEFEB.tmp1
Pfad des fehlerhaften Moduls: divEFEB.tmp2
Berichtskennung: divEFEB.tmp3
Error: (01/13/2015 08:17:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: div70FC.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Name des fehlerhaften Moduls: div70FC.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005724a
ID des fehlerhaften Prozesses: 0xbfc
Startzeit der fehlerhaften Anwendung: 0xdiv70FC.tmp0
Pfad der fehlerhaften Anwendung: div70FC.tmp1
Pfad des fehlerhaften Moduls: div70FC.tmp2
Berichtskennung: div70FC.tmp3
Error: (01/13/2015 08:08:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: divA9A8.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Name des fehlerhaften Moduls: divA9A8.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005724a
ID des fehlerhaften Prozesses: 0x1384
Startzeit der fehlerhaften Anwendung: 0xdivA9A8.tmp0
Pfad der fehlerhaften Anwendung: divA9A8.tmp1
Pfad des fehlerhaften Moduls: divA9A8.tmp2
Berichtskennung: divA9A8.tmp3
Error: (01/13/2015 08:04:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: div7484.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Name des fehlerhaften Moduls: div7484.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005724a
ID des fehlerhaften Prozesses: 0x1858
Startzeit der fehlerhaften Anwendung: 0xdiv7484.tmp0
Pfad der fehlerhaften Anwendung: div7484.tmp1
Pfad des fehlerhaften Moduls: div7484.tmp2
Berichtskennung: div7484.tmp3
Error: (01/13/2015 08:01:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: div34E6.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Name des fehlerhaften Moduls: div34E6.tmp, Version: 2.6.1.8, Zeitstempel: 0x4f3db06c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005724a
ID des fehlerhaften Prozesses: 0x107c
Startzeit der fehlerhaften Anwendung: 0xdiv34E6.tmp0
Pfad der fehlerhaften Anwendung: div34E6.tmp1
Pfad des fehlerhaften Moduls: div34E6.tmp2
Berichtskennung: div34E6.tmp3
System errors:
=============
Error: (01/15/2015 03:23:05 AM) (Source: RTL8167) (EventID: 5003) (User: )
Description: Realtek PCIe GBE Family Controller : Netzwerkadapter wurde nicht gefunden.
Error: (01/14/2015 09:00:22 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error: (01/14/2015 08:54:34 PM) (Source: RTL8167) (EventID: 5003) (User: )
Description: Realtek PCIe GBE Family Controller : Netzwerkadapter wurde nicht gefunden.
Error: (01/14/2015 08:31:08 PM) (Source: RTL8167) (EventID: 5003) (User: )
Description: Realtek PCIe GBE Family Controller : Netzwerkadapter wurde nicht gefunden.
Error: (01/13/2015 07:45:16 PM) (Source: RTL8167) (EventID: 5003) (User: )
Description: Realtek PCIe GBE Family Controller : Netzwerkadapter wurde nicht gefunden.
Error: (01/13/2015 06:23:49 PM) (Source: RTL8167) (EventID: 5003) (User: )
Description: Realtek PCIe GBE Family Controller : Netzwerkadapter wurde nicht gefunden.
Error: (01/11/2015 11:20:47 AM) (Source: RTL8167) (EventID: 5003) (User: )
Description: Realtek PCIe GBE Family Controller : Netzwerkadapter wurde nicht gefunden.
Error: (01/09/2015 10:45:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/09/2015 10:45:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (01/09/2015 10:45:28 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Microsoft Office Sessions:
=========================
Error: (01/15/2015 06:12:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c0000005000011aa256801d030e646379c4bC:\Users\*****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T2WY18QI\Gmer-19357.exeC:\Users\*****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T2WY18QI\Gmer-19357.exea64bd3f9-9cd9-11e4-b06d-ea90f88d1c05
Error: (01/15/2015 03:53:45 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\Steam\steamapps\common\thehunter\launcher\launcher.exe
Error: (01/14/2015 08:49:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE11.0.9600.17496114801d03032f56d315c13C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Error: (01/14/2015 08:31:32 PM) (Source: Avira Antivirus) (EventID: 4117) (User: NT-AUTORITÄT)
Description: 0x0
Error: (01/13/2015 08:19:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: divE72.tmp2.6.1.84f3db06cdivE72.tmp2.6.1.84f3db06cc00000050005724a115001d02f65cb739bdbC:\Users\*****\AppData\Local\Temp\divE71.tmp\divE72.tmpC:\Users\*****\AppData\Local\Temp\divE71.tmp\divE72.tmp0929fa5c-9b59-11e4-a30f-e2a67a38bc06
Error: (01/13/2015 08:18:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: divEFEB.tmp2.6.1.84f3db06cdivEFEB.tmp2.6.1.84f3db06cc00000050005724a41001d02f65c6cbe54dC:\Users\*****\AppData\Local\Temp\divEFEA.tmp\divEFEB.tmpC:\Users\*****\AppData\Local\Temp\divEFEA.tmp\divEFEB.tmp0480bd2e-9b59-11e4-a30f-e2a67a38bc06
Error: (01/13/2015 08:17:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: div70FC.tmp2.6.1.84f3db06cdiv70FC.tmp2.6.1.84f3db06cc00000050005724abfc01d02f658c5b00faC:\Users\*****\AppData\Local\Temp\div70FB.tmp\div70FC.tmpC:\Users\*****\AppData\Local\Temp\div70FB.tmp\div70FC.tmpca548301-9b58-11e4-a30f-e2a67a38bc06
Error: (01/13/2015 08:08:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: divA9A8.tmp2.6.1.84f3db06cdivA9A8.tmp2.6.1.84f3db06cc00000050005724a138401d02f645c82c7adC:\Users\*****\AppData\Local\Temp\divA9A7.tmp\divA9A8.tmpC:\Users\*****\AppData\Local\Temp\divA9A7.tmp\divA9A8.tmp9a5c8cb2-9b57-11e4-a30f-e2a67a38bc06
Error: (01/13/2015 08:04:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: div7484.tmp2.6.1.84f3db06cdiv7484.tmp2.6.1.84f3db06cc00000050005724a185801d02f63b8235f3cC:\Users\*****\AppData\Local\Temp\div7483.tmp\div7484.tmpC:\Users\*****\AppData\Local\Temp\div7483.tmp\div7484.tmpf70656f9-9b56-11e4-a30f-e2a67a38bc06
Error: (01/13/2015 08:01:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: div34E6.tmp2.6.1.84f3db06cdiv34E6.tmp2.6.1.84f3db06cc00000050005724a107c01d02f63604ebe91C:\Users\*****\AppData\Local\Temp\div34E5.tmp\div34E6.tmpC:\Users\*****\AppData\Local\Temp\div34E5.tmp\div34E6.tmp9e38fe59-9b56-11e4-a30f-e2a67a38bc06
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Percentage of memory in use: 46%
Total physical RAM: 8136.01 MB
Available physical RAM: 4373.05 MB
Total Pagefile: 16270.2 MB
Available Pagefile: 11673.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.41 GB) (Free:280.62 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F1D457FB)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-01-15 18:49:59
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST31000524AS rev.JC4B 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\*****\AppData\Local\Temp\uwdirpod.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 448 fffff80003406000 45 bytes [00, 00, 16, 02, 4E, 74, 66, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 495 fffff8000340602f 29 bytes [00, 01, 00, 06, 00, 00, 00, ...]
---- EOF - GMER 2.1 ----
|
So funktioniert es:
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
SecurityCheck und:
und 
und speichere die Logdatei auf Deinem Desktop.
